Defense and national security

Frameworks

• NIST AI RMF

  A voluntary, sector-agnostic US framework that organizes AI risk work into four functions - Govern, Map, Measure and Manage.

  Tools tagged NIST AI RMF

• CMMC / NIST SP 800-171

  How DoD contractor cybersecurity rules apply to AI systems that process controlled unclassified information. The rules are technology-neutral, and CMMC Phase 2 is currently suspended.

  Tools tagged CMMC / NIST SP 800-171

• DoD Responsible AI

  The Department of Defense's five AI ethical principles, its Responsible AI Strategy and Implementation Pathway, and the public CDAO toolkit (released as RAI, now titled AIA Toolkit).

  Tools tagged DoD Responsible AI

• ISO/IEC 23894

  International guidance on managing AI-specific risk for organizations that develop, produce, deploy or use AI products, systems and services.

  Tools tagged ISO/IEC 23894

• UK MOD JSP 936

  The Ministry of Defence's principal policy directive for safe and responsible AI adoption across Defence projects that include AI.

  Tools tagged UK MOD JSP 936

• NATO PRUAI

  Six Allied principles for AI in defence — Lawfulness, Responsibility and Accountability, Explainability and Traceability, Reliability, Governability, and Bias Mitigation.

  Tools tagged NATO PRUAI

• DoD Directive 3000.09

  DoD policy for autonomous and semi-autonomous weapon systems. It requires appropriate human judgment over the use of force, V&V and T&E, and senior review. It does not cover unarmed or non-weapon AI.

  Tools tagged DoD Directive 3000.09

• DoD RAI Strategy

  The Department’s RAI Strategy and Implementation Pathway operationalizes the five AI ethical principles. The June 2022 pathway names 64 lines of effort. It is Department direction, not a product certificate.

  Tools tagged DoD RAI Strategy

• CDAO RAI Toolkit

  CDAO’s public self-evaluation toolkit for aligning AI projects to DoD (now DoW) AI Ethical Principles. Released November 2023 as the RAI Toolkit; the live Tradewinds page titles it the AIA Toolkit.

  Tools tagged CDAO RAI Toolkit

• NIST SP 800-218A

  A July 2024 SSDF Community Profile that adds generative-AI and dual-use foundation-model practices to NIST SP 800-218. Guidance for model producers, system producers and acquirers — not a certification.

  Tools tagged NIST SP 800-218A

Listed tools

• 6clicks (ISO 42001)

  6clicks · Commercial · Compliance automation

  GRC with a pre-configured ISO/IEC 42001:2023 AIMS, Hailey AI mapping, SoA and Hub & Spoke. Cross-maps ISO 27001 and the EU AI Act. Homepage names SaaS, sovereign cloud or on-prem, and cloud, on-premises, air-gapped or hybrid.

  • Defense & national security
  • Other safety-critical
  • ISO/IEC 42001
  • EU AI Act

• Adelard ASCE

  Adelard (NCC Group) · Commercial · Safety engineering

  Assurance-case software with CAE (including ASCAD 2.0 for autonomous systems and AI-driven machine-learning behaviour) and GSN Version 3 plus a Modular GSN plugin. Node-locked and floating licences; both can operate with limited or no Internet. Customer stories name MoD DE&S QEC ATM and aerospace.

  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical

• Advai

  Advai · Commercial · AI assurance & verification

  UK AI testing and monitoring platform for performance, safety, security and robustness, with Defence & Government among named sectors. Platform covers agents, LLMs, computer vision, time series and multimodal systems; Model Arena for vendor selection.

  • Defense & national security
  • Cross-industry

• Adversarial Robustness Toolbox (ART)

  Linux Foundation AI & Data (started at IBM) · Open source · AI assurance & verification · Open source · MIT

  Python library hosted by LF AI & Data for evaluating and defending ML models against evasion, poisoning, extraction and inference. PyPI 1.20.1 (7 July 2025) lists Python 3.10–3.12. Supports TensorFlow, Keras, PyTorch and similar frameworks. MIT-licensed. DARPA HR001120C0013 acknowledgment.

