AI Assurance DirectoryAI assurance tools for Aerospace & aviation
Airborne, air traffic management and aviation certification contexts. Industry tags come from the cited public pages, not from our judgment. Read the Aerospace & aviation overview for frameworks and articles.
-
Adelard ASCE
Assurance-case software with CAE (including ASCAD 2.0 for autonomous systems and AI-driven machine-learning behaviour) and GSN Version 3 plus a Modular GSN plugin. Node-locked and floating licences; both can operate with limited or no Internet. Customer stories name MoD DE&S QEC ATM and aerospace.
-
AdvoCATE
NASA Ames Assurance Case Automation Toolset for GSN arguments, hazard analysis, bow-tie risk models and verification artifacts. NTRS User Guide 1.4 covers safety risk management. DARPA Assured Autonomy acknowledgment.
-
Ansys medini analyze
Model-based safety analysis (HAZOP, HARA, FTA, FMEA/FMEDA) for E/E and software. Named standards: ISO 26262, IEC 61508, ARP 4761, ISO 21448 (SOTIF) and MIL-STD-882E. SOTIF covers hazards from sensor and perception-algorithm limitations. Not a model verifier.
-
Ansys SCADE Suite
Model-based development environment for critical embedded software. KCG C/Ada code generator is qualified as a development tool for DO-178B up to Level A and DO-178C/DO-330 at TQL-1. Avionics and Flight Controls named. Not a neural-network verifier.
-
Astah System Safety (GSN)
GSN modeling in Astah System Safety. Names GSN Community Standard version 1.0 and OMG SACM (ARM) import/export, plus SysML Requirement-to-Goal sync, STPA/STAMP, Auto-Layout and an in-app Script Editor. Marketing page lists automotive (ISO 26262), aerospace (DO-178B), rail, nuclear and defense.
-
Astrée
Sound static analyzer for safety-critical C and C++. Names hazard identification against ISO 26262, DO-178C, IEC-61508 and EN-50128, plus Qualification Support Kits for those standards. Bosch Automotive Steering and Airbus are named users. Not a neural-network verifier.
-
CAISAR
CEA List open-source platform (CAISAR 6.0, June 2026) for characterizing AI safety and robustness. WhyML specifications discharged by PyRAT, Marabou, nnenum, alpha-beta-CROWN and others. Examples include functional properties of ACAS Xu.
-
CycloneDX (AI/ML-BOM)
OWASP/Ecma TC54 BOM standard (CycloneDX 1.7, released 21 October 2025) published as ECMA-424 2nd edition (10 December 2025). Homepage names 260+ tools, the defense industrial base, satellite and space systems, and medical-device HBOM/SBOM. The ML-BOM guide names the EU AI Act and NIST AI RMF.
-
ERAN
ETH SRI Lab Apache-2.0 analyzer (DeepZ, DeepPoly, GPUPoly) for complete and incomplete verification of feedforward, convolutional and residual networks, including ACAS Xu. Python 3.6+ and TensorFlow 1.11+. Uses ELINA; Gurobi for RefineZono/RefinePoly.
-
EU AI Act Service Desk
Official Commission Service Desk and Single Information Platform for the AI Act (in force 1 August 2024). Explorer and Compliance Checker. Annex I civil-aviation entry is unmanned-aircraft-limited. Consolidated text as at 27 July 2026.
-
INTEGRITY RTOS
Separation-kernel RTOS with integrated platforms for automotive, industrial safety, medical devices and avionics. Certifications named: ISO 26262 ASIL D, IEC 61508 SIL 3, FDA Class II and Class III medical device approval, and DO-178B/C DAL A for INTEGRITY-178. Not an AI model verifier.
-
LDRA (AI and machine learning capability)
LDRA AI/ML capability page covering test generation, change-impact analysis and AI/ML in safety-critical sectors. The aviation section names EASA guidance for Level 1 and 2 machine-learning applications. Not a neural-network verifier.
-
LYNX MOSA.ic.AI
Deterministic CPU and GPU runtime for AI at the mission-critical edge. Combines MOSA.ic with CoreSuite; not a training platform. The 8 April 2026 launch names a path to DO-178C, not a completed product certificate.
-
Marabou
SMT-based neural-network verifier (Marabou 2.0). ONNX main format; also .nnet, TensorFlow and VNNLIB. pip install maraboupy (Python 3.8–3.11). Default: DeepPoly bound tightening and DeepSoI. Optional Gurobi, parallelism and Split-and-Conquer. ACAS Xu example. Research product.
