Safety-critical systems

Frameworks

• ISO/IEC 42001

  The first international management-system standard for AI. It governs how an organization manages AI risk, not how an individual AI product is certified.

  Tools tagged ISO/IEC 42001

• ISO/IEC 23894

  International guidance on managing AI-specific risk for organizations that develop, produce, deploy or use AI products, systems and services.

  Tools tagged ISO/IEC 23894

• ISO/IEC TR 5469

  A technical report on properties, risk factors, methods and processes when AI is used in, around, or to design safety-related functions.

  Tools tagged ISO/IEC TR 5469

• UL 4600

  ANSI/UL standard for building and evaluating a safety argument for vehicles that operate in an autonomous mode without human supervision.

  Tools tagged UL 4600

• IEC 61508

  Basic safety publication for electrical, electronic and programmable electronic systems that carry out safety functions. Facilitates sector standards; does not by itself confer an AI-specific SIL.

  Tools tagged IEC 61508

Listed tools

• 6clicks (ISO 42001)

  6clicks · Commercial · Compliance automation

  GRC with a pre-configured ISO/IEC 42001:2023 AIMS, Hailey AI mapping, SoA and Hub & Spoke. Cross-maps ISO 27001 and the EU AI Act. Homepage names SaaS, sovereign cloud or on-prem, and cloud, on-premises, air-gapped or hybrid.

  • Defense & national security
  • Other safety-critical
  • ISO/IEC 42001
  • EU AI Act

• AADvance Control System

  Rockwell Automation · Commercial · Safety-critical AI platform

  Distributed, scalable safety instrumented system with fail-safe to TMR architectures. Official page: IEC 61508 certified (TÜV and Exida); TÜV-suitable for IEC 61508 up to SIL 3 and IEC 61511-1. SIL 1–3 in the same system. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• ABB High Integrity I/O (S800 and Select I/O)

  ABB · Commercial · Safety-critical AI platform

  ABB SIL3 I/O for System 800xA High Integrity. Select I/O High Integrity is listed as certified for IEC 61508-SIL3 and compatible with AC 800M controllers using SM812. Page does not name IEC 61511. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508

• ABB System 800xA High Integrity

  ABB · Commercial · Safety-critical AI platform

  ABB describes System 800xA High Integrity as a TÜV-certified SIL3 safety system and a complete SIS, deployable with System 800xA or independently. Page says it gives flexibility to meet IEC 61508 and IEC 61511 requirements. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• Adelard ASCE

  Adelard (NCC Group) · Commercial · Safety engineering

  Assurance-case software with CAE (including ASCAD 2.0 for autonomous systems and AI-driven machine-learning behaviour) and GSN Version 3 plus a Modular GSN plugin. Node-locked and floating licences; both can operate with limited or no Internet. Customer stories name MoD DE&S QEC ATM and aerospace.

  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical

• aeShield

  aeSolutions · Commercial · Safety engineering

  Functional-safety documentation platform for IEC 61511 SIL calculations, SRS, cause-and-effect and test plans. Official page heading: IEC 61511 Functional Safety Compliance Made Simple. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61511

• Ansys medini analyze

  Ansys · Commercial · Safety engineering

  Model-based safety analysis (HAZOP, HARA, FTA, FMEA/FMEDA) for E/E and software. Named standards: ISO 26262, IEC 61508, ARP 4761, ISO 21448 (SOTIF) and MIL-STD-882E. SOTIF covers hazards from sensor and perception-algorithm limitations. Not a model verifier.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • DO-178C / DO-330
  • ISO 26262
  • IEC 61508

• Ansys SCADE Suite

  Ansys · Commercial · Safety engineering

  Model-based development environment for critical embedded software. KCG C/Ada code generator is qualified as a development tool for DO-178B up to Level A and DO-178C/DO-330 at TQL-1. Avionics and Flight Controls named. Not a neural-network verifier.

  • Aerospace & aviation
  • Other safety-critical
  • Automotive
  • Industrial machinery and robotics
  • DO-178C / DO-330
  • DO-330
  • ISO 26262
  • IEC 61508

• Astah System Safety (GSN)

  Change Vision · Commercial · Safety engineering

  GSN modeling in Astah System Safety. Names GSN Community Standard version 1.0 and OMG SACM (ARM) import/export, plus SysML Requirement-to-Goal sync, STPA/STAMP, Auto-Layout and an in-app Script Editor. Marketing page lists automotive (ISO 26262), aerospace (DO-178B), rail, nuclear and defense.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • Medical devices
  • Process industries
  • ISO 26262

• Astrée

  AbsInt · Commercial · Safety engineering

  Sound static analyzer for safety-critical C and C++. Names hazard identification against ISO 26262, DO-178C, IEC-61508 and EN-50128, plus Qualification Support Kits for those standards. Bosch Automotive Steering and Airbus are named users. Not a neural-network verifier.

