Skip to main content

Tools List

This page lists known tools that may be used to develop safety critical Rust code. The list is maintained by the subcommittee, and while we try to keep information up to date, this list is provided as is without any legal guarantees. Please get in touch with the tool authors and vendors before starting your project..

If you want to add or update the list, please open an issue on the safety-critical-rust-consortium repository, or on the Rust Zulip safety-critical-consortium channel.

Rust Tooling for use in Safety Critical Projects

Version 1.2 · Last checked 2026-03-07

Tool Categories

Tracked standards

StandardLevelsDescription
ISO 26262ASIL A
ASIL B
ASIL C
ASIL D
Road vehicles - Functional safety
DO-178CDAL E
DAL D
DAL C
DAL B
DAL A
Software Considerations in Airborne Systems and Equipment Certification
IEC 62304Class A
Class B
Class C
Medical device software - software life cycle processes
IEC 61508SIL 1
SIL 2
SIL 3
SIL 4
Functional Safety of Electrical/Electronic/Programmable Electronic Safety-related Systems
EN 50128SIL 1
SIL 2
SIL 3
SIL 4
Railway applications - Communication, signalling and processing systems - Software for railway control and protection systems

Package Managers

Tool
Description
License
Qualification

Built-in Rust package manager and test runner

Apache 2.0 & MIT

Compilers

Tool
Description
License
Qualification
Ferrocene
Vendor: Critical Section GmbH

Open-source qualified Rust compiler toolchain for safety- and mission-critical systems

Apache 2.0 & MIT
ISO 26262 (up to ASIL D)IEC 62304 (up to Class C)IEC 61508 (up to SIL 4)
Details
Liability:

Pre-qualified binaries and support are available with monthly/yearly subscriptions. Qualification kits are also available for an additional fee.

Qualification Info:
GNAT Pro for Rust
Vendor: AdaCore

AdaCore's Toolsuite for High-Assurance Rust Software; Includes stable toolchain for long-term development, long-term support, and qualification

Apache 2.0 & MIT
Details
Liability:

Contact AdaCore for costs and legalities related to qualification and support.

HighTec Rust Compiler
Vendor: HighTec

ISO 26262 ASIL D qualified Rust Compiler Development Platform for ARM based Stellar from STMicroelectronics and Infineon AURIX

Apache 2.0 & MIT
ISO 26262 (up to ASIL D)
Details
Liability:

Contact HighTec for costs and legalities related to qualification and support.

Static Analysis

Tool
Description
License
Qualification

Tool to statically compute the worst-case execution time of each task.

commercial
ISO 26262 (up to ASIL D)DO-178C (up to DAL A)IEC 61508 (up to SIL 4)EN 50128 (up to SIL 4)
Details
Qualification Info:

Clippy is a collection of lints to catch common mistakes and improve Rust code. It analyzes code for potential bugs, performance issues, style violations, and suggests more idiomatic Rust patterns.

Apache 2.0 & MIT
TrustInSoft Analyzer
Vendor: TrustInSoft

Static analysis for C, C++, and soon to be Rust code

commercial
Details
Liability:

Contact TrustInSoft for costs and legalities related to qualification and support.

Formal Verification

Tool
Description
License
Qualification

Creusot is a deductive verifier for Rust code. It verifies your code is safe from panics, overflows, and assertion failures. By adding annotations you can take it further and verify your code does the correct thing.

LGPL 2.1

Kani is an open-source verification tool that uses model checking to analyze Rust programs. Kani is particularly useful for verifying unsafe code blocks in Rust, where the 'unsafe superpowers' are unchecked by the compiler.

Apache 2.0 & MIT

VeriFast is a tool for modular formal verification of the absence of undefined behavior in Rust1 programs that use unsafe blocks and the soundness of Rust modules that use unsafe blocks.

MIT

Test Runners

Tool
Description
License
Qualification

Next-generation test runner for Rust

Apache 2.0 & MIT
defmt-test
Vendor: Ferrous Systems GmbH

Embedded testing framework

Apache 2.0 & MIT
TESSY
Vendor: Razorcat

Qualified unit testing tool

commercial
Details
Liability:

Contact Razorcat for costs and legalities related to qualification and support.

VectorCast
Vendor: Vector Software

Qualified test runner and generator for safety-critical applications

commercial
Details
Liability:

Contact Vector Software for costs and legalities related to qualification and support.

Code Coverage

Tool
Description
License
Qualification

Code coverage tool for Rust

Apache 2.0 & MIT

Debuggers

Tool
Description
License
Qualification
Lauterbach Trace32 Debugger
Vendor: Lauterbach

Lauterbach‘s TRACE32® tools are a suite of leading-edge hardware and software components that enables you to analyze, optimize and certify all kinds of embedded systems.

commercial
Details
Liability:

Contact Lauterbach for costs and legalities related to qualification and support.

PLS UDE
Vendor: PLS Programmierbare Logik & Systeme GmbH

UDE® Universal Debug Engine is the powerful development tool for debugging, tracing, and testing embedded software for a wide range of multicore SoCs and microcontrollers.

commercial
Details
Liability:

Contact PLS for costs and legalities related to qualification and support.

Profilers

Tool
Description
License
Qualification

Flame graph profiler for Rust

Apache 2.0 & MIT

Requirements Traceability

Tool
Description
License
Qualification

Requirements traceability with structural code analysis and code coverage

MIT

OpenFastTrace (short OFT) is a requirement tracing suite.

GPL-3.0
Reqtify
Vendor: Dassault Systèmes

Reqtify is a solution which allows implementing an End-To-End Traceability along the whole V-Cycle across very different types of document and data bases (by plugin connector).

commercial
Details
Liability:

Contact Dassault Systèmes for costs and legalities related to qualification and support.

Sphinx Needs is a requirements management extension for Sphinx documentation that enables tracing and linking of requirements, specifications, test cases, and other project artifacts

MIT