• AADvance Control System

  Rockwell Automation · Commercial · Safety-critical AI platform

  Distributed, scalable safety instrumented system with fail-safe to TMR architectures. Official page: IEC 61508 certified (TÜV and Exida); TÜV-suitable for IEC 61508 up to SIL 3 and IEC 61511-1. SIL 1–3 in the same system. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• ABB High Integrity I/O (S800 and Select I/O)

  ABB · Commercial · Safety-critical AI platform

  ABB SIL3 I/O for System 800xA High Integrity. Select I/O High Integrity is listed as certified for IEC 61508-SIL3 and compatible with AC 800M controllers using SM812. Page does not name IEC 61511. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508

• ABB System 800xA High Integrity

  ABB · Commercial · Safety-critical AI platform

  ABB describes System 800xA High Integrity as a TÜV-certified SIL3 safety system and a complete SIS, deployable with System 800xA or independently. Page says it gives flexibility to meet IEC 61508 and IEC 61511 requirements. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• Ansys medini analyze

  Ansys · Commercial · Safety engineering

  Model-based safety analysis (HAZOP, HARA, FTA, FMEA/FMEDA) for E/E and software. Named standards: ISO 26262, IEC 61508, ARP 4761, ISO 21448 (SOTIF) and MIL-STD-882E. SOTIF covers hazards from sensor and perception-algorithm limitations. Not a model verifier.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • DO-178C / DO-330
  • ISO 26262
  • IEC 61508

• Ansys SCADE Suite

  Ansys · Commercial · Safety engineering

  Model-based development environment for critical embedded software. KCG C/Ada code generator is qualified as a development tool for DO-178B up to Level A and DO-178C/DO-330 at TQL-1. Avionics and Flight Controls named. Not a neural-network verifier.

  • Aerospace & aviation
  • Other safety-critical
  • Automotive
  • Industrial machinery and robotics
  • DO-178C / DO-330
  • DO-330
  • ISO 26262
  • IEC 61508

• Astrée

  AbsInt · Commercial · Safety engineering

  Sound static analyzer for safety-critical C and C++. Names hazard identification against ISO 26262, DO-178C, IEC-61508 and EN-50128, plus Qualification Support Kits for those standards. Bosch Automotive Steering and Airbus are named users. Not a neural-network verifier.

  • Automotive
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • DO-178C / DO-330

• BTC TestStack

  BTC Embedded Systems · Commercial · Safety engineering

  Testing stack (successor to BTC EmbeddedPlatform / EmbeddedTester) for model-based, hand-written and AI-generated code. TÜV Süd certificate names ISO 26262 (automotive), IEC 61508-3 (industrial) and IEC 62304 (medical). ISO 26262 TCL including ASIL D.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304

• CODESYS Virtual Safe Control SL

  CODESYS · Commercial · Safety-critical AI platform

  Virtual safety controller in a Linux container. Official page: certified according to IEC 61508 for SIL 3 applications, without IEC 61508 hardware certification of the host. TÜV SÜD. Diversified Encoding dual-channel. Not a trained-model SIL.

  • Industrial machinery and robotics
  • Other safety-critical
  • IEC 61508

• DeltaV SIS

  Emerson · Commercial · Safety-critical AI platform

  Safety instrumented system used across process industries for ESD, burner management, fire and gas and pipeline. Official brochure: meets IEC 61508 and IEC 61511 requirements for physical separation; built for IEC 61511 compliance; TÜV and exida certified for SIL 3 without restriction.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• exSILentia

  exida · Commercial · Safety engineering

  Modular safety-lifecycle suite for process-safety management and SIS functional-safety work. Official module table includes IEC 61511 Compliance Documentation and SILver, an IEC 61508 compliant SIL-verification calculation engine. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61511
  • IEC 61508

• GRIF SIL module

  TotalEnergies · Commercial · Safety engineering

  SIL calculation and verification software in the GRIF suite. Page headline: assessment of the availability level according to IEC 61508 and IEC 61511. Lists PFD and PFH computation and HFT and architectural constraints. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• Honeywell Safety Manager SC

  Honeywell · Commercial · Safety-critical AI platform

  Third-generation QMR (2oo4D) safety platform for ESD/SIS applications in the Process Control industry. TÜV Rheinland certified up to SIL 3. Official standards list includes IEC 61508/61511. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• IEC Certification Kit (for ISO 26262 and IEC 61508)

  MathWorks · Commercial · Safety engineering

  MathWorks kit of TÜV SÜD certificates and qualification work products for ISO 26262 (ASIL A–D), IEC 61508 (SIL 1–4) and IEC 62304. Supported-products table names IEC 61511:2016 for PLC Coder. ISO 26262 guidance covers AI-assisted model editing, review and test generation.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Process industries
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304
  • IEC 61511

• INTEGRITY RTOS

  Green Hills Software · Commercial · Safety-critical AI platform

  Separation-kernel RTOS with integrated platforms for automotive, industrial safety, medical devices and avionics. Certifications named: ISO 26262 ASIL D, IEC 61508 SIL 3, FDA Class II and Class III medical device approval, and DO-178B/C DAL A for INTEGRITY-178. Not an AI model verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • DO-178C / DO-330