  • Automotive
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • DO-178C / DO-330

• BTC TestStack

  BTC Embedded Systems · Commercial · Safety engineering

  Testing stack (successor to BTC EmbeddedPlatform / EmbeddedTester) for model-based, hand-written and AI-generated code. TÜV Süd certificate names ISO 26262 (automotive), IEC 61508-3 (industrial) and IEC 62304 (medical). ISO 26262 TCL including ASIL D.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304

• CAISAR

  CEA List · Open source · Safety engineering

  CEA List open-source platform (CAISAR 6.0, June 2026) for characterizing AI safety and robustness. WhyML specifications discharged by PyRAT, Marabou, nnenum, alpha-beta-CROWN and others. Examples include functional properties of ACAS Xu.

  • Aerospace & aviation
  • Other safety-critical

• CODESYS Virtual Safe Control SL

  CODESYS · Commercial · Safety-critical AI platform

  Virtual safety controller in a Linux container. Official page: certified according to IEC 61508 for SIL 3 applications, without IEC 61508 hardware certification of the host. TÜV SÜD. Diversified Encoding dual-channel. Not a trained-model SIL.

  • Industrial machinery and robotics
  • Other safety-critical
  • IEC 61508

• DeltaV SIS

  Emerson · Commercial · Safety-critical AI platform

  Safety instrumented system used across process industries for ESD, burner management, fire and gas and pipeline. Official brochure: meets IEC 61508 and IEC 61511 requirements for physical separation; built for IEC 61511 compliance; TÜV and exida certified for SIL 3 without restriction.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• Edge Case

  Edge Case · Commercial · Safety engineering

  Safety-as-a-Service: Guardian Digital Safety Twin plus AI/ML software-safety, system-safety engineering, T&E and certification practices. The homepage names AUSA 2025 defense programs and quotes Aurora on third-party safety expertise.

  • Defense & national security
  • Other safety-critical

• exSILentia

  exida · Commercial · Safety engineering

  Modular safety-lifecycle suite for process-safety management and SIS functional-safety work. Official module table includes IEC 61511 Compliance Documentation and SILver, an IEC 61508 compliant SIL-verification calculation engine. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61511
  • IEC 61508

• Foretellix Foretify

  Foretellix · Commercial · Safety engineering

  Foretify Physical AI Development Toolchain for training and validation of AI-powered autonomous-vehicle stacks: data curation, synthetic scenario generation, and coverage and safety-evidence evaluation. Not an aviation AMC.

  • Other safety-critical
  • Automotive

• GRIF SIL module

  TotalEnergies · Commercial · Safety engineering

  SIL calculation and verification software in the GRIF suite. Page headline: assessment of the availability level according to IEC 61508 and IEC 61511. Lists PFD and PFH computation and HFT and architectural constraints. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• HIMA HIMax

  HIMA · Commercial · Safety-critical AI platform

  Fault-tolerant safety controller for process-industry SIS including fire-and-gas. Official fire-and-gas page: TÜV-certified HIMax suitable for use up to SIL 3 and certified in accordance with IEC 61511 up to SIL 3. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61511

• Honeywell Safety Manager SC

  Honeywell · Commercial · Safety-critical AI platform

  Third-generation QMR (2oo4D) safety platform for ESD/SIS applications in the Process Control industry. TÜV Rheinland certified up to SIL 3. Official standards list includes IEC 61508/61511. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• IEC Certification Kit (for ISO 26262 and IEC 61508)

  MathWorks · Commercial · Safety engineering

  MathWorks kit of TÜV SÜD certificates and qualification work products for ISO 26262 (ASIL A–D), IEC 61508 (SIL 1–4) and IEC 62304. Supported-products table names IEC 61511:2016 for PLC Coder. ISO 26262 guidance covers AI-assisted model editing, review and test generation.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Process industries
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304
  • IEC 61511

• INTEGRITY RTOS

  Green Hills Software · Commercial · Safety-critical AI platform

  Separation-kernel RTOS with integrated platforms for automotive, industrial safety, medical devices and avionics. Certifications named: ISO 26262 ASIL D, IEC 61508 SIL 3, FDA Class II and Class III medical device approval, and DO-178B/C DAL A for INTEGRITY-178. Not an AI model verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • DO-178C / DO-330

• Kenexis SIS

  Kenexis · Commercial · Safety engineering

  Safety-lifecycle tool formerly named Vertigo. Page heading: ISA/IEC 61511 SIS Lifecycle Management and SIL Verification. Lists a SIL verification calculation engine, failure rate database, SRS documentation and dashboards. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61511

• KUKA iiQKA.OS2

  KUKA · Commercial · Safety-critical AI platform

  Operating system and virtual robot controller for KUKA industrial robots. Official page: AI-capable, ready for ISO 10218:2025 and new machinery regulations; compliant with the machinery regulations (MACH REG). LINUX-based. Not a trained-model SIL.

