Skip to content

This is Rust for critical systems.

Ferrocene is the open-source qualified Rust compiler toolchain for safety- and mission-critical. Qualified for automotive and industrial development.

ISO26262 (ASIL D) and IEC 61508 (SIL 4) available for x86 and ARM platforms.

Illustration image


Rust is industry ready with Ferrocene.

Ferrocene enables Rust to be a first-class language for mission-critical- and functional-safety systems at the highest security levels.

Automotive development

Ferrocene is qualified at ISO 26262 for automotive electronic systems for road vehicles. It’s qualified at ASIL-D, the highest risk class, for peace of mind.

Industrial manufacturing

Rust can be used for industrial manufacturing and the functional safety of electronic programmable safety-related systems. Ferrocene is qualified with IEC 61508 (SIL 4).

And more coming soon…

We’re working with partners to qualify Ferrocene for other industries as well. If you have a specific qualification or platform you want to use with Rust, we can help you with that.


Accessible innovation through conscientious pricing.

With Ferrocene, you can develop high-assurance software from the starting point – without a massive upfront invest.

Payment frequency

We also help businesses harness the power of Rust for their individual needs. Ferrous Systems is a trusted partner in certifying the Ferrocene toolchain for a new platform or industry.

We know Ferrocene best and are happy to help.

Reach out to us if you’re not sure Ferrocene meets your industry standards and requirements.


Why Ferrocene

Ferrocene is ready-to-use Rust for embedded systems.

Safer and more efficient than C/C++
Rust is built for speed with type- and memory-safe programming to prevent errors and designed to handle parallel programming. Certification now enables automotive and industrial developers take advantage of that.
Rust is critical-systems ready
TÜV SÜD conducted the audit and Ferrous Systems – leading Rust experts – supports the signed installers as well as the nightly builds. The result is Ferrocene – a quality-managed Rust compiler – qualified to ASIL D and SiL 4 levels.
Ferrocene is downstream from Rust
It works with existing Rust infrastructure and the only changes made in the code were to cover testing requirements of ISO 26262 and IEC 61508 qualification. All fixes are reported upstream for constant improvement.
Rust plays well with other languages
Rust has a high level of interoperability with existing languages including C, C++, Python, Ruby and Java, allowing developers to take advantage of Rust’s features without having to completely overhaul existing code bases.

Ferrocene is qualified and maintained by Ferrous Systems

We’re a globally leading Rust company with more than 100 years collective experience in “the most admired programming language”.

Ferrous Systems logo

Ferrocene is open source

The source code of Ferrocene is fully open source under the MIT OR Apache-2.0 license, including the full qualification documents.