Build fault trees, conduct FMEA studies, calculate hardware metrics, evolve Markov chains, derive unsafe control actions, argue independence, trace fault propagation, run HAZOP studies, and assemble GSN safety cases. Built on the industry standards (ISO 26262, AIAG-VDA 2019, IEC 61025, IEC 61882), with worked automotive examples in every tool.
Drag-and-drop fault tree builder for quantitative reliability analysis. Quantify top-event probability and rank basic events by contribution before you commit to a hardware architecture.
AIAG-VDA FMEA workbench with automatic RPN scoring, linked to ISO 26262 safety goals, FSC and TSC. Prioritize design FMEA actions or scaffold an FMEA-MSR for diagnostic and system-response coverage.
AIAG-VDA FMEA with automatic RPN scoring
System, subsystem and component hierarchy
Linked to ISO 26262 safety goals, FSC and TSC
Risk matrices and heat maps
FMEA-MSR for diagnostic and system response coverage
Click-through TCU power-supply schematic with failure modes and diagnostic coverage from ISO 26262-5 Annex D. Computes SPFM, LFM and PMHF live as you swap safety mechanisms, so you can find architecture gaps before committing to a board layout.
Interactive TCU schematic with clickable components
SPFM, LFM and PMHF with ASIL target comparison
Compare preliminary vs ASIL-C compliant architecture
Continuous-Time Markov Chain simulator that derives SPFM, LFM and PMHF straight from the generator matrix Q per ISO 26262-5 Annex C/F. Ships with three worked examples (1oo2 braking, ADAS sensor fusion, BMS dormant faults) and re-solves P(t)=e^Qt live as you tune failure, diagnostic, CCF and repair rates. Free for every registered user.
Free for all registered users
Three worked examples: braking, ADAS sensor fusion, BMS
Live state probability and steady-state computation
SPFM, LFM and PMHF per ISO 26262-5 Annex C/F
Full failure-rate breakdown for FMEDA
Tune failure rate, DC, CCF, repair and proof-test rates
Work an STPA from losses and hazards through the control structure to unsafe control actions and causal scenarios. Catches control and interaction flaws that component-level FMEA misses, which matters for ADAS functions where nothing has actually broken yet.
Losses, hazards and system-level constraints
Control structure with controllers and feedback paths
Unsafe control actions across all four UCA guide words
Causal scenarios by controller, feedback, control path and process
Traceability from loss to hazard to UCA to scenario
Four worked examples: ACC, AEB, LKA, battery thermal
Dependent failure analysis per ISO 26262-9 Clause 7. Walk the DFI checklist against your architecture, state the independence you are claiming, and see whether the safety measures actually support a decomposition before an assessor asks.
DFA worksheet structured on ISO 26262-9 Clause 7
Independence and freedom from interference requirements
Dependent failure initiator (DFI) checklist
Safety measures against common-cause and cascading failures
Results and coverage metrics
Four worked examples incl. ASIL D braking decomposition
Model elements and their dependencies, inject a fault, and watch it propagate. Audits freedom from interference against the ISO 26262-6 Annex D interference classes and reports the blast radius, which is the argument you need for mixed-criticality partitioning.
Element and dependency modelling
Fault injection with live propagation
FFI audit against ISO 26262-6 Annex D interference classes
Blast radius per injected fault
Analysis worksheet with findings
Four worked examples incl. mixed-criticality cockpit ECU
Guideword-driven deviation analysis following IEC 61882. Define the system and its parameters, drive guide words across them to surface deviations, causes, consequences and safeguards, then rate the residual risk.
Build a safety case argument from goals, strategies, solutions, context and assumptions. Validates the structure against GSN Community Standard connection rules and flags undeveloped goals, so you find the holes in the argument rather than in the assessment.
Goals, strategies, solutions, context and assumptions
Legal structure validation per GSN Community Standard
Permitted connection rules enforced as you build
Metrics and evidence completeness checks
Export and import JSON arguments
Four worked examples incl. ASIL D braking and SEooC
Hands-on practice with real automotive safety scenarios: braking, ADAS, BMS, cockpit ECUs. Work in a risk-free environment before applying the techniques to real projects.
Instant feedback
Real-time calculation of safety metrics, validation errors, and compliance status. See the impact of each change as you make it.
Industry standards
Built on ISO 26262, AIAG-VDA 2019 (FMEA), IEC 61025 (FTA), IEC 61882 (HAZOP) and IEC 61508 practice. Markov metrics follow ISO 26262-5 Annex C (SPFM, LFM) and Annex F (PMHF) exactly.
Export and share
Save analyses as JSON, export results, and share with your team. Use them for documentation, presentations, and as reference implementations.
Visual analysis
Interactive fault trees, risk matrices, hardware schematics, control structures, and argument trees. Understand complex relationships at a glance.
No installation
Browser-based with zero setup. Access from any device and get started immediately, without licenses or dependencies.
Simulator FAQ
Common questions about the ISO 26262 analysis tools
An FMEDA (Failure Modes, Effects and Diagnostic Analysis) tool quantifies how well a hardware design detects and controls random hardware faults. It combines component failure rates with failure-mode distributions and diagnostic coverage to compute the ISO 26262-5 hardware architectural metrics: SPFM (Single-Point Fault Metric), LFM (Latent Fault Metric), and PMHF (Probabilistic Metric for random Hardware Failures). The FMEDA Simulator on ISO 26262 Academy does this interactively on a TCU power-supply schematic with real-time recalculation and per-ASIL target comparison.
Yes. The FMEDA Simulator calculates SPFM, LFM, and PMHF from an interactive hardware schematic, and the Markov Chain Simulator computes the same ISO 26262-5 metrics (Annex C for SPFM/LFM, Annex F for PMHF) from continuous-time Markov chain models. Both run in the browser with no installation. The Markov Chain Simulator is free for all registered users.
The Markov Chain Simulator is free for all registered users, including the Free plan, and includes worked automotive examples (1oo2 dual-channel braking, ADAS sensor fusion, BMS). The FTA Simulator is included in the Pro plan and above. The FMEA, FMEDA, STPA, DFA, Cascading Failures, HAZOP and GSN Safety Case Simulators are included in the Expert plan.
An FTA (Fault Tree Analysis) tool works top-down: you start from an undesired top event and build a logic-gate tree to find minimal cut sets and the top-event probability. An FMEA (Failure Modes and Effects Analysis) tool works bottom-up: you enumerate component failure modes and rate them by Severity, Occurrence, and Detection to prioritize actions (AIAG-VDA Action Priority or RPN). Both simulators are available on ISO 26262 Academy and follow the corresponding standards, IEC 61025 for FTA and AIAG-VDA 2019 for FMEA.
Start with the free Markov simulator
A free account includes the Markov Chain Simulator plus a full concept guide, 3 work product templates, 1 guided process, and 5 practice exams per month. No credit card required. The FTA Simulator is in the Pro plan; all nine are in the Expert plan.