  • Defense & national security
  • Cross-industry

• AI Practitioner's Handbook (AIPH)

  UK Ministry of Defence / Defence AI Centre · Government-published · Government-published resource

  UK MOD Part 2-style handbook (BETA) to comply with JSP 936 Part 1. Guidance for leaders, developers and users. DAIC AI Assurance Framework (Published 27 February 2026) covers people, process, evidence and technology; names SROs and RAISOs.

  • Defense & national security
  • UK MOD JSP 936

• Ansys medini analyze

  Ansys · Commercial · Safety engineering

  Model-based safety analysis (HAZOP, HARA, FTA, FMEA/FMEDA) for E/E and software. Named standards: ISO 26262, IEC 61508, ARP 4761, ISO 21448 (SOTIF) and MIL-STD-882E. SOTIF covers hazards from sensor and perception-algorithm limitations. Not a model verifier.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • DO-178C / DO-330
  • ISO 26262
  • IEC 61508

• Astah System Safety (GSN)

  Change Vision · Commercial · Safety engineering

  GSN modeling in Astah System Safety. Names GSN Community Standard version 1.0 and OMG SACM (ARM) import/export, plus SysML Requirement-to-Goal sync, STPA/STAMP, Auto-Layout and an in-app Script Editor. Marketing page lists automotive (ISO 26262), aerospace (DO-178B), rail, nuclear and defense.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • Medical devices
  • Process industries
  • ISO 26262

• CDAO AI Assurance (AIA) Toolkit

  DoD Chief Digital and Artificial Intelligence Office · Government-published · Government-published resource

  CDAO self-evaluation toolkit that operationalizes DoW AI Ethical Principles. Released November 2023 as the RAI Toolkit; the live Tradewinds page titles it AIA Toolkit. For Program Managers, AI Developers, Acquisition Teams, Legal/Compliance and End Users; IL2 and IL5.

  • Defense & national security
  • DoD Responsible AI
  • CDAO RAI Toolkit
  • DoD RAI Strategy

• CDAO Joint AI Test Infrastructure Capability (JATIC)

  DoD Chief Digital and Artificial Intelligence Office · Government-published · Government-published resource

  CDAO program (funded FY23–FY29) of Python AI T&E libraries, the RAVEN MLOps platform and the maite types/protocols. Focused on CV classification and object detection for UAV, satellite and autonomous-driving missions. Public packages on GitHub, Conda and PyPI. Not a certification.

  • Defense & national security
  • DoD Responsible AI
  • DoD Directive 3000.09

• CDAO Test and Evaluation of Artificial Intelligence Models Framework

  DoD Chief Digital and Artificial Intelligence Office · Government-published · Government-published resource

  April 2024 public CDAO primer on what to consider in a T&E strategy for AI models in a Defense context. Four focus areas, a performance iceberg beyond correctness, and named links to the DoD Ethical AI Principles and NIST AI RMF. Explicitly not binding policy.

  • Defense & national security
  • DoD Responsible AI
  • NIST AI RMF
  • DoD RAI Strategy

• CycloneDX (AI/ML-BOM)

  OWASP / Ecma TC54 · Open source · AI assurance & verification · Open source · Apache-2.0

  OWASP/Ecma TC54 BOM standard (CycloneDX 1.7, released 21 October 2025) published as ECMA-424 2nd edition (10 December 2025). Homepage names 260+ tools, the defense industrial base, satellite and space systems, and medical-device HBOM/SBOM. The ML-BOM guide names the EU AI Act and NIST AI RMF.

