• Ansys medini analyze

  Ansys · Commercial · Safety engineering

  Model-based safety analysis (HAZOP, HARA, FTA, FMEA/FMEDA) for E/E and software. Named standards: ISO 26262, IEC 61508, ARP 4761, ISO 21448 (SOTIF) and MIL-STD-882E. SOTIF covers hazards from sensor and perception-algorithm limitations. Not a model verifier.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • DO-178C / DO-330
  • ISO 26262
  • IEC 61508

• Ansys SCADE Suite

  Ansys · Commercial · Safety engineering

  Model-based development environment for critical embedded software. KCG C/Ada code generator is qualified as a development tool for DO-178B up to Level A and DO-178C/DO-330 at TQL-1. Avionics and Flight Controls named. Not a neural-network verifier.

  • Aerospace & aviation
  • Other safety-critical
  • Automotive
  • Industrial machinery and robotics
  • DO-178C / DO-330
  • DO-330
  • ISO 26262
  • IEC 61508

• Astrée

  AbsInt · Commercial · Safety engineering

  Sound static analyzer for safety-critical C and C++. Names hazard identification against ISO 26262, DO-178C, IEC-61508 and EN-50128, plus Qualification Support Kits for those standards. Bosch Automotive Steering and Airbus are named users. Not a neural-network verifier.

  • Automotive
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • DO-178C / DO-330

• INTEGRITY RTOS

  Green Hills Software · Commercial · Safety-critical AI platform

  Separation-kernel RTOS with integrated platforms for automotive, industrial safety, medical devices and avionics. Certifications named: ISO 26262 ASIL D, IEC 61508 SIL 3, FDA Class II and Class III medical device approval, and DO-178B/C DAL A for INTEGRITY-178. Not an AI model verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • DO-178C / DO-330

• MathWorks AI Verification Library for Deep Learning Toolbox

  MathWorks · Commercial · AI assurance & verification

  Formal robustness verification, output bounds, adversarial examples and out-of-distribution detection for MATLAB, ONNX and PyTorch networks, with airborne runway-sign and ACAS Xu worked examples.

  • Aerospace & aviation
  • Other safety-critical
  • DO-178C / DO-330
  • EASA AI Concept Paper
  • ARP4754B

• MathWorks DO Qualification Kit

  MathWorks · Commercial · AI assurance & verification

  Documentation, test cases and procedures to qualify supported Simulink and Polyspace tools for DO-178C, DO-278A, DO-254 and DO-330. The FAQ says the kit does not prequalify tools; qualification is project-specific.

  • Aerospace & aviation
  • DO-178C / DO-330
  • DO-330

• Parasoft C/C++test

  Parasoft · Commercial · Safety engineering

  Unified C/C++ static analysis, unit testing, MC/DC coverage and requirements traceability. TÜV SÜD–certified C/C++test names automotive (ISO 26262), medical (IEC 62304), industrial (IEC 61508) and aerospace/defense (DO-178C DAL A). Badges also list ISO/PAS 8800.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

• Perforce QAC

  Perforce · Commercial · Safety engineering

  Static analyzer for C, C++ and Rust (formerly Helix QAC). TÜV SÜD certified for ISO 26262 (automotive) up to ASIL D, IEC 61508 (general industry) up to SIL 4, and IEC 62304 (medical devices) up to Software Safety Class C. Also names a DO-330 pack for DO-178C. Not a neural-network verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304
  • DO-178C / DO-330
  • DO-330

• Rapita Verification Suite (RVS)

  Rapita Systems · Commercial · Safety engineering

  Rapita Verification Suite for requirements-based testing, MC/DC coverage, WCET timing and scheduling visualization. Qualification kits for DO-178C; kits have supported more than 20 DO-178B and C projects up to DAL A. Rapi Coupling is in development (expected H1 2027).

  • Aerospace & aviation
  • Other safety-critical
  • Automotive
  • DO-178C / DO-330
  • ISO 26262

• VectorCAST

  Vector · Commercial · Safety engineering

  Embedded unit, integration and coverage test automation for C, C++ and Ada. Used in aerospace, automotive, medical device, industrial and railway programs. Tool validation packages for IEC 61508, ISO 26262 and IEC 62304 include TÜV SÜD certificates. Reqs2x AI tests require engineer review.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

Official documents and working-group pages

These are the primary public pages we cite for DO-178C / DO-330. They are not directory listings and are not endorsements.

Sources last checked on 14 October 2026.

1. DO-178() Software Standards Documents & Training - RTCA
2. AC 20-115D - Airborne Software Development Assurance Using EUROCAE ED-12( ) and RTCA DO-178( ) - FAA
3. DO-330 - Software Tool Qualification Considerations (product page) - RTCA
4. FAS Topic Paper FTP1055: tool qualification - RTCA
5. EASA Concept Paper Issue 02 - Guidance for Level 1 & 2 machine learning applications - EASA
6. AIR6988: Artificial Intelligence in Aeronautical Systems: Statement of Concerns - SAE International
7. Roadmap for Artificial Intelligence Safety Assurance, Version I - FAA

Related articles

• ARP4754B FDAL and IDAL when the function is machine learning
• How to qualify an ML tool under DO-330
• Prompt guardrails versus airborne runtime assurance
• An AI assurance glossary for aerospace and defense
• Building an AI assurance case (GSN/AMLAS) for certification
• Data assurance for ML in avionics: EASA learning assurance
• DO-178C and machine learning: where the gaps are
• DO-330 tool qualification for ML development and verification toolchains
• Does the FAA certify AI today? Current status
• The FAA AI Safety Assurance Roadmap, explained
• FAA and EASA AI certification timelines compared
• Formal verification of neural networks: what's usable today
• ISO/IEC 24029 neural-network robustness is not an aviation AMC
• How to map an AI model to DO-178C / DO-330 tool qualification
• Runtime assurance and simplex architectures for ML in flight
• SAE G-34 / ARP6983 status: what is published versus still draft

Questions

Why are there so few commercial tools tagged for DO-178C / DO-330?

We only tag a tool when the cited public page names this framework (or, for SAE G-34, EUROCAE WG-114, ED-324 or ARP6983). We do not infer support from a related aviation standard.

Where are the official DO-178C / DO-330 documents?

The official documents and working-group pages are listed on this page and on the DO-178C / DO-330 explainer.

← All tools · DO-178C / DO-330 explainer · Updates