• 6clicks (ISO 42001)

  6clicks · Commercial · Compliance automation

  GRC with a pre-configured ISO/IEC 42001:2023 AIMS, Hailey AI mapping, SoA and Hub & Spoke. Cross-maps ISO 27001 and the EU AI Act. Homepage names SaaS, sovereign cloud or on-prem, and cloud, on-premises, air-gapped or hybrid.

  • Defense & national security
  • Other safety-critical
  • ISO/IEC 42001
  • EU AI Act

• Adelard ASCE

  Adelard (NCC Group) · Commercial · Safety engineering

  Assurance-case software with CAE (including ASCAD 2.0 for autonomous systems and AI-driven machine-learning behaviour) and GSN Version 3 plus a Modular GSN plugin. Node-locked and floating licences; both can operate with limited or no Internet. Customer stories name MoD DE&S QEC ATM and aerospace.

  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical

• Advai

  Advai · Commercial · AI assurance & verification

  UK AI testing and monitoring platform for performance, safety, security and robustness, with Defence & Government among named sectors. Platform covers agents, LLMs, computer vision, time series and multimodal systems; Model Arena for vendor selection.

  • Defense & national security
  • Cross-industry

• Adversarial Robustness Toolbox (ART)

  Linux Foundation AI & Data (started at IBM) · Open source · AI assurance & verification · Open source · MIT

  Python library hosted by LF AI & Data for evaluating and defending ML models against evasion, poisoning, extraction and inference. PyPI 1.20.1 (7 July 2025) lists Python 3.10–3.12. Supports TensorFlow, Keras, PyTorch and similar frameworks. MIT-licensed. DARPA HR001120C0013 acknowledgment.

  • Defense & national security
  • Cross-industry

• AI Practitioner's Handbook (AIPH)

  UK Ministry of Defence / Defence AI Centre · Government-published · Government-published resource

  UK MOD Part 2-style handbook (BETA) to comply with JSP 936 Part 1. Guidance for leaders, developers and users. DAIC AI Assurance Framework (Published 27 February 2026) covers people, process, evidence and technology; names SROs and RAISOs.

  • Defense & national security
  • UK MOD JSP 936

• Ansys medini analyze

  Ansys · Commercial · Safety engineering

  Model-based safety analysis (HAZOP, HARA, FTA, FMEA/FMEDA) for E/E and software. Named standards: ISO 26262, IEC 61508, ARP 4761, ISO 21448 (SOTIF) and MIL-STD-882E. SOTIF covers hazards from sensor and perception-algorithm limitations. Not a model verifier.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • DO-178C / DO-330
  • ISO 26262
  • IEC 61508

• Astah System Safety (GSN)

  Change Vision · Commercial · Safety engineering

  GSN modeling in Astah System Safety. Names GSN Community Standard version 1.0 and OMG SACM (ARM) import/export, plus SysML Requirement-to-Goal sync, STPA/STAMP, Auto-Layout and an in-app Script Editor. Marketing page lists automotive (ISO 26262), aerospace (DO-178B), rail, nuclear and defense.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • Medical devices
  • Process industries
  • ISO 26262

• CDAO AI Assurance (AIA) Toolkit

  DoD Chief Digital and Artificial Intelligence Office · Government-published · Government-published resource

  CDAO self-evaluation toolkit that operationalizes DoW AI Ethical Principles. Released November 2023 as the RAI Toolkit; the live Tradewinds page titles it AIA Toolkit. For Program Managers, AI Developers, Acquisition Teams, Legal/Compliance and End Users; IL2 and IL5.

  • Defense & national security
  • DoD Responsible AI
  • CDAO RAI Toolkit
  • DoD RAI Strategy

• CDAO Joint AI Test Infrastructure Capability (JATIC)

  DoD Chief Digital and Artificial Intelligence Office · Government-published · Government-published resource

  CDAO program (funded FY23–FY29) of Python AI T&E libraries, the RAVEN MLOps platform and the maite types/protocols. Focused on CV classification and object detection for UAV, satellite and autonomous-driving missions. Public packages on GitHub, Conda and PyPI. Not a certification.

