Aurorisk FR

Risk management tools

Find a tool for the risk you need to address: process safety, cybersecurity, occupational health, natural hazards, continuity or finance. Listings distinguish source, licence and access terms.

95 listed tools22 methods covered7 risk categories

Ordering: confirmed free access first, then registration required, paid, and unspecified access. A tool may appear in more than one category when it addresses several risks.

Industrial and technological risks

Major accidents, processes, system safety, physical effects.

35 tools

Related courses : How to run a technical or industrial risk analysis FR · How to run an AI-assisted HAZOP FR · Dependability: dynamic models FR · Functional safety: SIS and SIL · STPA: systems safety analysis · Machinery safety

Selection guide and detailed comparison →

Method guides: PHA · HAZOP · LOPA · FMEA · Fault trees · Bow-tie · STPA · Atmospheric dispersion modelling · Explosion, fire and BLEVE · Chemical hazards

Tabular methods (PHA, HAZOP, FMEA)8
Commercial publisherFreeUnited States

Kenexis Open-PHA ↗

Integrated PHA/LOPA application, free.

PHAHAZOP / LOPA
Commercial publisherFree for teachingInternational

Polyodos ↗

PHA, FMEA, HAZOP, LOPA, bow-tie in one platform.

PHAHAZOP / LOPAFMEA
Commercial publisherEurope

APIS IQ-Software ↗

Leading tool in the automotive industry; structure, function and failure trees, aligned with the harmonised manuals.

FMEA
Commercial publisherEurope

DataLyzer FMEA ↗

Production-oriented; integrates with SPC and shop-floor quality management.

FMEA
Commercial publisherInternational

ReliaSoft XFMEA ↗

Reliability-engineering standard; links design and process FMEA, generates control plans.

FMEA
Graphical methods (trees, bow-tie, STPA)7
Open sourceFreeFrance

Arbre-Analyst ↗

Free fault tree tool based on the XFTA engine (Open-PSA); successor to OpenFTA.

Fault and event trees (FTA/ETA)
Open sourceFreeInternational

OpenFTA ↗

Long-standing fault and event tree tool; this repository preserves the software whose original site is no longer reachable.

Fault and event trees (FTA/ETA)
Commercial publisherFree for teachingInternational

Polyodos ↗

Bow-tie alongside the other industrial methods.

Bow-tie
Open sourceFreeInternational

SCRAM ↗

Probabilistic risk analysis: fault and event trees, Monte Carlo, Open-PSA format.

Fault and event trees (FTA/ETA)
FreeInternational

STPAmaster ↗

STAMP toolset; free Lite version.

STPA (STAMP)
Open sourceFreeEurope

XSTAMPP ↗

Eclipse platform for STPA and CAST.

STPA (STAMP)
Reliability calculation6
Free for teachingFrance

Aurorisk — fiabilité (RBD & fail-safe / fail-dangerous)

Teaching tool with two views (switch): reliability blocks (RBD, series/parallel/k-out-of-n topology, Monte Carlo) and dynamic fail-safe/fail-dangerous simulation (named failure modes per component, dependency rules for common-cause failures, proof test, editable safety logic, PFDavg). Not validated, not for real studies.

Fault and event trees (FTA/ETA)
Commercial publisherInternational

BlockSim (Ansys / ReliaSoft) ↗

Industry-reference reliability block diagram (RBD) tool. Handles complex dependencies, standby redundancy, reliability allocation and life-cycle cost.

Fault and event trees (FTA/ETA)
Commercial publisherFrance

GRIF — Package Booléen (Satodev) ↗

French dependability suite (25 years of R&D, formerly TotalEnergies): fault and event trees, RBD, bow-tie, reliability network, SIL loop, Albizia BDD engine.

Fault and event trees (FTA/ETA)
Commercial publisherInternational

Isograph Reliability Workbench (RBD) ↗

Widely used in aerospace and defence. Full RBD module, integrated with Petri nets and FMECA.

Fault and event trees (FTA/ETA)
Commercial publisherInternational

Item ToolKit (RBD) ↗

Dedicated RBD and functional safety analysis modules, by Item Software.

Fault and event trees (FTA/ETA)
Commercial publisherInternational

RAM Commander ↗

Integrated RAMS solution (reliability, availability, maintainability, safety), by ALD Service.

Fault and event trees (FTA/ETA)
Effects calculation9
Public bodyFreeUnited States

ALOHA (EPA/NOAA) ↗

Dispersion, BLEVE, fires and explosions for emergency response; a long-standing reference in the field, used with CAMEO/MARPLOT.

Explosion, fires, BLEVE
Free for teachingFrance

Aurorisk — dispersion

Teaching tool: Gaussian plume, release sources and toxic thresholds, with map. Compared with ALOHA on reference cases, but not validated for real studies.

Atmospheric dispersion
Free for teachingFrance

Aurorisk — explosions (VCE, BLEVE, TNT)

Teaching tool: vapour cloud (Baker-Strehlow-Tang), BLEVE and TNT equivalence. Compared with ALOHA on reference cases, but not validated for real studies.

