Skip to main content

ISO 26262 Academy · 9 simulators · in the browser

Nine safety analyses you can actually run.

Build fault trees, run FMEA and FMEDA, evolve Markov chains, derive unsafe control actions, argue independence, trace fault propagation, run HAZOP studies and assemble GSN safety cases. Built on ISO 26262, AIAG-VDA 2019, IEC 61025 and IEC 61882, with worked automotive examples in every tool.

  • 9 simulators
  • 8 FTA gate types
  • 10+ computed metrics
  • 20+ worked examples
  • JSON · CSV export

Markov is free for every registered user. FTA from Pro. All nine on Expert.

Inside the lab

Real tools, real numbers.

Screens from the platform as it runs today. Every simulator ships with worked automotive examples you can modify, and every number on screen is computed, not illustrated.

iso26262.academy/simulators/fta
The FTA Simulator with a three-event fault tree: a top event of 1.313 times ten to the minus three under an OR gate with Sensor A, Sensor B and Controller basic events rated 50, 75 and 25 FIT.

Fault Tree Analysis

Draw the tree, read the cut sets.

The FTA Simulator quantifies a top event from basic-event failure rates over a mission time, lists the minimal cut sets, and ranks basic events by Birnbaum, Fussell-Vesely, RAW and RRW importance. The starter example is a three-event OR tree; the gate palette goes to PAND, SAND, INHIBIT and voting.

What the FTA Simulator includes
iso26262.academy/simulators/fmeda
The FMEDA Simulator showing SPFM 86.3 %, LFM 81.4 % and PMHF 113.9 FIT for an ASIL C transmission control safety goal, with the current single-core architecture flagged as not meeting the targets.

Hardware Safety Analysis

Watch SPFM, LFM and PMHF move.

The FMEDA Simulator is a clickable TCU power-supply schematic with a safety goal, safe state and FTTI. Swap a safety mechanism and the three ISO 26262-5 metrics recalculate against the ASIL C targets, so an architecture gap shows before the board layout does.

What the FMEDA Simulator includes
iso26262.academy/simulators/gsn
The GSN Simulator with an ASIL D braking safety goal argument: goal G-1 with two contexts, a strategy arguing over each functional safety requirement, and four supporting goals, validated as legal structure with no gaps.

Goal Structuring Notation Builder

Argue the safety case and validate it live.

The GSN Simulator builds goals, strategies, solutions, contexts, assumptions and justifications with automatic layout, and checks the argument against the GSN Community Standard as you go: legal structure, no gaps, evidence complete.

What the GSN Safety Case Simulator includes

The catalog

All 9, and which plan opens each.

Each tool follows the standard it implements and carries its own worked examples. Launch links open the tool after a free account is created.

Pro plan and above

FTA Simulator

Fault Tree Analysis

Drag-and-drop fault tree builder for quantitative reliability analysis. Quantify top-event probability and rank basic events by contribution before you commit to a hardware architecture.

  • Visual tree builder: AND, OR, XOR, NOT, VOTE, PAND, SAND, INHIBIT gates
  • Minimal cut sets via MOCUS
  • Importance measures (Birnbaum, Fussell-Vesely, RAW, RRW)
  • Reliability metrics: MTTF, MTBF, system probability
  • Real-time validation and error reporting
  • Export and import JSON models
Launch FTA
Expert plan

FMEA Simulator

Failure Mode & Effects Analysis

AIAG-VDA FMEA workbench with automatic RPN scoring, linked to ISO 26262 safety goals, FSC and TSC. Prioritize design FMEA actions or scaffold an FMEA-MSR for diagnostic and system-response coverage.

