For two decades now, Airbus has been using the full range of our tools, including aiT, StackAnalyzer, Astrée, and CompCert, in the development of safety-critical avionics software for several aircraft types, including the A380, the world’s largest passenger airplane. The analyzers are used as part of certification strategy to demonstrate compliance with DO-178B, up to Level A. Furthermore, various subsidiaries of the Airbus Group in France, Germany, and the UK have worked together with us on nine different EU research projects since 2000.
Bosch Automotive Steering replaced their legacy tools with Astrée and RuleChecker, resulting in significant savings thanks to faster analyses, higher accuracy, and optimized licensing and support costs. As a consequence, the Robert Bosch group acquired a worldwide license for the use of both tools. Additionally, various subsidiaries of the group partnered up with us on a total of nine different research projects since 2005.
MTU Friedrichshafen uses CompCert, aiT, StackAnalyzer, Astrée and RuleChecker to demonstrate the correctness of control software for emergency power generators in power plants. The tools in combination with their qualification packages are part of the certification process according to IEC 60880 and IEC 61508-3:2010.
Daimler has been using aiT and StackAnalyzer in many automotive software projects, including the powertrain control system of the Actros truck. Additionally, the company has worked with us on four research projects since 2007.
Framatome employs StackAnalyzer and Astrée for verification of their safety-critical TELEPERM XS platform that is used, among other things, for engineering, testing, commissioning, operating and troubleshooting nuclear reactors.
As a worldwide leading manufacturer of wind turbines, Vestas uses our tools to verify the timing behavior of their wind turbine control software and to make sure that no stack overflows can occur.
OHB uses aiT and StackAnalyzer in the development of onboard software essential for mission success of the SmallGEO satellite platform for geostationary communication satellites and the GALILEO FOC platform for satellite navigation.
Continental AG, one of the world’s largest automotive suppliers, has been relying on our StackAnalyzer analysis service for years to avoid stack overflows in their airbag control systems. The company also partnered up with us on four different research projects since 2007.
aiT, StackAnalyzer and ValueAnalyzer have been used by Honda in the FADEC software development of an aircraft turbofan engine.
On the lookout for an SCA tool for their AUTOSAR Adaptive applications for a German OEM, Luxoft found RuleChecker to be the only tool on the market that’s easy to set up on complex toolchains from different vendors with a build process partially executed within virtual machines.
Astrée was used to prove the absence of any runtime errors in a C version of the automatic docking software of the Jules Verne Automated Transfer Vehicle, enabling ESA to transport payloads to the International Space Station. This was the first fully automatic docking maneuver not performed by a Russian vessel.
For many years, various subsidiaries of the Thales Group have been using the full range of our tools, including our software for graph visualization, in addition to partnering up with us on a total of eight research projects since 2008.
As the world’s leading provider of embedded wireless communication and positioning solutions, u‑blox in Switzerland is using StackAnalyzer to avoid stack overflow problems at compile time and to increase the reliability and quality of their controlling software.
The global automotive supplier Helbako in Germany is using Astrée in their development process to demonstrate MISRA compliance of the code and to make sure that no runtime errors can occur in their electronic control software.
A world leader in motors and ventilators for air-conditioning and refrigeration systems, ebm-papst is using Astrée for fully automatic continuous verification of safety-critical interrupt-driven control software for commutating high-efficiency EC motors for ventilator systems.
Moving toward releasing the first MISRA-compliant embedded database system, McObject, a database vendor for embedded systems, incorporated RuleChecker into its software production for eXtremeDB and realized immediate benefits with respect to the stability and traceability of the code resulting from the identification and remediation of MISRA rule violations.
Distalmotion uses RuleChecker on a daily basis for medical device development. It helps the software team to assess and improve the quality and compliance of the code driving Distalmotion’s safety-critical robotic surgery platform.
In 2010, aiT was used by NASA as an industry-standard static analysis tool for demonstrating the absence of timing-related software defects in the Toyota Motor Corporation Unintended Acceleration Investigation.