Safety engineering tools
26 listings are filed under Safety engineering. Framework tags on these listings, by count: IEC 61508 (13), ISO 26262 (11), DO-178C / DO-330 (7), IEC 61511 (7). Most-tagged industries: Other safety-critical, Aerospace & aviation, Automotive. 1 is open source under an OSI-approved license. A tag appears only when the cited public page names it. Combine this type with other filters.
-
Adelard ASCE
Assurance-case software with CAE (including ASCAD 2.0 for autonomous systems and AI-driven machine-learning behaviour) and GSN Version 3 plus a Modular GSN plugin. Node-locked and floating licences; both can operate with limited or no Internet. Customer stories name MoD DE&S QEC ATM and aerospace.
-
AdvoCATE
NASA Ames Assurance Case Automation Toolset for GSN arguments, hazard analysis, bow-tie risk models and verification artifacts. NTRS User Guide 1.4 covers safety risk management. DARPA Assured Autonomy acknowledgment.
-
aeShield
Functional-safety documentation platform for IEC 61511 SIL calculations, SRS, cause-and-effect and test plans. Official page heading: IEC 61511 Functional Safety Compliance Made Simple. Not an AI-management platform.
-
Ansys medini analyze
Model-based safety analysis (HAZOP, HARA, FTA, FMEA/FMEDA) for E/E and software. Named standards: ISO 26262, IEC 61508, ARP 4761, ISO 21448 (SOTIF) and MIL-STD-882E. SOTIF covers hazards from sensor and perception-algorithm limitations. Not a model verifier.
-
Ansys SCADE Suite
Model-based development environment for critical embedded software. KCG C/Ada code generator is qualified as a development tool for DO-178B up to Level A and DO-178C/DO-330 at TQL-1. Avionics and Flight Controls named. Not a neural-network verifier.
-
Astah System Safety (GSN)
GSN modeling in Astah System Safety. Names GSN Community Standard version 1.0 and OMG SACM (ARM) import/export, plus SysML Requirement-to-Goal sync, STPA/STAMP, Auto-Layout and an in-app Script Editor. Marketing page lists automotive (ISO 26262), aerospace (DO-178B), rail, nuclear and defense.
-
Astrée
Sound static analyzer for safety-critical C and C++. Names hazard identification against ISO 26262, DO-178C, IEC-61508 and EN-50128, plus Qualification Support Kits for those standards. Bosch Automotive Steering and Airbus are named users. Not a neural-network verifier.
-
BTC TestStack
Testing stack (successor to BTC EmbeddedPlatform / EmbeddedTester) for model-based, hand-written and AI-generated code. TÜV Süd certificate names ISO 26262 (automotive), IEC 61508-3 (industrial) and IEC 62304 (medical). ISO 26262 TCL including ASIL D.
-
CAISAR
CEA List open-source platform (CAISAR 6.0, June 2026) for characterizing AI safety and robustness. WhyML specifications discharged by PyRAT, Marabou, nnenum, alpha-beta-CROWN and others. Examples include functional properties of ACAS Xu.
-
Edge Case
Safety-as-a-Service: Guardian Digital Safety Twin plus AI/ML software-safety, system-safety engineering, T&E and certification practices. The homepage names AUSA 2025 defense programs and quotes Aurora on third-party safety expertise.
-
exSILentia
Modular safety-lifecycle suite for process-safety management and SIS functional-safety work. Official module table includes IEC 61511 Compliance Documentation and SILver, an IEC 61508 compliant SIL-verification calculation engine. Not an AI-management platform.
-
Foretellix Foretify
Foretify Physical AI Development Toolchain for training and validation of AI-powered autonomous-vehicle stacks: data curation, synthetic scenario generation, and coverage and safety-evidence evaluation. Not an aviation AMC.
-
GRIF SIL module
SIL calculation and verification software in the GRIF suite. Page headline: assessment of the availability level according to IEC 61508 and IEC 61511. Lists PFD and PFH computation and HFT and architectural constraints. Not an AI-management platform.
