• Ansys medini analyze

  Ansys · Commercial · Safety engineering

  Model-based safety analysis (HAZOP, HARA, FTA, FMEA/FMEDA) for E/E and software. Named standards: ISO 26262, IEC 61508, ARP 4761, ISO 21448 (SOTIF) and MIL-STD-882E. SOTIF covers hazards from sensor and perception-algorithm limitations. Not a model verifier.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • DO-178C / DO-330
  • ISO 26262
  • IEC 61508

• Ansys SCADE Suite

  Ansys · Commercial · Safety engineering

  Model-based development environment for critical embedded software. KCG C/Ada code generator is qualified as a development tool for DO-178B up to Level A and DO-178C/DO-330 at TQL-1. Avionics and Flight Controls named. Not a neural-network verifier.

  • Aerospace & aviation
  • Other safety-critical
  • Automotive
  • Industrial machinery and robotics
  • DO-178C / DO-330
  • DO-330
  • ISO 26262
  • IEC 61508

• Astah System Safety (GSN)

  Change Vision · Commercial · Safety engineering

  GSN modeling in Astah System Safety. Names GSN Community Standard version 1.0 and OMG SACM (ARM) import/export, plus SysML Requirement-to-Goal sync, STPA/STAMP, Auto-Layout and an in-app Script Editor. Marketing page lists automotive (ISO 26262), aerospace (DO-178B), rail, nuclear and defense.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • Medical devices
  • Process industries
  • ISO 26262

• Astrée

  AbsInt · Commercial · Safety engineering

  Sound static analyzer for safety-critical C and C++. Names hazard identification against ISO 26262, DO-178C, IEC-61508 and EN-50128, plus Qualification Support Kits for those standards. Bosch Automotive Steering and Airbus are named users. Not a neural-network verifier.

  • Automotive
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • DO-178C / DO-330

• BTC TestStack

  BTC Embedded Systems · Commercial · Safety engineering

  Testing stack (successor to BTC EmbeddedPlatform / EmbeddedTester) for model-based, hand-written and AI-generated code. TÜV Süd certificate names ISO 26262 (automotive), IEC 61508-3 (industrial) and IEC 62304 (medical). ISO 26262 TCL including ASIL D.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304

• IEC Certification Kit (for ISO 26262 and IEC 61508)

  MathWorks · Commercial · Safety engineering

  MathWorks kit of TÜV SÜD certificates and qualification work products for ISO 26262 (ASIL A–D), IEC 61508 (SIL 1–4) and IEC 62304. Supported-products table names IEC 61511:2016 for PLC Coder. ISO 26262 guidance covers AI-assisted model editing, review and test generation.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Process industries
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304
  • IEC 61511

• INTEGRITY RTOS

  Green Hills Software · Commercial · Safety-critical AI platform

  Separation-kernel RTOS with integrated platforms for automotive, industrial safety, medical devices and avionics. Certifications named: ISO 26262 ASIL D, IEC 61508 SIL 3, FDA Class II and Class III medical device approval, and DO-178B/C DAL A for INTEGRITY-178. Not an AI model verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • DO-178C / DO-330

• Parasoft C/C++test

  Parasoft · Commercial · Safety engineering

  Unified C/C++ static analysis, unit testing, MC/DC coverage and requirements traceability. TÜV SÜD–certified C/C++test names automotive (ISO 26262), medical (IEC 62304), industrial (IEC 61508) and aerospace/defense (DO-178C DAL A). Badges also list ISO/PAS 8800.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

• Perforce QAC

  Perforce · Commercial · Safety engineering

  Static analyzer for C, C++ and Rust (formerly Helix QAC). TÜV SÜD certified for ISO 26262 (automotive) up to ASIL D, IEC 61508 (general industry) up to SIL 4, and IEC 62304 (medical devices) up to Software Safety Class C. Also names a DO-330 pack for DO-178C. Not a neural-network verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304
  • DO-178C / DO-330
  • DO-330

• QNX OS for Safety

  QNX (BlackBerry) · Commercial · Safety-critical AI platform

  Safety-certified microkernel RTOS (QOS 8.0) certified by TÜV Rheinland to ISO 26262 ASIL D, IEC 61508 SIL 3, IEC 62304 Class C and ISO/SAE 21434. C/C++ toolchains classified TCL3/T3. FAQ names car, surgical robot, drone, power plant, machinery and control systems. Not an airborne runtime.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304

• Rapita Verification Suite (RVS)

  Rapita Systems · Commercial · Safety engineering

  Rapita Verification Suite for requirements-based testing, MC/DC coverage, WCET timing and scheduling visualization. Qualification kits for DO-178C; kits have supported more than 20 DO-178B and C projects up to DAL A. Rapi Coupling is in development (expected H1 2027).

  • Aerospace & aviation
  • Other safety-critical
  • Automotive
  • DO-178C / DO-330
  • ISO 26262

• Stages Process Management Software

  UL Solutions · Commercial · Compliance automation

  Process-management software with bidirectional traceability between process models and standard objectives. Official table names ISO 26262, ISO/PAS 8800 and UL 4600 under Automotive; IEC 62304 under Medical devices; IEC 61508 and IEC 61511-1 under Industrial.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Process industries
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • UL 4600
  • IEC 62304
  • IEC 61508
  • IEC 61511

• TESSY

  Razorcat Development GmbH · Commercial · Safety engineering

  Automated unit, module and integration testing of embedded C/C++. Official page: qualified for IEC 61508, IEC 62304, ISO 26262 and EN 50128. Call Pair Coverage is named as an ISO 26262 alternative for integration tests. TÜV SÜD certificate names ISO 26262-8:2018.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304

• VectorCAST

  Vector · Commercial · Safety engineering

  Embedded unit, integration and coverage test automation for C, C++ and Ada. Used in aerospace, automotive, medical device, industrial and railway programs. Tool validation packages for IEC 61508, ISO 26262 and IEC 62304 include TÜV SÜD certificates. Reqs2x AI tests require engineer review.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

Official documents and working-group pages

These are the primary public pages we cite for ISO 26262. They are not directory listings and are not endorsements.

Sources last checked on 15 October 2026.

1. ISO 26262-1:2018 - Road vehicles — Functional safety — Part 1: Vocabulary - ISO
2. ISO/PAS 8800:2024 - Road vehicles — Safety and artificial intelligence - ISO
3. IEC 61508-1:2010 - Functional safety of E/E/PE safety-related systems — Part 1 - IEC

Related articles

• Automotive AI assurance — ISO 26262, ISO/PAS 8800 and UL 4600
• Automotive AI — separating tool-qualification claims from vehicle-level safety claims
• Automotive ML component — what evidence will an assessor expect?
• ISO/PAS 8800 and ISO 26262 — reading the scope lines side by side

Questions

Why are there so few commercial tools tagged for ISO 26262?

We only tag a tool when the cited public page names this framework (or, for SAE G-34, EUROCAE WG-114, ED-324 or ARP6983). We do not infer support from a related aviation standard.

Where are the official ISO 26262 documents?

The official documents and working-group pages are listed on this page and on the ISO 26262 explainer.

← All tools · ISO 26262 explainer · Updates