  • Aerospace & aviation
  • Defense & national security
  • Space systems
  • Medical devices
  • EU AI Act
  • NIST AI RMF

• Edge Case

  Edge Case · Commercial · Safety engineering

  Safety-as-a-Service: Guardian Digital Safety Twin plus AI/ML software-safety, system-safety engineering, T&E and certification practices. The homepage names AUSA 2025 defense programs and quotes Aurora on third-party safety expertise.

  • Defense & national security
  • Other safety-critical

• Fiddler AI

  Fiddler AI · Commercial · AI assurance & verification

  AI control plane for agentic and predictive models: continuous evaluations, inline guardrails and governance. Government page names DoD ML/LLM deployment, AWS GovCloud, and air-gapped options. Homepage FAQ names SaaS, VPC or on-premises.

  • Defense & national security
  • Cross-industry

• Giskard

  Giskard · Commercial · AI assurance & verification

  LLM-agent testing (Python SDK and Hub UI), red-teaming and runtime Guards with an EU AI Act Policy Pack (OPA/Rego). On-premise Hub for public-sector and defense workloads. Named sectors: banking and insurance.

  • Defense & national security
  • Cross-industry
  • EU AI Act
  • NIST AI RMF

• HEART (Hardened Extension of ART)

  IBM (CDAO JATIC collaboration) · Open source · AI assurance & verification · Open source · MIT

  MIT-licensed Python 3.9–3.11 library (pip install heart-library; 0.7.0) that extends ART for DoD T&E. Modules: attacks, estimators, metrics. Aligns to MAITE; depends on ART ≥1.20.1. CDAO contract W519TC-23-9-2037. Optional Gradio front end.

  • Defense & national security

• HiddenLayer AI Security Platform

  HiddenLayer · Commercial · AI assurance & verification

  AI security platform with government and defense pages: NIST AI RMF alignment, contractor and open-source model scanning, real-time monitoring, and air-gapped options for classified disconnected environments. The homepage also names AI Discovery, supply-chain, attack simulation and runtime security.

  • Defense & national security
  • Cross-industry
  • NIST AI RMF

• IARPA TrojAI

  IARPA (with NIST test and evaluation) · Government-published · AI assurance & verification

  IARPA program (BAA W911NF-19-S-0012, closed) and NIST T&E resources for detecting Trojan/backdoor attacks in trained AIs before deployment. T&E partners: JHU APL, NIST, SEI and Sandia. NIST still hosts a leaderboard and baseline detector; that page is no longer updated.

  • Defense & national security

• LYNX MOSA.ic.AI

  Lynx Software Technologies · Commercial · Safety-critical AI platform

  Deterministic CPU and GPU runtime for AI at the mission-critical edge. Combines MOSA.ic with CoreSuite; not a training platform. The 8 April 2026 launch names a path to DO-178C, not a completed product certificate.

  • Aerospace & aviation
  • Defense & national security

• Parasoft C/C++test

  Parasoft · Commercial · Safety engineering

  Unified C/C++ static analysis, unit testing, MC/DC coverage and requirements traceability. TÜV SÜD–certified C/C++test names automotive (ISO 26262), medical (IEC 62304), industrial (IEC 61508) and aerospace/defense (DO-178C DAL A). Badges also list ISO/PAS 8800.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

• Perforce QAC

  Perforce · Commercial · Safety engineering

  Static analyzer for C, C++ and Rust (formerly Helix QAC). TÜV SÜD certified for ISO 26262 (automotive) up to ASIL D, IEC 61508 (general industry) up to SIL 4, and IEC 62304 (medical devices) up to Software Safety Class C. Also names a DO-330 pack for DO-178C. Not a neural-network verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304
  • DO-178C / DO-330
  • DO-330

• Resaro Approved Intelligence Platform

  Resaro · Commercial · AI assurance & verification

  On-premise, air-gapped TEVV platform that produces ASQI-structured deployment evidence for civil and defence AI. CI/CD-native workflows over text and image; used in the IMDA/AI Verify Global AI Assurance Pilot.

