SIG P320 Safety Systems, Drop Safety & Voluntary Upgrade Guide

How the P320's internal safeties work, what the 2017 drop-fire issue actually was, what SIG changed in the Voluntary Upgrade Program, how to check an older pistol, how manual safeties and holsters fit into the picture, and what current testing and litigation do — and do not — prove.

Internal Safeties   |   Drop Safety   |   2017 Upgrade   |   Manual Safety   |   Holsters   |   Current Evidence

The 2017 P320 drop-fire issue was real enough that SIG changed the design. SIG's own Voluntary Upgrade page says additional testing found that, under certain impact angles and conditions outside the standardized drop tests the pistol had already passed, a discharge could potentially occur. [S2]

The upgrade reduced the mass of the trigger, sear and striker and added a mechanical disconnector; upgraded slides also received a disconnector notch. All P320s produced after August 8, 2017 incorporate the upgraded design, according to SIG. [S2, S3]

That historical drop-fire mechanism should not be casually used as the explanation for every later report of a P320 discharging in a holster. Those later cases involve different factual and legal theories, and several remain disputed or unresolved. [S7, S8]

SIG's current P320 manual identifies the striker safety lock and disconnect safety as principal internal safety features. SIG's current technical pages and the U.S. military's 2026 MHS description additionally identify primary and secondary sear-notion redundancy in the upgraded architecture. [S1, S3, S6]

Drop-safety testing asks whether impact and inertia can cause the firing system to release without normal trigger actuation. It does not mean the pistol somehow refuses to fire if a finger, drawstring, holster edge, seatbelt hardware or another object physically depresses the trigger.

SIG's current manual is explicit: if the P320's trigger is depressed — even unintentionally by a finger or foreign object — the pistol will fire as designed unless an engaged manual safety prevents the trigger movement. [S1]

The original commercial P320 had already passed the standardized U.S. and government drop tests SIG cites. In August 2017, however, SIG announced that additional testing beyond those protocols showed a potential for discharge after impacts at certain angles and conditions not covered by the standard test orientations. [S2]

SIG called the response a Voluntary Upgrade Program, not a recall. Whatever label somebody prefers, the mechanical fact is straightforward: SIG changed the pistol's firing-system components and offered the modification free to existing owners. [S2]

This matters because two statements can be true at the same time: the original pistol passed the standardized tests then in use, and later non-standardized impact testing exposed a vulnerability that led SIG to redesign parts of the system.

SIG's current VUP page identifies four core changes: reduced trigger mass, reduced sear mass, reduced striker mass and the addition of a mechanical disconnector. The slide receives the disconnector cut that works with the upgraded FCU. [S2]

According to SIG, P320 pistols manufactured after August 8, 2017 already contain the upgraded design. Older commercial P320s can be checked through SIG's serial-number tool or customer service. [S2]

The thinner, reduced-mass curved trigger is the most obvious external clue on an otherwise stock pistol, and the upgraded slide has the disconnector notch. But triggers and slides get replaced. If the history of the gun is unknown, serial-number verification is better than eyeballing one part.

SIG says the upgrade remains free and requires the pistol to be returned to SIG. If you own an early P320 that has never been upgraded, this is not a job we would substitute with random aftermarket parts. The factory program changes multiple interacting components. [S2]

SIG's VUP instructions specifically tell owners of pre-upgrade CAL-X kits to include their P320 slides because the striker assemblies are replaced and the slides require the disconnector cut. [S2]

That is a useful reminder for used-gun buyers: an upgraded FCU paired with an old, unknown pre-upgrade slide is not something to guess about. Verify the actual upper.

Current commercial P320s are offered both with and without a manual safety. SIG's current manual frames that as a configuration decision that should consider intended use, training, holster, carry position and operator experience. [S1]

When engaged, the manual safety prevents the trigger from being pulled. That can add protection against unintended trigger movement. It also means the user must reliably disengage it when the pistol is needed. [S1]

Manual safety vs no manual safety is not the same question as drop safety. The internal drop-safety architecture is still supposed to work whether the pistol has a thumb safety or not.

The military M17/M18 share the P320 internal-safety concept and use the upgraded architecture, but they also include an ambidextrous manual safety and are a specific MHS configuration. Their testing history is therefore useful evidence about the architecture, not proof that every commercial P320 configuration is mechanically identical. [S5, S6, S10]

That distinction matters whenever somebody says “the Army proved every P320 safe” or, on the other side, “an incident involving a commercial P320 proves the M18 is defective.” Those are both broader claims than the evidence supports.

Use M17/M18 evidence for what it actually establishes about the MHS configuration.

After a July 2025 Air Force incident involving an allegation of an uncommanded M18 discharge, Air Force Global Strike Command paused M18 use and inspected 7,970 pistols. The initial command inspection identified discrepancies in 191 weapons, primarily component wear, but reported no indication of a discharge attributable to weapon malfunction. [S5]

The Department of the Air Force then ordered a broader supplemental inspection. Its final results, released September 2, 2026, said that 100% of the inspected weapons showed no condition that could have caused an uncommanded discharge. The Air Force incorporated the supplemental inspection criteria into its continuing M18 inspection process. [S5]

The Army's MHS program office separately stated in August 2026 that investigated M17/M18 incidents had not produced a mechanically-caused accidental discharge and described four internal safeties plus the external manual safety. [S6]

They should neither be ignored nor lazily treated as proof of the old 2017 drop mechanism.

