Model-Based Software Development with Imandra

Scale MBSE to complex modern application software with automated formal methods and automated reasoning.


Our clients reduced project time to market by over 6 months on average.


Imandra employs a myriad of cutting-edge AI techniques for rigorous analysis of model properties and automated test suite generation.


MBSD connects your verified model with the actual production system, giving you unprecedented insight into how your systems are deployed and operated.

Applying MBSD

Applying MBSD to your development process means connecting all of the stakeholders over a mathematically precise executable model.

The result is that you have a single source of truth - that you can run, formally verify, use to auto-generate test cases, and much more.

Imandra effect!

Further details and features

Model-Based Software Development with Imandra!

State Dynamics Analysis

When designing complex software, it's important to understand how it may behave. Imandra's Abstractor analyzes and visualizes possible state transitions of your models. Typically models of "real world" software may be in a virtually infinite number of possible states; Imandra's Abstractor summarizes them into a finite number of symbolic states. This is the ultimate de-risker of the "unknown unknowns."

State Dynamics Analysis

Ensuring Design with Formal Verification

As the famous quip goes, testing can reveal the presence of bugs but not their absence. This is why our clients formally verify their design to cover infinitely many possible inputs and scenarios to ensure the design meets everyone's expectations - business users, compliance, sales, and regulators. Historically, formal verification was reserved for highly specialized teams of PhDs at places like NASA. Imandra brings Formal Verification to mass software development.

State Dynamics Analysis

Rigorous Testing

Imandra's Region Decomposition (RD) is the new (quantitative) standard for testing complex systems. With RD, you can automatically compress (typically virtually infinite) the model's state-space into a finite number of symbolic regions. Each region is described by a set of constraints and an invariant result. Together, the regions fully replicate the behavior of the decompose model or fragment of the model. Imandra will generate test vectors for each region - giving you the most rigorous means (with explanations) of generating test cases.

State Dynamics Analysis

Audit and Calibration

Since the model is executable, we can run it on the actual production data to audit the implementation. You can execute the model on the recreated inputs into the system and compare the results of the model's execution against what happened in production. We've built web-based audit and monitoring tools to bring unprecedented insight into the operation of systems in production. You can take it a step further by studying the model's behavior in response to different inputs and use this to calibrate the decisions it makes.

State Dynamics Analysis

Governance and Documentation

A formal model that is verified and reconcilable against production data is rigorous. In fact, many regulators already either require or encourage Model-Based approaches. When used with Region Decomposition, the model becomes a documentation source, explaining intricate behaviors in English-prose.

State Dynamics Analysis

Learn more about applying MBSD to finance

Let's talkTalk
to an Expert

a contact

Not sure
if we can help?

We'd be happy to discuss your project to suggest the best solution.

a case analysis