  • Defense & national security
  • Other safety-critical

• Saimple

  Numalis · Commercial · AI assurance & verification

  Static analyzer that uses abstract interpretation to assess neural-network robustness, citing ISO/IEC 24029. Sold as SaaS and on-premises. Numalis names Article 15 explainability reports and EASA MLEAP work.

  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • EU AI Act
  • EASA AI Concept Paper

• Secureframe (defense contractor offering)

  Secureframe · Commercial · Compliance automation

  CMMC and CUI platform for the Defense Industrial Base. Secureframe Defense automates enclave, documentation and monitoring; the CMMC page names GCC High, Defense Navigator, FedRAMP Moderate MDM and a CyberAB RPO listing. Not an AI-model assurance tool.

  • Defense & national security
  • CMMC / NIST SP 800-171

• Stages Process Management Software

  UL Solutions · Commercial · Compliance automation

  Process-management software with bidirectional traceability between process models and standard objectives. Official table names ISO 26262, ISO/PAS 8800 and UL 4600 under Automotive; IEC 62304 under Medical devices; IEC 61508 and IEC 61511-1 under Industrial.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Process industries
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • UL 4600
  • IEC 62304
  • IEC 61508
  • IEC 61511

• Trustible

  Trustible · Commercial · AI governance platform

  AI governance platform for regulated enterprises: intake, inventory, risk triaging and continuous monitoring. Maps controls to the EU AI Act, NIST AI RMF and ISO 42001. Official 10 April 2026 Leidos story covers defense, intelligence, civil and health programs.

  • Defense & national security
  • Cross-industry
  • EU AI Act
  • NIST AI RMF
  • ISO/IEC 42001

• Vanta

  Vanta · Commercial · Compliance automation

  Compliance automation covering ISO 42001, NIST AI RMF and CMMC (mapped to NIST SP 800-171/172). The ISO 42001 product page also maps evidence to the EU AI Act. Not an AI-model assurance tool.

  • Cross-industry
  • Defense & national security
  • ISO/IEC 42001
  • NIST AI RMF
  • CMMC / NIST SP 800-171
  • EU AI Act

Industry tool filter

Articles

• MITRE ATLAS for AI red teaming: tactics, techniques, mitigations and case studies

  What the public MITRE ATLAS data release contains, how a red team can use its IDs and mitigations in a test plan, and what it does not certify.

• NIST AI RMF Playbook: Measure and Manage suggested actions for safety-critical AI

  What the NIST AI RMF Playbook is and which Measure 2.5, 2.6 and Manage 2.4 suggested actions map to validation, fail-safe testing and bypass plans on a safety-critical program.

• NIST Cyber AI Profile (IR 8596): what the preliminary draft covers and how far to rely on it

  NIST IR 8596 is a preliminary-draft CSF 2.0 profile for AI cybersecurity with Secure, Defend and Thwart focus areas. What the NIST page says, its draft status, and what to ask suppliers.

• NIST SP 800-53 control overlays for securing AI systems (COSAiS): the five use cases and what is still draft

  NIST's COSAiS project is building SP 800-53 overlays for generative AI, predictive AI, single- and multi-agent AI, and AI developers. What the project pages say, and what to ask for meanwhile.

• OWASP Top 10 for LLM and Gen AI apps (2025): questions to put to a vendor

  How five entries of the OWASP 2025 LLM Top 10 (prompt injection, supply chain, poisoning, output handling, excessive agency) turn into vendor questions, using OWASP's own mitigation text.

• CDAO RAI Toolkit versus Tradewinds AIA Toolkit

  Why the 2023 RAI Toolkit and the live Tradewinds AIA Toolkit are the same public self-evaluation resource, plus the December 2024 generative-AI companion PDF.

• Choosing AI red-teaming tools for safety-critical programs

  How official CDAO, NIST and DoD pages define AI red-teaming, which listed tools name those uses, and what no page makes a contract clause.