-
MathWorks AI Verification Library for Deep Learning Toolbox
Formal robustness verification, output bounds, adversarial examples and out-of-distribution detection for MATLAB, ONNX and PyTorch networks, with airborne runway-sign and ACAS Xu worked examples.
-
MathWorks DO Qualification Kit
Documentation, test cases and procedures to qualify supported Simulink and Polyspace tools for DO-178C, DO-278A, DO-254 and DO-330. The FAQ says the kit does not prequalify tools; qualification is project-specific.
-
NASA ProgPy
NASA ProgPy 1.8.0 (2024 NASA Software of the Year): pip install progpy; Python ≥3.9,<3.14. PHM and remaining-useful-life research with an optional LSTM datadriven extra and a prog_server SOA. Partners named: DLR, Northrop Grumman and Vanderbilt. NASA-1.3 — no OSI badge.
-
nnenum
Python 3.9+ neural-network verifier (pip install .; nnenum 1.0.1, GPL-3.0-or-later) for ReLU networks. Combines zonotopes with star sets, uses the ImageStar trick through ONNX Runtime, and ships ACAS Xu ONNX/vnnlib examples. VNN-COMP 2020: only tool to verify all ACAS-Xu benchmarks.
-
NNV (Neural Network Verification Toolbox)
MATLAB toolbox for set-based neural-network verification using Star sets and zonotopes. 10+ architectures and 48 layer types; ONNX and VNNLIB. Official aerospace domain and all 45 ACAS Xu networks. AFOSR, DARPA and NSF.
-
Parasoft C/C++test
Unified C/C++ static analysis, unit testing, MC/DC coverage and requirements traceability. TÜV SÜD–certified C/C++test names automotive (ISO 26262), medical (IEC 62304), industrial (IEC 61508) and aerospace/defense (DO-178C DAL A). Badges also list ISO/PAS 8800.
-
Perforce QAC
Static analyzer for C, C++ and Rust (formerly Helix QAC). TÜV SÜD certified for ISO 26262 (automotive) up to ASIL D, IEC 61508 (general industry) up to SIL 4, and IEC 62304 (medical devices) up to Software Safety Class C. Also names a DO-330 pack for DO-178C. Not a neural-network verifier.
-
PyRAT
CEA List neural-network verifier (Python Reachability Assessment Tool) using abstract interpretation. Site: VNN-COMP 2024 second place, all 12 regular-track benchmarks, more than 1700 properties, ACAS-XU collision-avoidance example. CAISAR news ranks PyRAT third at VNN-Comp 2026.
-
Rapita Verification Suite (RVS)
Rapita Verification Suite for requirements-based testing, MC/DC coverage, WCET timing and scheduling visualization. Qualification kits for DO-178C; kits have supported more than 20 DO-178B and C projects up to DAL A. Rapi Coupling is in development (expected H1 2027).
-
Re:In (Moasoftware)
Data-quality platform the vendor maps to ARP6983/ED-324 §§6.2–6.5 (bias, diversity, sufficiency, balance, augmentation, reliability reports). W-Shape four stages. Dated 25 August 2026; updated 6 October 2026.
-
Saimple
Static analyzer that uses abstract interpretation to assess neural-network robustness, citing ISO/IEC 24029. Sold as SaaS and on-premises. Numalis names Article 15 explainability reports and EASA MLEAP work.
-
Stages Process Management Software
Process-management software with bidirectional traceability between process models and standard objectives. Official table names ISO 26262, ISO/PAS 8800 and UL 4600 under Automotive; IEC 62304 under Medical devices; IEC 61508 and IEC 61511-1 under Industrial.
-
VectorCAST
Embedded unit, integration and coverage test automation for C, C++ and Ada. Used in aerospace, automotive, medical device, industrial and railway programs. Tool validation packages for IEC 61508, ISO 26262 and IEC 62304 include TÜV SÜD certificates. Reqs2x AI tests require engineer review.
Questions
Why are only these tools tagged Aerospace & aviation?
Industry tags come from the cited public pages, not from our judgment. If a vendor page does not name this industry, the listing does not get the tag.
Where is the cited industry overview?
The Aerospace & aviation overview cites official sources and links frameworks and articles for this industry.