  • AIAG-VDA FMEA with automatic RPN scoring
  • System, subsystem and component hierarchy
  • Linked to ISO 26262 safety goals, FSC and TSC
  • Risk matrices and heat maps
  • FMEA-MSR for diagnostic and system response coverage
  • Analytics dashboard with status and KPI tracking
Launch FMEA
Expert plan

FMEDA Simulator

Hardware Safety Analysis

Click-through TCU power-supply schematic with failure modes and diagnostic coverage from ISO 26262-5 Annex D. Computes SPFM, LFM and PMHF live as you swap safety mechanisms, so you can find architecture gaps before committing to a board layout.

  • Interactive TCU schematic with clickable components
  • SPFM, LFM and PMHF with ASIL target comparison
  • Compare preliminary vs ASIL-C compliant architecture
  • 15+ safety mechanisms with DC values from Annex D
  • Real-time metric recalculation
  • Safety goal context: ASIL, safe state, FTTI
Launch FMEDA
Free plan

Markov Chain Simulator

Continuous-Time Markov Reliability

Continuous-Time Markov Chain simulator that derives SPFM, LFM and PMHF straight from the generator matrix Q per ISO 26262-5 Annex C/F. Ships with three worked examples (1oo2 braking, ADAS sensor fusion, BMS dormant faults) and re-solves P(t)=e^Qt live as you tune failure, diagnostic, CCF and repair rates. Free for every registered user.

  • Free for all registered users
  • Three worked examples: braking, ADAS sensor fusion, BMS
  • Live state probability and steady-state computation
  • SPFM, LFM and PMHF per ISO 26262-5 Annex C/F
  • Full failure-rate breakdown for FMEDA
  • Tune failure rate, DC, CCF, repair and proof-test rates
Launch Markov
Expert plan

STPA Simulator

Systems-Theoretic Process Analysis

Work an STPA from losses and hazards through the control structure to unsafe control actions and causal scenarios. Catches control and interaction flaws that component-level FMEA misses, which matters for ADAS functions where nothing has actually broken yet.

  • Losses, hazards and system-level constraints
  • Control structure with controllers and feedback paths
  • Unsafe control actions across all four UCA guide words
  • Causal scenarios by controller, feedback, control path and process
  • Traceability from loss to hazard to UCA to scenario
  • Four worked examples: ACC, AEB, LKA, battery thermal
Launch STPA
Expert plan

DFA Simulator

Dependent Failure Analysis

Dependent failure analysis per ISO 26262-9 Clause 7. Walk the DFI checklist against your architecture, state the independence you are claiming, and see whether the safety measures actually support a decomposition before an assessor asks.

  • DFA worksheet structured on ISO 26262-9 Clause 7
  • Independence and freedom from interference requirements
  • Dependent failure initiator (DFI) checklist
  • Safety measures against common-cause and cascading failures
  • Results and coverage metrics
  • Four worked examples incl. ASIL D braking decomposition
Launch DFA
Expert plan

Cascading Failure Simulator

Propagation & Freedom From Interference

Model elements and their dependencies, inject a fault, and watch it propagate. Audits freedom from interference against the ISO 26262-6 Annex D interference classes and reports the blast radius, which is the argument you need for mixed-criticality partitioning.

  • Element and dependency modelling
  • Fault injection with live propagation
  • FFI audit against ISO 26262-6 Annex D interference classes
  • Blast radius per injected fault
  • Analysis worksheet with findings
  • Four worked examples incl. mixed-criticality cockpit ECU
Launch Cascading
Expert plan

HAZOP Simulator

Hazard and Operability Study

Guideword-driven deviation analysis following IEC 61882. Define the system and its parameters, drive guide words across them to surface deviations, causes, consequences and safeguards, then rate the residual risk.

  • IEC 61882 guideword-driven deviation analysis
  • System definition with functions and parameters
  • Worksheet: deviation, cause, consequence, safeguard
  • Risk rating per deviation
  • Export and import JSON studies
  • Four worked examples incl. EPS assist torque and HV charging
Launch HAZOP
Expert plan

GSN Safety Case Simulator

Goal Structuring Notation Builder

Build a safety case argument from goals, strategies, solutions, context and assumptions. Validates the structure against GSN Community Standard connection rules and flags undeveloped goals, so you find the holes in the argument rather than in the assessment.