• CMMC and AI tools handling CUI

  What 32 CFR Part 170 and DFARS 252.204-7021 actually require when an AI tool processes CUI, and why there is no AI-specific CMMC clause.

• DoD 3000.09 compliance checklist for autonomy vendors

  A vendor-facing checklist from DoD Directive 3000.09: scope, human judgment, V&V and T&E, senior review, and what the directive excludes.

• DoD RAI Implementation Pathway: what the 64 lines of effort ask industry

  What CDAO’s public pages say the June 2022 RAI Strategy and Implementation Pathway is, how the toolkit implements it, and what is not a contractor certificate.

• ISO/IEC 42001 and NIST AI 100-1: the two source documents behind the crosswalk

  Exact titles, what each document is, and the caveats NIST and the crosswalk itself state, before you rely on any clause-to-subcategory row.

• ISO 42001 vs NIST AI RMF for defense contractors

  What a DIB team should take from the certifiable AIMS versus the voluntary RMF, using NIST’s published crosswalk and DoD’s own statement that the RAI toolkit builds on the RMF.

• NIST AI 100-2 adversarial ML terms for defense T&E

  What NIST AI 100-2e2025’s adversarial-machine-learning taxonomy is, how it sits next to CDAO T&E and ATLAS, and what it does not certify.

• NIST SP 800-218A SSDF for generative AI in defense software

  What the July 2024 SSDF Community Profile adds for generative and dual-use models, how it sits next to CMMC and the AI RMF, and what it does not certify.

• Turning the ISO/IEC 42001 to NIST AI RMF crosswalk into supplier evidence requests

  How a buyer can use the rows NIST published to decide what documents to ask an AI supplier for, with the editorial steps clearly separated from the sourced mappings.

• An AI assurance glossary for aerospace and defense

  Official meanings of the terms that show up in FAA, EASA, NIST, DoD and CMMC AI work, each tied to the source that uses it.

• An AI audit evidence checklist for regulated programs

  A checklist of evidence artifacts for AI audits, each tied to the ISO/IEC 42001, NIST AI RMF, EU AI Act, EASA, NIST SP 800-171 or DoD source that expects it.

• AI incident reporting: EU AI Act Article 73 vs DoD guidance

  Article 73 sets timed serious-incident reports for high-risk AI. Public DoD pages describe RAI repositories and existing processes, not an Article 73 equivalent.

• AI red-teaming requirements for defense programs

  What official DoD, CDAO and NIST pages actually say about AI red-teaming, and what they do not make a contract clause.

• Army, Navy and Air Force AI policies that name acquisition

  What Army Project Linchpin, the Navy Strategy to Weaponize Data and Artificial Intelligence, and the DAF Artificial Intelligence Strategy actually say about buying and fielding AI.

• Australia Defence Policy Settings for Responsible Use of AI

  What Australia's Policy Settings for Responsible Use of Artificial Intelligence in Defence publish as lawfulness, values-based principles and proportionate controls, versus DST's research method.

• Autonomy and DoD Directive 3000.09 explained

  What DoD Directive 3000.09 (25 January 2023) actually covers: weapon-system autonomy, human judgment, senior review, and what it excludes.

• Canada DND/CAF Artificial Intelligence Strategy

  What the 2024 Department of National Defence and Canadian Armed Forces Artificial Intelligence Strategy publishes as its 2030 vision, five lines of effort, and procurement tasks.

• CDAO test and evaluation of Artificial Intelligence models

  CDAO Test and Evaluation of Artificial Intelligence Models Framework: four T&E focus areas, what the April 2024 document says it is not, and how JATIC software fits.

• CMMC and AI with CUI - what the rules actually say

  How CMMC and NIST SP 800-171 apply when an AI system, including a cloud AI service, handles controlled unclassified information, and where the rules are silent.

• CMMC Level 2 vs Level 3 for AI systems

  What 32 CFR Part 170 actually requires at CMMC Level 2 and Level 3 when an AI system handles CUI, and what the Phase 2 suspension changes.

