The Ultimate Formal Methods Toolbox on Formal Methods Tools

About

Sat, 07 Jun 2025 00:00:00 +0000

The Formal Methods Tools project is dedicated to developing, maintaining, and promoting tools that support the application of formal methods in software engineering. The goal of this website is to make formal verification, specification, and analysis techniques accessible and practical for both researchers and practitioners.

Key Objectives

Provide a comprehensive list of tools for formal methods.
Group tools by rich metadata to support collaboration and boost tools’ strengths.
Foster a collaborative community for tool development and support.

Who’s Behind This?

Howdy. My name is Landon Taylor. I sometimes go by mossBiscuits. This is one of my hobby projects. I have a passion for formal methods. When I started learning about verification, there was a sharp barrier to entry due partially to the sprawl of content online. I wanted to solve this problem, so I have been chipping away at this website for a while now.

Alt-Ergo

Sat, 07 Jun 2025 00:00:00 +0000

Alt-Ergo is an automatic prover of mathematical formulas used behind software verification tools such as Frama-C, SPARK, Why3, Atelier-B and Caveat.

Bitwuzla

Sat, 07 Jun 2025 00:00:00 +0000

Bitwuzla is a Satisfiability Modulo Theories (SMT) solver for the theories of fixed-size bit-vectors, floating-point arithmetic, arrays, uninterpreted functions and their combinations.

BLAST

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2012

BLAST (Berkeley Lazy Abstraction Software verification Tool) is a static software verification tool for C language that solves the reachability problem, i.e. whether a given program location can be reached from an entry point (main function) by a valid execution.

Boolector

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2024

Boolector is a Satisfiability Modulo Theories (SMT) solver for the theories of fixed-size bit-vectors, arrays and uninterpreted functions. Succeeded by Bitwuzla

CaDiCaL

Sat, 07 Jun 2025 00:00:00 +0000

CaDiCaL is a simplified satisfiability solver.

CADP

Sat, 07 Jun 2025 00:00:00 +0000

Closed-Source Tool

CADP (“Construction and Analysis of Distributed Processes”, formerly known as “CAESAR/ALDEBARAN Development Package”) is a toolbox for the design of asynchronous concurrent systems, such as communication protocols, distributed systems, asynchronous circuits, multiprocessor architectures, web services, etc.

Caesar

Sat, 07 Jun 2025 00:00:00 +0000

Storm is a tool for the analysis of systems involving random or probabilistic phenomena.

CGAAL

Sat, 07 Jun 2025 00:00:00 +0000

CGAAL is a model checker of alternating-time temporal logic (ATL) properties on concurrent game structures (CGSs).

Colibri

Sat, 07 Jun 2025 00:00:00 +0000

Colibri is an SMT solver.

COMICS

Sat, 07 Jun 2025 00:00:00 +0000

COMICS is a stand-alone tool which performs model checking and the generation of counterexamples for discrete-time Markov Chains (DTMCs).

Concuerror

Sat, 07 Jun 2025 00:00:00 +0000

Concuerror is a stateless model checking tool for Erlang programs.

Contribute

Sat, 07 Jun 2025 00:00:00 +0000

Instructions coming soon. Please see https://gitmoss.fyi/fmtools/content/wiki/Contribute for temporary instructions.

Quick Links

Request addding a tool: Submit Git Issue
Request fixing a tool: Submit Git Issue

CPAchecker

Sat, 07 Jun 2025 00:00:00 +0000

Closed-Source Tool

CPAchecker is a tool for configurable software verification.

CryptoMiniSat

Sat, 07 Jun 2025 00:00:00 +0000

CryptoMiniSat is a SAT solver.

APIs and Bindings

This tool is available through the following interfaces:

C++ Namespace: Documentation on homepage
Python package: PyPI package

cvc4

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2021

cvc4 is an automatic theorem prover for SMT problems. It is succeeded by cvc5

cvc5

Sat, 07 Jun 2025 00:00:00 +0000

cvc5 is an automatic theorem prover for SMT problems.

dReal

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2023

dReal is an automated reasoning tool. It focuses on solving problems that can be encoded as first-order logic formulas over the real numbers. Its special strength is in handling problems that involve a wide range of nonlinear real functions.

DSCheck

Sat, 07 Jun 2025 00:00:00 +0000

DSCheck is an experimental model checker for testing concurrent OCaml programs.

E

Sat, 07 Jun 2025 00:00:00 +0000

E is a theorem prover for full first-order logic (and now monomorphic higher-order logic) with equality.

Eldarica

Sat, 07 Jun 2025 00:00:00 +0000

Eldarica is a model checker for Horn clauses, Numerical Transition Systems, and software programs.

ESBMC

Sat, 07 Jun 2025 00:00:00 +0000

ESBMC is a context-bounded model checker based on satisfiability modulo theories for verifying single- and multi-threaded C/C++ programs.

Geyser

Sat, 07 Jun 2025 00:00:00 +0000

Geyser is a simple symbolic model checker for propositional transition system systems.

