Built by safety engineers, for safety engineers
Your AI agent reads the hazard log, drafts the summaries and change requests, and SafeForge keeps every change human-reviewed and defensible — from import to assurance, with live bow-ties, risk workshops, and DOORS & SharePoint connectors.
Beta: 50% off until beta ends with code FORGEDSAFE at checkout. Want to be a beta tester? Email support@safeforge.ai →
Key barrier states drawn from the findings of the Cullen Inquiry (2001); some barrier detail added for demonstration. Hover any cause, barrier, or consequence for detail. Greyed, crossed barriers were absent or rejected before the event.
A SPAD occurs when a train passes a stop signal without authority — one of the classic precursors of rail collision. The causes span engineering, environment, and human performance; most SPADs end as near misses, which is exactly why weak signals accumulate quietly in the data until the barriers align against you. SPADs drove three major UK accidents in a decade: Purley (1989), Southall (1997), and Ladbroke Grove (1999).
This bow-tie summarises a real accident: 31 lives were lost at Ladbroke Grove. The inquiry found the gaps were visible beforehand — 8 SPADs at signal SN109 in six years with no effective corrective action; signal-sighting committees never convened around Paddington since 1994 despite two audits; and ATP rejected on cost-benefit grounds after being recommended following Clapham Junction (1988). Diagram simplified from the public findings, for education.
This is the purpose of SafeForge — we help you forge Safe Systems.
Work in SafeForge, or in the AI assistant your team already uses — via MCP. SafeForge Agent reads your hazard log through governed tools, drafts summaries and change requests, and the app follows the conversation on screen. Every draft lands unconfirmed; every change waits for a reviewer.
Did we miss a cause on the Train derailment key risk?
Two candidates from published derailment investigations are in your cause library but not on this key risk: brake fade on the long descent (THR-014) and wheel-flange climb on the tight curve (THR-021). Both appear in investigation reports for tramways with a comparable gradient and curve radius. Want me to run a research pass on either?
↳ read key-risk bow-tie↳ searched published investigationsYes — brake fade. And drop the manual points inspection sheet; the points monitoring system replaced it last year.
Staged on the key risk, AI · unconfirmed until you confirm: THR-014 Brake fade on long descent with Speed supervision on the descent (CTRL-P-038) as its preventive control, and CTRL-P-027 Manual points inspection sheet removed from this bow-tie. Key-risk edits need no change request — you confirm them.
One thing to know: removing it here does not retire it. CTRL-P-027 is still an active control in your hazard log, on two other hazards. Retiring it there is a change request, and a retirement needs a justification and evidence — what replaced it (CTRL-P-003 Points monitoring & lock?), from what date, and the inspection records covering the overlap. Want me to draft CR-013 from the audit trail for you to complete?
↳ stage ×2 · unconfirmed↳ read control CTRL-P-027 · linked hazardsAdvisory — a comparison to good international practice, not a legal determination. An AI assistant can make mistakes; a person confirms or rejects every proposal in SafeForge.
AI maps your columns on first import — Excel, CSV, or DOORS exports — then remembers the format. Re-imports are instant and free, so your existing hazard log lands intact, not retyped.
Causes on the left, the top event in the centre, mitigations on the right — live, clickable, and stakeholder-ready. AI drafts grouped summaries of your key risks when you need to brief upwards.
Pre-populate the sheet from your frame and your own control library, ask the agent whether you missed a cause, let it research published incidents and propose controls with their sources — then remove, alter and own each item as a room. Lock what you agree, share the live bow-tie on the wall, and close out into the log through review.
Assist reviews the log the way a seasoned reviewer would — gaps in control coverage, orphaned causes, weak linkage — and compares your controls to good international engineering practice. Every finding is a suggestion; your team decides what enters the log.
Two-person review with per-entity approval, baselines, and a full audit trail. Define V&V rules for control-requirement linking and SafeForge flags violations automatically during review.
Point SafeForge at a DOORS module or a file on SharePoint and your hazard log stays current — changes flow in through the same review gate as everything else, so the log is live and controlled.
Import it, workshop it, or ask the agent. AI drafts. Your team reviews. Nothing enters the log without a human.
Everything above, plus the working parts below — no per-module pricing. Compare plans
DOORS, EN 50126, hazard logs
DEF STAN 00-56, MIL-STD-882E
ARP 4761, FHA, PSSA/SSA
HAZOP, ISO 31000, bow-tie
Professional Excel templates built on the SafeForge risk model. Use standalone, or import straight into the app — no AI mapping required.
Multi-sheet workbook with hazards, controls, causes, assumptions, and requirements. Pre-formatted with dropdowns, conditional formatting, and the full SafeForge risk model.
Branded worksheet for offline hazard identification workshops. Colour-coded zones for hazard, cause, initial risk, controls, and residual risk. 30 blank rows pre-formatted.
All features included. Every paid seat comes with a bonus read-only seat — for the people who need to see the record, not change it. AI credits pooled across your organisation. Prices in USD.
Beta pricing — 50% off until beta ends with code FORGEDSAFE at checkout. Want to be a beta tester? Email support@safeforge.ai
One platform from import to assurance. Your data stays yours; your reviewers stay in charge.
All features included · bonus read-only seat with every paid seat · 14-day free trial · cancel anytime