  • Industrial machinery and robotics
  • Other safety-critical
  • ISO 10218
  • Machinery Regulation 2023/1230

• LDRA (AI and machine learning capability)

  LDRA · Commercial · Safety engineering

  LDRA AI/ML capability page covering test generation, change-impact analysis and AI/ML in safety-critical sectors. The aviation section names EASA guidance for Level 1 and 2 machine-learning applications. Not a neural-network verifier.

  • Aerospace & aviation
  • Other safety-critical
  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • EASA AI Concept Paper

• MathWorks AI Verification Library for Deep Learning Toolbox

  MathWorks · Commercial · AI assurance & verification

  Formal robustness verification, output bounds, adversarial examples and out-of-distribution detection for MATLAB, ONNX and PyTorch networks, with airborne runway-sign and ACAS Xu worked examples.

  • Aerospace & aviation
  • Other safety-critical
  • DO-178C / DO-330
  • EASA AI Concept Paper
  • ARP4754B

• Neural Network Dependability Kit (NNDK)

  fortiss · Open source · Safety engineering · Open source · AGPL-3.0

  Open-source fortiss toolbox for engineering neural networks in safety-critical domains: dependability metrics, test-case generation, formal verification and runtime neuron-activation-pattern monitoring. Jupyter examples on GTSRB, MNIST, KITTI. Used in driving, medical imaging and space navigation.

  • Other safety-critical
  • Space systems

• Parasoft C/C++test

  Parasoft · Commercial · Safety engineering

  Unified C/C++ static analysis, unit testing, MC/DC coverage and requirements traceability. TÜV SÜD–certified C/C++test names automotive (ISO 26262), medical (IEC 62304), industrial (IEC 61508) and aerospace/defense (DO-178C DAL A). Badges also list ISO/PAS 8800.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

• Perforce QAC

  Perforce · Commercial · Safety engineering

  Static analyzer for C, C++ and Rust (formerly Helix QAC). TÜV SÜD certified for ISO 26262 (automotive) up to ASIL D, IEC 61508 (general industry) up to SIL 4, and IEC 62304 (medical devices) up to Software Safety Class C. Also names a DO-330 pack for DO-178C. Not a neural-network verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304
  • DO-178C / DO-330
  • DO-330

• PREMIS

  Argevide · Commercial · Safety engineering

  Web assurance-case tool for modular GSN arguments, including Eliminative Argumentation defeaters, an AI Assistant, Safety Performance Indicators, and CI/CD or API integration. Supports Core GSN and partially Modular and Argument Pattern Extensions. Metamodel named OMG SACM and ISO/IEC 15026.

  • Other safety-critical

• PyRAT

  CEA List (AISER team) · Commercial · Safety engineering

  CEA List neural-network verifier (Python Reachability Assessment Tool) using abstract interpretation. Site: VNN-COMP 2024 second place, all 12 regular-track benchmarks, more than 1700 properties, ACAS-XU collision-avoidance example. CAISAR news ranks PyRAT third at VNN-Comp 2026.

  • Aerospace & aviation
  • Other safety-critical

• QNX OS for Safety

  QNX (BlackBerry) · Commercial · Safety-critical AI platform

  Safety-certified microkernel RTOS (QOS 8.0) certified by TÜV Rheinland to ISO 26262 ASIL D, IEC 61508 SIL 3, IEC 62304 Class C and ISO/SAE 21434. C/C++ toolchains classified TCL3/T3. FAQ names car, surgical robot, drone, power plant, machinery and control systems. Not an airborne runtime.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304

• QuantPi

  QuantPi · Commercial · AI assurance & verification

  Enterprise AI validation layer that tests models, agents and physical AI before and after deployment. Public cloud, on-premises via HPE Private Cloud AI, and air-gapped. MCP integration; SSO/RBAC and zero data retention. TÜV Süd’s first CARAT partner laboratory worldwide.

  • Other safety-critical
  • Cross-industry

• Rapita Verification Suite (RVS)

  Rapita Systems · Commercial · Safety engineering

  Rapita Verification Suite for requirements-based testing, MC/DC coverage, WCET timing and scheduling visualization. Qualification kits for DO-178C; kits have supported more than 20 DO-178B and C projects up to DAL A. Rapi Coupling is in development (expected H1 2027).