Glucose

Sat, 07 Jun 2025 00:00:00 +0000

Glucose is a SAT solver.

IMITATOR

Sat, 07 Jun 2025 00:00:00 +0000

IMITATOR is a parametric timed model checker taking as input extensions of parametric timed automata, and synthesizing parameter valuations for safety properties and more.

ImSpin

Sat, 07 Jun 2025 00:00:00 +0000

ImSpin is a frontend for the SPIN model checker, providing an environment for users engaged in model checking tasks.

Intrepyd

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2021

Intrepyd is a python module that provides a simulator and a model checker in form of a rich API, to allow the rapid prototyping of formal methods algorithms for the rigorous analysis of circuits, specifications, models.

JANI

Sat, 07 Jun 2025 00:00:00 +0000

The JANI specification defines the jani-model model interchange format and the jani-interaction tool interaction and automation protocol.

Kind 2

Sat, 07 Jun 2025 00:00:00 +0000

Kind 2 is a multi-engine SMT-based automatic model checker for synchronous reactive systems.

LEAN

Sat, 07 Jun 2025 00:00:00 +0000

cvc5 is an automatic theorem prover for SMT problems.

Lingeling

Sat, 07 Jun 2025 00:00:00 +0000

Lingeling is a SAT solver.

LTSA

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2018

LTSA is a verification tool for concurrent systems. It mechanically checks that the specification of a concurrent system satisfies the properties required of its behaviour. In addition, LTSA supports specification animation to facilitate interactive exploration of system behaviour.

LTSmin

Sat, 07 Jun 2025 00:00:00 +0000

LTSmin started out as a generic toolset for manipulating labelled transition systems. Meanwhile the toolset was extended to a a full (LTL/CTL/μ-calculus) model checker, while maintaining its language-independent characteristics.

MathSAT

Sat, 07 Jun 2025 00:00:00 +0000

Closed-Source Tool

MathSAT is an SMT solver supporting a wide range of theories (including e.g. equality and uninterpreted functions, linear arithmetic, bit-vectors, and arrays) and functionalities (including e.g. computation of Craig interpolants, extraction of unsatisfiable cores, generation of models and proofs, and the ability of working incrementally).

mcltl-rs

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2020

mcltl-rs is an experimental model checker for LTL written in Rust.

mCRL2

Sat, 07 Jun 2025 00:00:00 +0000

mCRL2 is a formal specification language with an associated toolset. The toolset can be used for modelling, validation and verification of concurrent systems and protocols.

Mercury

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2020

Mercury is a Model Checker developed for multicore, multiprocessors machine with shared memory.

MiniSat

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2013

MiniSat is a minimalistic, open-source SAT solver, developed to help researchers and developers alike to get started on SAT.

MIT License

Sat, 07 Jun 2025 00:00:00 +0000

MIT License

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

Momba

Sat, 07 Jun 2025 00:00:00 +0000

Momba is a Python framework for dealing with quantitative models centered around the JANI-model interchange format.

MUNTA

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2020

MUNTA is a model checker for the popular realtime systems modeling formalism of Timed Automata

NuSMV

Sat, 07 Jun 2025 00:00:00 +0000

NuSMV is a symbolic model checker.

NuXMV

Sat, 07 Jun 2025 00:00:00 +0000

Closed-Source Tool

nuXmv is a symbolic model checker for the analysis of synchronous finite-state and infinite-state systems.

OpenSMT

Sat, 07 Jun 2025 00:00:00 +0000

OpenSMT is a compact and open-source SMT-solver written in C++, with the main goal of making SMT-Solvers easy to understand and use as a computational engine for formal verification. OpenSMT is built on top of MiniSAT.

ParaFROST

Sat, 07 Jun 2025 00:00:00 +0000

ParaFROST is a parallel SAT solver with GPU-accelerated inprocessing capable of harnessing NVIDIA CUDA-enabled GPUs in applying modern inprocessing tecnhiques in parallel.

APIs and Bindings

This tool is available through the following interfaces:

C API: Z3 C API Reference
C++ API: Z3 C++ Namespace Reference
.NET API: Z3 .NET Namespace Reference
Java API: Z3 Java API Reference
Python bindings: z3-solver PyPI package (Documentation)
Rust bindings: z3 crate on crates.io

Pnmc

Sat, 07 Jun 2025 00:00:00 +0000

Pnmc is a symbolic model checker for Petri nets.

PRISM

Sat, 07 Jun 2025 00:00:00 +0000

PRISM is a probabilistic model checker, a tool for formal modelling and analysis of systems that exhibit random or probabilistic behaviour.

Privacy

Sat, 07 Jun 2025 00:00:00 +0000

This website does not collect or track any personal data from visitors. No cookies, personalized analytics, or tracking scripts are used. No ads are shown on this website, and there is no money to be made from this project.