  • Goals, strategies, solutions, context and assumptions
  • Legal structure validation per GSN Community Standard
  • Permitted connection rules enforced as you build
  • Metrics and evidence completeness checks
  • Export and import JSON arguments
  • Four worked examples incl. ASIL D braking and SEooC
Launch GSN

Why simulators

Learn the analyses by doing them.

A worked example you can break is worth a chapter you can only read. The tools give you the feedback an assessor would, before the assessor does.

01

Learn by doing

Hands-on practice with real automotive safety scenarios: braking, ADAS, BMS, cockpit ECUs. Work in a risk-free environment before applying the techniques to real projects.

02

Instant feedback

Real-time calculation of safety metrics, validation errors and compliance status. See the impact of each change as you make it.

03

Industry standards

Built on ISO 26262, AIAG-VDA 2019 (FMEA), IEC 61025 (FTA), IEC 61882 (HAZOP) and IEC 61508 practice. Markov metrics follow ISO 26262-5 Annex C (SPFM, LFM) and Annex F (PMHF) exactly.

04

Export and share

Save analyses as JSON, export results as CSV (FTA cut sets, FMEDA metrics, STPA tables) and the fault tree diagram as SVG or PNG. Use them for documentation and as reference implementations.

05

Visual analysis

Interactive fault trees, risk matrices, hardware schematics, control structures and argument trees. Understand complex relationships at a glance.

06

No installation

Browser-based with zero setup. Access from any device and get started immediately, without licences or dependencies.

Simulator FAQ

Straight answers about the tools.

Definitions an assessor would accept, and what each plan unlocks.

What is an FMEDA tool?

An FMEDA (Failure Modes, Effects and Diagnostic Analysis) tool quantifies how well a hardware design detects and controls random hardware faults. It combines component failure rates with failure-mode distributions and diagnostic coverage to compute the ISO 26262-5 hardware architectural metrics: SPFM (Single-Point Fault Metric), LFM (Latent Fault Metric), and PMHF (Probabilistic Metric for random Hardware Failures). The FMEDA Simulator on ISO 26262 Academy does this interactively on a TCU power-supply schematic with real-time recalculation and per-ASIL target comparison.

Can I calculate SPFM, LFM, and PMHF online?

Yes. The FMEDA Simulator calculates SPFM, LFM, and PMHF from an interactive hardware schematic, and the Markov Chain Simulator computes the same ISO 26262-5 metrics (Annex C for SPFM/LFM, Annex F for PMHF) from continuous-time Markov chain models. Both run in the browser with no installation. The Markov Chain Simulator is free for all registered users.

Which simulator is free to use?

The Markov Chain Simulator is free for all registered users, including the Free plan, and includes worked automotive examples (1oo2 dual-channel braking, ADAS sensor fusion, BMS). The FTA Simulator is included in the Pro plan and above. The FMEA, FMEDA, STPA, DFA, Cascading Failures, HAZOP and GSN Safety Case Simulators are included in the Expert plan.

What is the difference between an FTA tool and an FMEA tool?

An FTA (Fault Tree Analysis) tool works top-down: you start from an undesired top event and build a logic-gate tree to find minimal cut sets and the top-event probability. An FMEA (Failure Modes and Effects Analysis) tool works bottom-up: you enumerate component failure modes and rate them by Severity, Occurrence, and Detection to prioritize actions (AIAG-VDA Action Priority or RPN). Both simulators are available on ISO 26262 Academy and follow the corresponding standards, IEC 61025 for FTA and AIAG-VDA 2019 for FMEA.

Start today

Start with the free Markov simulator.

A free account includes the Markov Chain Simulator plus a full concept guide, three work-product templates, one guided process and five practice exams a month. No credit card. The FTA Simulator is in the Pro plan; all nine are in the Expert plan.