• Parasoft C/C++test

  Parasoft · Commercial · Safety engineering

  Unified C/C++ static analysis, unit testing, MC/DC coverage and requirements traceability. TÜV SÜD–certified C/C++test names automotive (ISO 26262), medical (IEC 62304), industrial (IEC 61508) and aerospace/defense (DO-178C DAL A). Badges also list ISO/PAS 8800.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

• Perforce QAC

  Perforce · Commercial · Safety engineering

  Static analyzer for C, C++ and Rust (formerly Helix QAC). TÜV SÜD certified for ISO 26262 (automotive) up to ASIL D, IEC 61508 (general industry) up to SIL 4, and IEC 62304 (medical devices) up to Software Safety Class C. Also names a DO-330 pack for DO-178C. Not a neural-network verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304
  • DO-178C / DO-330
  • DO-330

• QNX OS for Safety

  QNX (BlackBerry) · Commercial · Safety-critical AI platform

  Safety-certified microkernel RTOS (QOS 8.0) certified by TÜV Rheinland to ISO 26262 ASIL D, IEC 61508 SIL 3, IEC 62304 Class C and ISO/SAE 21434. C/C++ toolchains classified TCL3/T3. FAQ names car, surgical robot, drone, power plant, machinery and control systems. Not an airborne runtime.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304

• SILability

  xSeriCon · Commercial · Safety engineering

  SIL verification software for SIFs. Page title: SIL Verification Software for IEC 61508/61511. Supports architectural constraint models for IEC 61508 (Route 1H and 2H) and IEC 61511 (2003 and 2016 editions), low, high and continuous demand. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• SILcet

  Enertria · Commercial · Safety engineering

  SIL verification tool for safety instrumented functions, offered as SILcet Cloud and SILcet Pro Plus. Official page says it complies with IEC 61508, IEC 61511 and ISA TR84.00.02. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

• Stages Process Management Software

  UL Solutions · Commercial · Compliance automation

  Process-management software with bidirectional traceability between process models and standard objectives. Official table names ISO 26262, ISO/PAS 8800 and UL 4600 under Automotive; IEC 62304 under Medical devices; IEC 61508 and IEC 61511-1 under Industrial.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Process industries
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • UL 4600
  • IEC 62304
  • IEC 61508
  • IEC 61511

• TESSY

  Razorcat Development GmbH · Commercial · Safety engineering

  Automated unit, module and integration testing of embedded C/C++. Official page: qualified for IEC 61508, IEC 62304, ISO 26262 and EN 50128. Call Pair Coverage is named as an ISO 26262 alternative for integration tests. TÜV SÜD certificate names ISO 26262-8:2018.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304

• VectorCAST

  Vector · Commercial · Safety engineering

  Embedded unit, integration and coverage test automation for C, C++ and Ada. Used in aerospace, automotive, medical device, industrial and railway programs. Tool validation packages for IEC 61508, ISO 26262 and IEC 62304 include TÜV SÜD certificates. Reqs2x AI tests require engineer review.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

• Yokogawa ProSafe-RS

  Yokogawa · Commercial · Safety-critical AI platform

  TÜV SIL3 safety instrumented system described as a safety PLC for the process industries. Complied functional-safety standards listed: IEC 61508, IEC 61511-1 and IEC 62061. Used in over 3,500 projects. Not an AI-management platform.

  • Process industries
  • Other safety-critical
  • IEC 61508
  • IEC 61511

Official documents and working-group pages

These are the primary public pages we cite for IEC 61508. They are not directory listings and are not endorsements.

Sources last checked on 15 October 2026.

1. IEC 61508-1:2010 - Functional safety of E/E/PE safety-related systems — Part 1: General requirements - IEC
2. IEC 61508-3:2010 - Functional safety of E/E/PE safety-related systems — Part 3: Software requirements - IEC
3. ISO/IEC TR 5469:2024 - Artificial intelligence — Functional safety and AI systems - ISO

Related articles

• IEC 61508-3 software requirements and ISO/IEC TR 5469 — where learned components sit
• Process-industry SIS — IEC 61511 and the parent IEC 61508 publication
• IEC 61511 SIS life-cycle questions for AI in process plants
• Industrial machinery ML — what evidence will a notified body expect?
• Industrial machinery AI — Regulation 2023/1230, ISO 10218 and IEC 61508
• Process industries ML — what evidence will an assessor expect?
• Process-industry SIS vendor pages — IEC 61511 named, IEC 61508 named, or neither

Questions

Why are there so few commercial tools tagged for IEC 61508?

We only tag a tool when the cited public page names this framework (or, for SAE G-34, EUROCAE WG-114, ED-324 or ARP6983). We do not infer support from a related aviation standard.

Where are the official IEC 61508 documents?

The official documents and working-group pages are listed on this page and on the IEC 61508 explainer.

← All tools · IEC 61508 explainer · Updates