  • Aerospace & aviation
  • Other safety-critical
  • Automotive
  • DO-178C / DO-330
  • ISO 26262

• Resaro Approved Intelligence Platform

  Resaro · Commercial · AI assurance & verification

  On-premise, air-gapped TEVV platform that produces ASQI-structured deployment evidence for civil and defence AI. CI/CD-native workflows over text and image; used in the IMDA/AI Verify Global AI Assurance Pilot.

  • Defense & national security
  • Other safety-critical

• Saimple

  Numalis · Commercial · AI assurance & verification

  Static analyzer that uses abstract interpretation to assess neural-network robustness, citing ISO/IEC 24029. Sold as SaaS and on-premises. Numalis names Article 15 explainability reports and EASA MLEAP work.

  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • EU AI Act
  • EASA AI Concept Paper

• SILability

  xSeriCon · Commercial · Safety engineering

  SIL verification software for SIFs. Page title: SIL Verification Software for IEC 61508/61511. Supports architectural constraint models for IEC 61508 (Route 1H and 2H) and IEC 61511 (2003 and 2016 editions), low, high and continuous demand. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• SILcet

  Enertria · Commercial · Safety engineering

  SIL verification tool for safety instrumented functions, offered as SILcet Cloud and SILcet Pro Plus. Official page says it complies with IEC 61508, IEC 61511 and ISA TR84.00.02. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• SIMATIC PCS 7 Safety

  Siemens · Commercial · Safety-critical AI platform

  Process-industry safety integrated with SIMATIC PCS 7. SIMATIC S7 Safety Matrix (Engineering Tool and Viewer) is described as a holistic approach to functional safety in accordance with IEC 61511 across the safety lifecycle. Architectures certified up to SIL 3. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61511

• Stages Process Management Software

  UL Solutions · Commercial · Compliance automation

  Process-management software with bidirectional traceability between process models and standard objectives. Official table names ISO 26262, ISO/PAS 8800 and UL 4600 under Automotive; IEC 62304 under Medical devices; IEC 61508 and IEC 61511-1 under Industrial.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Process industries
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • UL 4600
  • IEC 62304
  • IEC 61508
  • IEC 61511

• TESSY

  Razorcat Development GmbH · Commercial · Safety engineering

  Automated unit, module and integration testing of embedded C/C++. Official page: qualified for IEC 61508, IEC 62304, ISO 26262 and EN 50128. Call Pair Coverage is named as an ISO 26262 alternative for integration tests. TÜV SÜD certificate names ISO 26262-8:2018.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304

• Universal Robots PolyScope

  Universal Robots · Commercial · Safety-critical AI platform

  Software platform for Universal Robots cobots, from simple cells to AI-ready systems. Safety FAQ: PolyScope 5 and PolyScope X certified to EN ISO 10218-1:2011; targeting ISO 10218-1:2025 by January 2027 aligned with EU Machinery Regulation 2023/1230.

  • Industrial machinery and robotics
  • Other safety-critical
  • ISO 10218
  • Machinery Regulation 2023/1230

• VectorCAST

  Vector · Commercial · Safety engineering

  Embedded unit, integration and coverage test automation for C, C++ and Ada. Used in aerospace, automotive, medical device, industrial and railway programs. Tool validation packages for IEC 61508, ISO 26262 and IEC 62304 include TÜV SÜD certificates. Reqs2x AI tests require engineer review.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

• Yokogawa ProSafe-RS

  Yokogawa · Commercial · Safety-critical AI platform

  TÜV SIL3 safety instrumented system described as a safety PLC for the process industries. Complied functional-safety standards listed: IEC 61508, IEC 61511-1 and IEC 62061. Used in over 3,500 projects. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

Industry tool filter

Articles

• Choosing AI red-teaming tools for safety-critical programs

  How official CDAO, NIST and DoD pages define AI red-teaming, which listed tools name those uses, and what no page makes a contract clause.

• ISO/IEC 23894 and 5338 for engineering teams

  What ISO catalog abstracts say ISO/IEC 23894:2023 risk guidance and ISO/IEC 5338:2023 life-cycle processes are, and that neither is a certifiable AIMS or aviation AMC.

• ISO/IEC TR 5469 and IEC 61508 for ML components

  What official ISO and IEC catalog pages say about AI in safety-related functions, and what they do not say about SIL for machine learning.

• UL 4600 is not an aviation or DoD 3000.09 means of compliance

  What UL 4600’s public catalog actually scopes (autonomous vehicles, no human driver) versus FAA, EASA and DoD 3000.09 pages. Not an aviation AMC we have found.