Embedded Software for Critical Systems

Safety-ready protocol stacks. Fully under your control.

Discuss Your Project Explore our solutions

30+ years of embedded expertise
No third-party code

✓

SIL3 Certified Safety Stacks

SIL3/PLe assessed by an independent certification body, with comprehensive documentation for your certification process. Proven safety protocols for critical applications.

⚙

Low Hardware Dependency

Works with any MCU, any RTOS. No vendor lock-in, no hardware dependencies. Complete freedom in your platform choices.

👨‍💻

Expert Support & Services

Direct access to the engineers who built the stacks. 30+ years of embedded expertise with comprehensive integration support.

SIL3 Certified

CANopen Safety Master Stack

CANopen Safety master stack — SIL3 SRDO safety supervision over CANopen (CiA 304 / EN 50325-5), running alongside your standard CANopen master. Ready-to-integrate binary.

CANopen Safety (CiA 304 / EN 50325-5) master with SRDO producer/consumer
SIL3 / PLe assessed by certification body
Supervises multiple CANopen Safety slaves

Learn More →

SIL3 Certified

CANopen Safety Slave Stack

CANopen Safety slave stack: SIL3 SRDO safety over CANopen (CiA 304 / EN 50325-5), running with your standard CANopen stack. Ready-to-integrate binary, any MCU/RTOS.

CANopen Safety (CiA 304 / EN 50325-5) SRDO producer and consumer
SIL3 / PLe assessed by certification body
Safety data protected by CRC, redundancy and time monitoring

Learn More →

SIL3 Certified

FSoE MainInstance Stack

FSoE MainInstance master stack — SIL3 Fail-Safe over EtherCAT for safety controllers and PLCs. IEC 61784-3 black channel, ready-to-integrate binary, runs on any MCU/RTOS.

Fail-Safe over EtherCAT (FSoE) MainInstance for safety controllers and PLCs
Official IEC 61508-3 SIL 3 pre-certified stack with Safety Manual and test reports delivered to customers.
OS & compiler agnostic: Bare metal, SafeRTOS, QNX, PikeOS… GCC and other compilers. Open list.

Learn More →

SIL3 Certified

FSoE SubInstance Stack

FSoE slave stack (SubInstance): SIL3 Fail-Safe over EtherCAT for safe I/O devices. IEC 61784-3 black channel, a ready-to-integrate binary, any MCU or RTOS.

Official IEC 61508-3 SIL 3 pre-certified stack with Safety Manual and test reports delivered to customers.
IEC 61784-3 black channel — runs over any EtherCAT slave stack
OS & compiler agnostic: Bare metal, SafeRTOS, QNX, PikeOS… GCC and other compilers. Open list.

Learn More →

SIL3 Certified

J1939 Safety Stack

J1939 functional-safety stack (SAE J1939-76 Safety Data Group): validated safety-relevant messaging over CAN for SIL 2 / SIL 3 heavy-duty vehicle and machinery ECUs. Portable ANSI-C.

SAE J1939-76 Safety Data Group (SDG)
Safety validation: CRC, message counters, timeout supervision
Runs alongside the standard J1939 Stack on one ECU

Learn More →

CiA 301

CANopen Master Stack

Portable ANSI-C CANopen master stack — CiA 301/302 NMT manager with SDO client, PDO and LSS, coordinating up to 127 nodes over CAN and CAN FD.

CANopen manager / master per CiA 301 and CiA 302
NMT master: boot-up, start, stop and reset of nodes
SDO client for configuration and diagnostics of all slaves

Learn More →

CiA 301

CANopen Slave Stack

Portable ANSI-C CANopen slave stack — CiA 301/302 device with PDO, SDO, EMCY, NMT and LSS over classic CAN and CAN FD, on any MCU or RTOS.

CiA 301 application layer and CiA 302 network management
PDO, SDO, EMCY, SYNC, TIME and heartbeat / node-guarding
Configurable Object Dictionary with EDS / DCF support

Learn More →

SAE J1939

J1939 Stack

Portable ANSI-C J1939 protocol stack — PGN/SPN, BAM/CMDT transport, address claiming and DM diagnostics for heavy-duty vehicles, telematics and FMS fleet data. Any MCU/RTOS.

Complete SAE J1939 stack (J1939-21, -71, -73, -81)
PGN/SPN messaging with cyclic transmit and receive
Multi-packet transport: BAM (broadcast) and CMDT/TP (connection mode)

Learn More →

Multi-Protocol Analyzer & Test Bench

CAN / CANopen / J1939 Analyzer

CAN CANopen J1939 analyzer and test bench: monitor and decode Raw CAN, CANopen and J1939, then simulate nodes, configure devices and inject faults — with or without hardware.

Raw CAN, CANopen (CiA 301/302/304/305/306) and SAE J1939 (-21/-73/-76/-84) in one tool
CAN 2.0A/B and CAN FD up to 8 Mbit/s data phase
Live decode against DBC, EDS/DCF and SAE Digital Annex databases

Learn More →

Network Simulation & Digital Twin

FSoE Network Simulation

FSoE network simulation: virtualize EtherCAT, CANopen and FSoE networks — simulate up to 2000 devices with or without hardware, inject faults and connect a Digital Twin via FMI.

Simulate up to 2000 devices via a physical adapter or fully in software
Configure from your existing ENI / EDS files
React to PDOs, exchange SDOs and drive device state machines

Learn More →

Multi-Protocol Gateway

Multi-protocol gateway (ISI-GTW): bridge CANopen, EtherCAT, J1939 and other industrial protocols with configurable data mapping, diagnostics and real-time performance.

Fully Programmable: C/C++ programming in multitasking environment. Full access to process your data.
Multi-Protocol Support: CAN, CANopen, J1939, Ethernet, EtherNet/IP, Modbus RTU/TCP, Serial RS232/485
Turnkey Solution: ISIT-Neperis handles development, production, and packaging.

Learn More →

View All Products →

The SIL escalation path represents a pragmatic move to upgrade your certification kit to an integrity level that is higher than the previous one.

Certification kit is made of the Safety manual and the safety artefacts (validation plan, test results, certificate)