Multiple plaintiffs have filed product-liability suits alleging P320 discharges while holstered or without an intentional trigger pull. Recent appellate decisions show that the legal picture remains contested. In Slatowski v. SIG Sauer, the Third Circuit in 2025 affirmed exclusion of specific expert causation opinions as insufficiently tested, but reversed summary judgment and allowed the plaintiff's design-defect case to proceed to trial. [S7]

In Colwell v. SIG Sauer, the Second Circuit in May 2026 likewise upheld exclusion of certain expert causation opinions but vacated summary judgment for SIG, holding that a jury could still consider the remaining evidence. Importantly, that case did not proceed on a theory that the pistol spontaneously fired with zero trigger movement; the dispute concerned what may have actuated the trigger and whether alternative safety designs would have changed the outcome. [S8]

A lawsuit surviving summary judgment is not a judicial finding that the pistol is defective. A lawsuit being dismissed is not proof that every reported incident was user-caused. Read the actual holding and the actual evidence.

SIG states that the current P320 cannot discharge without the trigger being actuated, that the upgraded pistol exceeds multiple drop-test protocols, and that post-2017 rough-handling testing has included substantially more drop orientations and impacts than standard protocols require. [S3, S4]

Those are manufacturer claims backed by SIG's testing and documentation. Where outside plaintiffs, experts or courts disagree about design risk or causation, this Forge File identifies that disagreement instead of presenting SIG's position as an independent finding.

The internal safeties are inside the pistol. Trigger protection often comes from the equipment around it.

SIG's current manual warns that light-bearing holsters can have larger openings around the trigger-guard area and says users should verify the holster is designed for the exact pistol and installed accessories. It also specifically warns about foreign objects and vehicle equipment such as seatbelts contacting the firearm or holster. [S1]

That does not mean every light-bearing holster is unsafe. It means trigger access, rigidity, fit, light body and holster geometry need to be evaluated as one system.

This is where generic “never modify a carry gun” advice stops being useful.

A properly engineered trigger can improve reach, leverage, break, reset and practical shootability without deliberately removing factory safety functions. Grayguns, for example, states that its current P320 trigger work is designed around preserving factory safety values and says it no longer provides trigger products/services for pre-upgrade P320s that have not completed SIG's Voluntary Upgrade. [S9]

But the burden goes up when you modify the FCU. Current SIG instructions warn that unauthorized alterations can change function, and Grayguns' own technical material warns against defeating or removing P320 safety systems. [S1, S9]

Our standard: know which safety relationships the part changes, use a reputable design, install it correctly, perform the required safety/function checks, and validate the finished pistol. “Aftermarket” is not a diagnosis. Neither is “factory.”

A P320 stopping slightly short of battery is a cycling/chambering problem until evidence shows otherwise. Barrel fit, fouling, ammunition, recoil system, slide fit, optic configuration and compensator setup can all contribute to the slide not reaching its intended forward position.

The upgraded design includes a mechanical disconnector, and Grayguns has published controlled destructive testing of the P320's out-of-battery behavior. That testing is Grayguns' technical work — not a SIG factory certification — and it explicitly warns users not to defeat safety systems. [S2, S9]

If a pistol repeatedly stops out of battery, fix the cycling problem. Do not normalize it because somebody on a forum says “the disconnector will handle it.”

Do not turn the pistol into your own YouTube drop-test rig.

SIG's current manual says abusive events such as a drop or impact can damage mechanical safeties. Its instruction is to unload and clear the firearm and have it inspected by a certified SIG armorer before continued use. SIG's Voluntary Upgrade page likewise tells consumers not to conduct their own drop testing, noting that standardized tests are performed in controlled environments without live ammunition. [S1, S2]

That is sensible guidance for any serious impact event: inspect the actual gun rather than assuming “drop safe” means indestructible.

1. Verify the serial through SIG if the pistol could predate the August 2017 upgraded production.
2. Do not rely only on trigger shape. Triggers, slides and FCU parts can be replaced.
3. Inspect the slide/FCU relationship if the gun has multiple uppers or old caliber-exchange kits.
4. Identify aftermarket FCU parts. Know what trigger, sear, springs or striker components are actually installed.
5. Verify manual-safety configuration and that the grip module is correctly cut for that FCU.
6. Check the holster if the pistol is being sold as a carry package — especially light-bearing setups.
7. Function-check and live-fire the actual configuration before trusting it for carry, duty or defensive use.

The original 2017 drop vulnerability and the factory design change are documented facts. [S2]

Current SIG documentation describes multiple internal safeties, and current P320/MHS testing cited by SIG and the U.S. military reports successful rough-handling/drop-safety results. [S1, S3, S5, S6]

Later unintended-discharge allegations continue to exist, and some civil cases are still moving through courts. Those allegations are not the same thing as the 2017 drop-fire mechanism, and appellate rulings allowing claims to proceed are not technical findings that the pistol can fire without trigger movement. [S7, S8]

That is the useful middle ground: acknowledge the documented history, verify old pistols, understand the current design, and refuse to turn either manufacturer marketing or internet panic into a substitute for evidence.

Know Which P320 You Actually Have.

Verify the upgrade status, understand the safety architecture, protect the trigger, and validate any modified configuration before you trust it.

Primary technical weight was given to SIG's current P320 manual, Voluntary Upgrade material, current safety-system documentation, and official 2026 U.S. military inspection statements. Court opinions are included to describe the status of disputed product-liability claims, not as substitutes for mechanical testing.

Research reviewed: October 3, 2026.

IRONKELLS ARMORY | SIG P320 FORGE FILES

Understand the Safety System. Don't Argue With a Meme.

Verify the gun. Protect the trigger. Preserve the safety architecture. Follow the evidence.