If you choose to contribute content (including emails, issues, and pull requests), any information you voluntarily provide may be stored as part of the website’s content and source code. Only the data you explicitly submit will be saved, and data is not sold by the website’s owner. Due to the public nature of its disclosure, this information is not considered private and may be used by the general public as allowed by respective laws and policies. Your privacy is respected, and no unnecessary data is collected or shared.

pyPL

Sat, 07 Jun 2025 00:00:00 +0000

pyPL is a naive model generator, model checker and theorem prover.

Q3B

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2023

Q3B is an SMT solver for the quantified bit-vector formulas which uses BDDs.

Riss

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2017

Riss is a SAT solving tool collection.

Roméo

Sat, 07 Jun 2025 00:00:00 +0000

Romeo allows the modelling of complex systems using extensions of time Petri nets.

Rumur

Sat, 07 Jun 2025 00:00:00 +0000

Rumur is a model checker.

Sally

Sat, 07 Jun 2025 00:00:00 +0000

Sally is a model checker for infinite state systems described as transition systems.

SM(P/)T

Sat, 07 Jun 2025 00:00:00 +0000

SMPT is a SMT-based model checker for Petri nets focused on reachability problems that takes advantage of net reductions (polyhedral reductions).

SMT-RAT

Sat, 07 Jun 2025 00:00:00 +0000

SMT-RAT is an SMT Real Algebra Toolbox.

APIs and Bindings

This tool is available through the following interfaces:

C++ API: C++ API Reference

SMTInterpol

Sat, 07 Jun 2025 00:00:00 +0000

SMTInterpol is an SMT Solver that can compute Craig interpolants for various theories.

APIs and Bindings

This tool is available through the following interfaces:

Java API: Java API Reference

SpaceEx

Sat, 07 Jun 2025 00:00:00 +0000

The SpaceEx tool platform is designed to facilitate the implementation of algorithms related to reachability and safety verification in continuous and hybrid systems.

Spin

Sat, 07 Jun 2025 00:00:00 +0000

Spin is a model checker for multi-threaded software.

STAMINA

Sat, 07 Jun 2025 00:00:00 +0000

A state-space truncation tool for Markov-Chains that can analyze infinite-sized models. Intefaces with either Storm or PRISM.

stateright

Sat, 07 Jun 2025 00:00:00 +0000

stateright is a Rust library for model checking systems, with an emphasis on distributed systems.

Storm

Sat, 07 Jun 2025 00:00:00 +0000

Storm is a tool for the analysis of systems involving random or probabilistic phenomena.

STP

Sat, 07 Jun 2025 00:00:00 +0000

STP is a constraint solver for quantifier-free bitvectors.

APIs and Bindings

This tool is available through the following interfaces:

C API: stp C API Reference
Python bindings: stp PyPI package

TAPAAL

Sat, 07 Jun 2025 00:00:00 +0000

TAPAAL is a tool for verification of timed-arc petri nets

TimeSolver

Sat, 07 Jun 2025 00:00:00 +0000

Not Maintained Since 2019

TimeSolver is a Model Checker for timed automata that uses pes (predicate equation systems).

TLA+

Sat, 07 Jun 2025 00:00:00 +0000

TLA+ is a high-level language for modeling programs and systems–especially concurrent and distributed ones.

Uppaal

Sat, 07 Jun 2025 00:00:00 +0000

Closed-Source Tool

Uppaal is an integrated tool environment for modeling, validation and verification of real-time systems modeled as networks of timed automata, extended with data types (bounded integers, arrays, etc.).

Vampire

Sat, 07 Jun 2025 00:00:00 +0000

Vampire is a theorem prover.

veriT

Sat, 07 Jun 2025 00:00:00 +0000

veriT is an SMT solver developed by LORIA and ULiege. It supports a wide range of theories and is designed for use in formal verification, automated reasoning, and related research areas. veriT accepts input in SMT-LIB2 and DIMACS formats and provides a command-line interface for ease of integration into verification workflows. The solver is actively maintained and distributed under the BSD license, making it suitable for both academic and industrial applications.

Yices 2

Sat, 07 Jun 2025 00:00:00 +0000

Yices is an SMT solver developed by SRI International. It is widely used for checking the satisfiability of logical formulas over various theories. It supports the SMT-LIB standard and its own input language, and provides APIs for several programming languages, making it suitable for research and industrial applications in software and hardware verification.

APIs and Bindings

This tool is available through the following interfaces:

General API: Yices API Reference
Python bindings: yices2 PyPI package
Rust bindings: yices2 crate on crates.io

Z3

Sat, 07 Jun 2025 00:00:00 +0000

Z3 is a general-purpose theorem prover widely used for SAT & SMT solving.

APIs and Bindings

This tool is available through the following interfaces:

C API: Z3 C API Reference
C++ API: Z3 C++ Namespace Reference
.NET API: Z3 .NET Namespace Reference
Java API: Z3 Java API Reference
Python bindings: z3-solver PyPI package (Documentation)
Rust bindings: z3 crate on crates.io

Zipperposition

Sat, 07 Jun 2025 00:00:00 +0000

Zipperposition is an automated theorem prover for first-order logic with equality and theories.