GNAT Pro Safety-Critical is ideal for developing software applications that must meet the RTCA DO-178B / DO-178C and EUROCAE ED-12B safety standards required for avionics flight critical systems.

GNAT Pro Safety-Critical is an enhanced version of GNAT Pro, designed for building safe and secure software. Its many features help to reduce the cost of developing and certifying systems that have to meet safety standards such as RTCA DO-178B / DO-178C and EUROCAE ED-12B and other high-integrity standards. Key to achieving this goal is the product’s fully configurable and customizable run-time library. You can select units in an a la carte fashion, thus limiting the run-time library to just those units that are required for the Ada features used in the application, and you can adapt their implementation if desired.

GNAT Pro Safety-Critical is a complete development environment with full DO-178B / DO-178C Level A certification materials. It has passed formal certification as a part of multiple avionics flight critical systems.

Avionics Industry Standards

The purpose of RTCA DO-178B / EUROCAE ED-12B is to provide guidelines for the production of software for airborne systems and equipment that performs its intended function with a level of confidence in safety that complies with airworthiness requirements. The guidelines are in the form of:

  • Objectives of software life cycle processes
  • Description of activities and design considerations for achieving these objectives
  • Description of the evidence that indicate that the objectives have been satisfied

The document discusses those aspects of airworthiness certification that pertain to the production of software for airborne systems and equipment used on aircraft or engines.

More on DO-178B


The RTCA/EUROCAE’s DO-178B avionics safety standard went through a revision that ended with the publication of the new DO-178C standard in December 2011. The core document is substantially the same as DO-178B, with a number of clarifications and a few minor corrections. The major change is the inclusion of several supplements. One supplement deals with tool qualification, and three others adapt the core document guidance when specific technologies are used: Model-Based Development, Object-Oriented Techniques, and Formal Methods. AdaCore participated in the DO-178C revision process, with Dr. Cyrille Comar contributing to the Object-Oriented Techniques subgroup.

The Ada language and the AdaCore tools that are designed to help in DO-178B certification are equally useful for the new DO-178C standard. These include GNAT Pro Safety-Critical, SPARK Pro, GNATcoverage, GNATcheck, GNATstack, Qualification material, Traceability studies, specific runtimes, etc.


Featured Project

Advanced Jet Avionics Display by Barco

Barco has developed an advanced business jet avionics display system using the AdaCore GNAT Pro Ada development environment. Barco selected the GNAT Pro High Integrity Edition, along with the Traceability Kit, running on Wind River’s VxWorks 653 RTOS in order to meet the highest levels of safety standard DO-178B.

Key Features of GNAT Pro Safety-Critical

  • Configurable Run-Time Library
  • Full Ada 2005 / 2012 Implementation
  • Advanced Static Analysis
  • Simplification of Certification Effort
  • Traceability
  • Safety-Critical Support and Expertise
Learn More »


Knowledge Center


  • The InSight webinar series continues with a webinar demonstrating how to write unit tests in a cost-effective way using the AdaCore toolset. More precisely it will show how to generate the unit testing framework using GNATtest, how to run the tests on an emulator such as GNATemulator and how to extract coverage results using GNATcoverage. This is primary aimed at developers and projects managers that already have unit testing infrastructure in place and are looking to reduce maintenance costs, as well as teams that are looking at implementing such techniques with minimal effort.
  • Wind River, Ada Core and Verocel will show the webcast audience how use of COTS technology and best practices in software certification can improve time to market and reduce risk for safety-critical software developers.

    AdaCore will introduce tools and techniques for easing the development and certification costs for applications to be deployed within an IMA architecture. Options for certification approaches will be discussed along with methods for automating these approaches. Full software development environments will be discussed with tight integration of tools and toolsets when they are applicable to the development or safety certification effort for a particular safety standard.

Developer Gems    

  • Gem #63: The Effect of Pragma Suppress

    Ada Gem #63 — The features of Ada have generally been designed to prevent violating the properties of data types, enforced either by compile-time rules or, in the case of dynamic properties, by using run-time checks. Ada allows run-time checks to be suppressed, but not with the intent of allowing programmers to subvert the type system.

  • Gem #53: Safe and Secure Software: Chapter 12: Conclusion

    Gem #53 is the concluding chapter of John Barnes' new booklet:

    Safe and Secure Software: An Introduction to Ada 2005.

    We hope you have enjoyed this series. In the attachment at the bottom of Gem #30 you can access the contents and bibliography for the entire booklet.