Explosion, fires, BLEVE
Public bodyFreeFrance

FLUMilog (INERIS) ↗

Heat flux from a warehouse or storage cell fire.

Explosion, fires, BLEVE
Public bodyFreeUnited States

RMP*Comp (EPA) ↗

Threshold distances for US risk management plans.

Atmospheric dispersion
Public bodyFrance

PRIMARISK (INERIS) ↗

BLEVE, pool fire, boilover, multi-energy; registration required.

Explosion, fires, BLEVE
Commercial publisherEurope

EFFECTS (Gexcon) ↗

Effects models based on the TNO Yellow Book.

Atmospheric dispersion
Commercial publisherEurope

FLACS (Gexcon) ↗

CFD dispersion and explosion simulation.

Atmospheric dispersion
Commercial publisherInternational

Phast (DNV) ↗

Consequence analysis (release, dispersion, fires, explosions).

Atmospheric dispersionExplosion, fires, BLEVE
Supporting resources6
awesome-stpa ↗Open sourceFree Curated list of STAMP/STPA resources.International
PubChem ↗Public bodyFree Physicochemical and toxicological properties.United States

Cyber and industrial systems (OT)

EBIOS RM risk analysis, IT cybersecurity, compliance and industrial system protection.

22 tools

Related courses : Cybersecurity awareness · Risk analysis: EBIOS Risk Manager · How to run an EBIOS RM study · IEC 62443 · How to run an IEC 62443 assessment · Cyber compliance: NIS 2, ISO 27001 and the Cyber Resilience Act

Selection guide and detailed comparison →

Method guides: EBIOS RM · IEC 62443 · Threat modeling · Vulnerability prioritisation

EBIOS RM software13

ANSSI publishes the list of EBIOS Risk Manager labelled software; the label is shown on the relevant entries. Check scope, access and pricing with each publisher. List checked on 2026-09-25. Official source ↗

FreeFrance

EBIOS-RM-Graph ↗

Standalone HTML page to build EBIOS RM scenario graphs; JSON export; licence not stated.

EBIOS Risk Manager
Commercial publisherFree for teachingInternational

Polyodos ↗

EBIOS RM in five workshops, with IEC 62443.

EBIOS Risk Manager
Commercial publisherFrance

risk.mlab.sh ↗

Online platform (Cyber Dream) covering the five workshops; free plan with registration, paid advanced features; EU hosting.

EBIOS Risk Manager
Commercial publisherFrance

Agile Risk Manager ↗

ANSSI EBIOS RM label (v2.6.2, client-server). Publisher: ALL4TEC.

EBIOS Risk Manager
Commercial publisherFrance

ARIMES ↗

ANSSI EBIOS RM label (v1.2, standalone). Publisher: ADACIS.

EBIOS Risk Manager
Commercial publisherFrance

C2R — Cyber Risk Review ↗

ANSSI EBIOS RM label (v1.0, client-server). Publisher: Sia Partners.

EBIOS Risk Manager
Commercial publisherFrance

EGERIE Risk Manager ↗

ANSSI EBIOS RM label (v4.0, standalone and client-server). Publisher: EGERIE Software.

EBIOS Risk Manager
Commercial publisherFrance

Fence ↗

ANSSI EBIOS RM label (v3.16, standalone and client-server). Publisher: Airbus Protect.

EBIOS Risk Manager
Commercial publisherFrance

Oligo Risk Manager ↗

ANSSI EBIOS RM label (v2.1.0 standalone, v1.0.0 client-server). Publisher: RECIPROC-IT.

EBIOS Risk Manager
Commercial publisherFrance

Phinasoft Risk Manager ↗

ANSSI EBIOS RM label (v2.0, client-server and SaaS). Publisher: Phinasoft.

EBIOS Risk Manager
IT tools8
Public bodyFreeUnited States

CISA CSET ↗

Security evaluation of IT and industrial networks.

Assessment and compliance (IT and OT)
Open sourceFreeFrance

CISO Assistant ↗

Open-source GRC platform (risk, compliance).

Assessment and compliance (IT and OT)
Association or foundationFreeInternational

FIRST — EPSS ↗

Probability that a vulnerability will be exploited.

Vulnerabilities and prioritisation
Association or foundationOpen sourceFreeInternational

OWASP Threat Dragon ↗

Threat modelling (STRIDE, LINDDUN…), desktop or web.

Threat modelling
Public bodyOpen sourceEurope

MONARC ↗

Four-phase risk analysis reusing similar analyses; online or self-hosted; published by NC3 (Luxembourg).

Assessment and compliance (IT and OT)
OT tools4
Public bodyFreeUnited States

CISA CSET ↗

Security evaluation of IT and industrial networks.

Assessment and compliance (IT and OT)
Open sourceFreeFrance

CISO Assistant ↗

Open-source GRC platform (risk, compliance).

Assessment and compliance (IT and OT)
Public bodyOpen sourceFreeUnited States

Malcolm (CISA) ↗

Network traffic analysis, including industrial protocols.

OT network monitoring
Commercial publisherFree for teachingInternational

Polyodos — IEC 62443 ↗

OT/ICS risk analysis under IEC 62443-3-2.