-
IEC Certification Kit (for ISO 26262 and IEC 61508)
MathWorks kit of TÜV SÜD certificates and qualification work products for ISO 26262 (ASIL A–D), IEC 61508 (SIL 1–4) and IEC 62304. Supported-products table names IEC 61511:2016 for PLC Coder. ISO 26262 guidance covers AI-assisted model editing, review and test generation.
-
Kenexis SIS
Safety-lifecycle tool formerly named Vertigo. Page heading: ISA/IEC 61511 SIS Lifecycle Management and SIL Verification. Lists a SIL verification calculation engine, failure rate database, SRS documentation and dashboards. Not an AI-management platform.
-
LDRA (AI and machine learning capability)
LDRA AI/ML capability page covering test generation, change-impact analysis and AI/ML in safety-critical sectors. The aviation section names EASA guidance for Level 1 and 2 machine-learning applications. Not a neural-network verifier.
-
Neural Network Dependability Kit (NNDK)
Open-source fortiss toolbox for engineering neural networks in safety-critical domains: dependability metrics, test-case generation, formal verification and runtime neuron-activation-pattern monitoring. Jupyter examples on GTSRB, MNIST, KITTI. Used in driving, medical imaging and space navigation.
-
Parasoft C/C++test
Unified C/C++ static analysis, unit testing, MC/DC coverage and requirements traceability. TÜV SÜD–certified C/C++test names automotive (ISO 26262), medical (IEC 62304), industrial (IEC 61508) and aerospace/defense (DO-178C DAL A). Badges also list ISO/PAS 8800.
-
Perforce QAC
Static analyzer for C, C++ and Rust (formerly Helix QAC). TÜV SÜD certified for ISO 26262 (automotive) up to ASIL D, IEC 61508 (general industry) up to SIL 4, and IEC 62304 (medical devices) up to Software Safety Class C. Also names a DO-330 pack for DO-178C. Not a neural-network verifier.
-
PREMIS
Web assurance-case tool for modular GSN arguments, including Eliminative Argumentation defeaters, an AI Assistant, Safety Performance Indicators, and CI/CD or API integration. Supports Core GSN and partially Modular and Argument Pattern Extensions. Metamodel named OMG SACM and ISO/IEC 15026.
-
PyRAT
CEA List neural-network verifier (Python Reachability Assessment Tool) using abstract interpretation. Site: VNN-COMP 2024 second place, all 12 regular-track benchmarks, more than 1700 properties, ACAS-XU collision-avoidance example. CAISAR news ranks PyRAT third at VNN-Comp 2026.
-
Rapita Verification Suite (RVS)
Rapita Verification Suite for requirements-based testing, MC/DC coverage, WCET timing and scheduling visualization. Qualification kits for DO-178C; kits have supported more than 20 DO-178B and C projects up to DAL A. Rapi Coupling is in development (expected H1 2027).
-
SILability
SIL verification software for SIFs. Page title: SIL Verification Software for IEC 61508/61511. Supports architectural constraint models for IEC 61508 (Route 1H and 2H) and IEC 61511 (2003 and 2016 editions), low, high and continuous demand. Not an AI-management platform.
-
SILcet
SIL verification tool for safety instrumented functions, offered as SILcet Cloud and SILcet Pro Plus. Official page says it complies with IEC 61508, IEC 61511 and ISA TR84.00.02. Not an AI-management platform.
-
TESSY
Automated unit, module and integration testing of embedded C/C++. Official page: qualified for IEC 61508, IEC 62304, ISO 26262 and EN 50128. Call Pair Coverage is named as an ISO 26262 alternative for integration tests. TÜV SÜD certificate names ISO 26262-8:2018.
-
VectorCAST
Embedded unit, integration and coverage test automation for C, C++ and Ada. Used in aerospace, automotive, medical device, industrial and railway programs. Tool validation packages for IEC 61508, ISO 26262 and IEC 62304 include TÜV SÜD certificates. Reqs2x AI tests require engineer review.