  • Defense & national security
  • DoD Responsible AI
  • DoD Directive 3000.09

• CDAO Test and Evaluation of Artificial Intelligence Models Framework

  DoD Chief Digital and Artificial Intelligence Office · Government-published · Government-published resource

  April 2024 public CDAO primer on what to consider in a T&E strategy for AI models in a Defense context. Four focus areas, a performance iceberg beyond correctness, and named links to the DoD Ethical AI Principles and NIST AI RMF. Explicitly not binding policy.

  • Defense & national security
  • DoD Responsible AI
  • NIST AI RMF
  • DoD RAI Strategy

• CycloneDX (AI/ML-BOM)

  OWASP / Ecma TC54 · Open source · AI assurance & verification · Open source · Apache-2.0

  OWASP/Ecma TC54 BOM standard (CycloneDX 1.7, released 21 October 2025) published as ECMA-424 2nd edition (10 December 2025). Homepage names 260+ tools, the defense industrial base, satellite and space systems, and medical-device HBOM/SBOM. The ML-BOM guide names the EU AI Act and NIST AI RMF.

  • Aerospace & aviation
  • Defense & national security
  • Space systems
  • Medical devices
  • EU AI Act
  • NIST AI RMF

• Edge Case

  Edge Case · Commercial · Safety engineering

  Safety-as-a-Service: Guardian Digital Safety Twin plus AI/ML software-safety, system-safety engineering, T&E and certification practices. The homepage names AUSA 2025 defense programs and quotes Aurora on third-party safety expertise.

  • Defense & national security
  • Other safety-critical

• Fiddler AI

  Fiddler AI · Commercial · AI assurance & verification

  AI control plane for agentic and predictive models: continuous evaluations, inline guardrails and governance. Government page names DoD ML/LLM deployment, AWS GovCloud, and air-gapped options. Homepage FAQ names SaaS, VPC or on-premises.

  • Defense & national security
  • Cross-industry

• Giskard

  Giskard · Commercial · AI assurance & verification

  LLM-agent testing (Python SDK and Hub UI), red-teaming and runtime Guards with an EU AI Act Policy Pack (OPA/Rego). On-premise Hub for public-sector and defense workloads. Named sectors: banking and insurance.

  • Defense & national security
  • Cross-industry
  • EU AI Act
  • NIST AI RMF

• HEART (Hardened Extension of ART)

  IBM (CDAO JATIC collaboration) · Open source · AI assurance & verification · Open source · MIT

  MIT-licensed Python 3.9–3.11 library (pip install heart-library; 0.7.0) that extends ART for DoD T&E. Modules: attacks, estimators, metrics. Aligns to MAITE; depends on ART ≥1.20.1. CDAO contract W519TC-23-9-2037. Optional Gradio front end.

  • Defense & national security

• HiddenLayer AI Security Platform

  HiddenLayer · Commercial · AI assurance & verification

  AI security platform with government and defense pages: NIST AI RMF alignment, contractor and open-source model scanning, real-time monitoring, and air-gapped options for classified disconnected environments. The homepage also names AI Discovery, supply-chain, attack simulation and runtime security.

  • Defense & national security
  • Cross-industry
  • NIST AI RMF

• IARPA TrojAI

  IARPA (with NIST test and evaluation) · Government-published · AI assurance & verification

  IARPA program (BAA W911NF-19-S-0012, closed) and NIST T&E resources for detecting Trojan/backdoor attacks in trained AIs before deployment. T&E partners: JHU APL, NIST, SEI and Sandia. NIST still hosts a leaderboard and baseline detector; that page is no longer updated.