Assessment and compliance (IT and OT)

Occupational safety and health

Risk assessment tools, psychosocial risk resources and chemical hazard references.

10 tools

Related courses : How to build a DUERP FR · Psychosocial risks: understand, assess, prevent FR · Accident analysis and lessons learned FR

Selection guide and detailed comparison →

Method guides: DUERP · Chemical hazards

Risk assessment and DUERP4
Commercial publisherOpen sourceFreeFrance

DigiRisk ↗

Free and open-source AGPL-3.0 software for occupational risk assessment; paid support and hosting are optional.

Occupational risk assessment
Commercial publisherFree for teachingFrance

EasyRisk Pro ↗

French DUERP occupational risk assessment document.

Occupational risk assessment
Public bodyFreeInternational

HSE (Royaume-Uni) ↗

Five-step risk assessment method.

Occupational risk assessment
Public bodyFreeEurope

OiRA (EU-OSHA) ↗

Sector-specific online risk assessment, in several languages.

Occupational risk assessment
Psychosocial risks1
Chemical risk assessment1
Public bodyFreeFrance

Seirich (INRS) ↗

Free software to assess and prioritise workplace chemical risk (in French).

Chemical hazards
Chemical risks: guides and databases4
PubChem ↗Public bodyFree Physicochemical and toxicological properties.United States

Natural risks and climate

Flood, earthquake, wildfire, climate.

12 tools
Public bodyOpen sourceFreeEurope

CLIMADA (ETH Zurich) ↗

Open-source climate risk and impact platform.

Natural hazards and climate
Public bodyFreeEurope

Copernicus EMS ↗

Satellite crisis mapping.

Natural hazards and climate
Public bodyFreeFrance

DRIAS ↗

Regionalised climate projections.

Natural hazards and climate
Public bodyFreeEurope

EFFIS (JRC) ↗

European forest fire information system.

Natural hazards and climate
Public bodyFreeFrance

Géorisques ↗

Risks for an address or municipality.

Natural hazards and climate
Association or foundationOpen sourceFreeInternational

OpenQuake (GEM) ↗

Open-source seismic hazard and risk calculation.

Natural hazards and climate
Public bodyFreeInternational

ThinkHazard! ↗

Hazards by territory, worldwide (GFDRR).

Natural hazards and climate
Public bodyFreeFrance

Vigicrues ↗

Real-time flood watch.

Natural hazards and climate
Association or foundationFreeInternational

WRI Aqueduct ↗

Water risk (stress, floods) by location.

Natural hazards and climate

Business continuity and supply chain

Operational resilience, supplier dependencies, disruption and recovery.

6 tools

Related course : Crisis management and business continuity FR

Method guides: Business continuity planning (BCP)

Commercial publisherEurope

anyLogistix ↗

Supply network simulation with uncertainty.

Logistics and supply chain risk
Association or foundationInternational

ASCM — SCOR ↗

Supply chain reference model, including risk management.

Logistics and supply chain risk
Commercial publisherUnited States

Everstream Analytics ↗

Predictive disruption analytics.

Logistics and supply chain risk
Commercial publisherUnited States

Resilinc ↗

Supplier mapping and risk monitoring.

Logistics and supply chain risk

Financial and project risks

Market and credit risk, project cost and schedule, uncertainty quantification.

13 tools

Method guides: Monte Carlo · FAIR · Financial risk and Value at Risk (VaR)

Free for teachingFrance

Aurorisk — Monte Carlo

Teaching tool: probability-distribution inputs, equation, results as histogram, cumulative curve (P10/P50/P90) and tornado diagram. Not validated, not for real studies.

Monte Carlo simulation
Association or foundationOpen sourceFreeFrance

OpenTURNS ↗

Python library for uncertainty and reliability (EDF, Airbus, Phimeca).

Monte Carlo simulation
Open sourceFreeInternational

QuantLib ↗

Quantitative finance library.

Financial risk
Open sourceFreeInternational

SALib ↗

Sensitivity analysis in Python.

Monte Carlo simulation
Open sourceFreeUnited States

Yasai ↗

Simple Excel Monte Carlo add-in for teaching.

Monte Carlo simulation
Commercial publisherInternational

@RISK (Lumivero) ↗

Reference Excel add-in.

Monte Carlo simulation
Commercial publisherInternational

ModelRisk (Vose) ↗

Quantitative risk simulation.

Monte Carlo simulation
Commercial publisherInternational

Oracle Crystal Ball ↗

Forecasting and simulation in Excel.

Monte Carlo simulation
Commercial publisherInternational

Safe Security ↗

Cyber risk quantification platform.

FAIR

Radiological and nuclear

Exposure, radon, nuclear safety.

2 tools
Public bodyFreeFrance

ASNR (ex-IRSN) ↗

Public tools including Radon & Radioactivity.

Radiological risks
Public bodyFreeInternational

IAEA ↗

International Atomic Energy Agency: standards and guides.

Radiological risks

See methods, their tools and reference standards → · All guides → · Selection criteria and transparency