• CMMC Program scoping for generative systems that handle CUI

  What 32 CFR Part 170 actually calls the program, including the live CMMC 2.0 resource page, and how Level 2 asset categories apply to generative components.

• Data provenance and supply-chain security for ML models (SBOM/AIBOM)

  What CISA, NIST and NTIA actually say about SBOMs for AI software, and how CycloneDX ML-BOM and SPDX AI profiles relate, without inventing a mandate.

• Supplier flow-down clauses for SI/AI in defense contracts

  No DFARS or FAR clause titled AI or Super Intelligence. What 252.204-7012, 7020, 7021 and FAR 52.204-21 actually require primes to flow down.

• DoD RAI Toolkit vs NIST AI RMF: what each one is for

  What the DoD RAI Toolkit and the NIST AI RMF each say about themselves, and the official statement that the toolkit builds on the RMF.

• FAA proposed Part 108 BVLOS and DoD Directive 3000.09

  Two live autonomy regimes: the FAA/TSA NPRM that would create 14 CFR Part 108 for civil UAS BVLOS, versus DoD Directive 3000.09 on autonomy in weapon systems.

• FedRAMP and IL levels for AI SaaS in defense

  What FedRAMP.gov and official DoD pages actually say about FedRAMP Certification versus DoD Impact Levels for AI cloud services — two different systems.

• Human-machine teaming in DoD and NATO guidance

  What official DoD, NATO, UK MOD and EASA pages actually say about human judgment, human control and human-AI teaming.

• ISO/IEC 42001 vs NIST AI RMF: a practical crosswalk

  How the certifiable ISO/IEC 42001 management system and the voluntary NIST AI RMF fit together, with example mappings taken from NIST's published crosswalk.

• ISO/IEC 23894 and 5338 for engineering teams

  What ISO catalog abstracts say ISO/IEC 23894:2023 risk guidance and ISO/IEC 5338:2023 life-cycle processes are, and that neither is a certifiable AIMS or aviation AMC.

• ISO/IEC 42005:2025 AI system impact assessment

  ISO/IEC 42005:2025 is guidance for AI system impact assessments. Catalog facts only: it complements 42001 and 23894 and is not a certifiable AIMS.

• Japan MOD AI utilization policy and ATLA responsible AI R&D guideline

  What Japan's July 2024 防衛省ＡＩ活用推進基本方針 and ATLA's Guideline for Responsible AI Application in R&D of AI-Equipped Defense Systems actually say.

• Model cards and system cards for defense AI documentation

  What official model-card and system-card pages actually specify, and what CDAO and NIST documents do and do not require for defense programs.

• NATO's revised AI Strategy and the Principles of Responsible Use

  What NATO's 2021 and 2024 Artificial Intelligence Strategy summaries actually say about the six Principles of Responsible Use, TEV&V, DIANA and Allied industry.

• NIST AI 600-1 (Generative AI Profile) for defense contractors

  What NIST AI 600-1 actually is, which generative-AI risks it names, and how that sits next to CMMC and DoD Responsible AI rather than replacing them.

• NIST AI 600-1 suggested actions for generative AI on a defense program

  Which NIST AI 600-1 suggested actions name acquisition, contractors, national security and information security, and what they do not make mandatory for DoD work.

• Which NIST SP 800-171 controls matter most when AI tools handle CUI?

  Official pages do not rank a subset of 800-171 for AI. What CMMC, NIST and NSA/CISA actually say when AI systems process CUI.

• What JSP 936 Part 1 asks of industry partners and suppliers

  Who UK MOD JSP 936 Part 1 binds, what must versus should means for suppliers, how legacy AI is treated, and how the AI Practitioner's Handbook relates.

• UK MOD JSP 936 vs DoD Responsible AI

  What official UK MOD and US DoD pages each claim about dependable or responsible AI, without inventing a clause-by-clause map.