  • Defense & national security

• LYNX MOSA.ic.AI

  Lynx Software Technologies · Commercial · Safety-critical AI platform

  Deterministic CPU and GPU runtime for AI at the mission-critical edge. Combines MOSA.ic with CoreSuite; not a training platform. The 8 April 2026 launch names a path to DO-178C, not a completed product certificate.

  • Aerospace & aviation
  • Defense & national security

• Parasoft C/C++test

  Parasoft · Commercial · Safety engineering

  Unified C/C++ static analysis, unit testing, MC/DC coverage and requirements traceability. TÜV SÜD–certified C/C++test names automotive (ISO 26262), medical (IEC 62304), industrial (IEC 61508) and aerospace/defense (DO-178C DAL A). Badges also list ISO/PAS 8800.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

• Perforce QAC

  Perforce · Commercial · Safety engineering

  Static analyzer for C, C++ and Rust (formerly Helix QAC). TÜV SÜD certified for ISO 26262 (automotive) up to ASIL D, IEC 61508 (general industry) up to SIL 4, and IEC 62304 (medical devices) up to Software Safety Class C. Also names a DO-330 pack for DO-178C. Not a neural-network verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304
  • DO-178C / DO-330
  • DO-330

• Resaro Approved Intelligence Platform

  Resaro · Commercial · AI assurance & verification

  On-premise, air-gapped TEVV platform that produces ASQI-structured deployment evidence for civil and defence AI. CI/CD-native workflows over text and image; used in the IMDA/AI Verify Global AI Assurance Pilot.

  • Defense & national security
  • Other safety-critical

• Saimple

  Numalis · Commercial · AI assurance & verification

  Static analyzer that uses abstract interpretation to assess neural-network robustness, citing ISO/IEC 24029. Sold as SaaS and on-premises. Numalis names Article 15 explainability reports and EASA MLEAP work.

  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • EU AI Act
  • EASA AI Concept Paper

• Secureframe (defense contractor offering)

  Secureframe · Commercial · Compliance automation

  CMMC and CUI platform for the Defense Industrial Base. Secureframe Defense automates enclave, documentation and monitoring; the CMMC page names GCC High, Defense Navigator, FedRAMP Moderate MDM and a CyberAB RPO listing. Not an AI-model assurance tool.

  • Defense & national security
  • CMMC / NIST SP 800-171

• Stages Process Management Software

  UL Solutions · Commercial · Compliance automation

  Process-management software with bidirectional traceability between process models and standard objectives. Official table names ISO 26262, ISO/PAS 8800 and UL 4600 under Automotive; IEC 62304 under Medical devices; IEC 61508 and IEC 61511-1 under Industrial.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Process industries
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • UL 4600
  • IEC 62304
  • IEC 61508
  • IEC 61511

• Trustible

  Trustible · Commercial · AI governance platform

  AI governance platform for regulated enterprises: intake, inventory, risk triaging and continuous monitoring. Maps controls to the EU AI Act, NIST AI RMF and ISO 42001. Official 10 April 2026 Leidos story covers defense, intelligence, civil and health programs.

  • Defense & national security
  • Cross-industry
  • EU AI Act
  • NIST AI RMF
  • ISO/IEC 42001

• Vanta

  Vanta · Commercial · Compliance automation

  Compliance automation covering ISO 42001, NIST AI RMF and CMMC (mapped to NIST SP 800-171/172). The ISO 42001 product page also maps evidence to the EU AI Act. Not an AI-model assurance tool.

  • Cross-industry
  • Defense & national security
  • ISO/IEC 42001
  • NIST AI RMF
  • CMMC / NIST SP 800-171
  • EU AI Act

← All tools

Questions

Why are only these tools tagged Defense & national security?

Industry tags come from the cited public pages, not from our judgment. If a vendor page does not name this industry, the listing does not get the tag.

Where is the cited industry overview?

The Defense & national security overview cites official sources and links frameworks and articles for this industry.