Where we have delivered

Flagship programmes. Front-line operations.

Thousands of hours of systems, safety, design and assurance work on the platforms that matter most, from the submarine fleet to strategic space. Most of it cannot be named; all of it was delivered to the standards the duty holder demanded.

Three programmes we can name. The rest are described by platform, not by name — ask us in person.

CSG25 / FASGWSystems safety engineering, safety management and supporting solutions for weapon design and helicopter and ship integration, clearing the weapon for storage, embarkation and release into service in time for the 2025 Carrier Strike Group deployment.
Op HERRICKGuided weapons on the UK Apache: certificate-of-design maintenance, urgent qualification and a goal-based safety argument that kept legacy munitions safe and serviceable on operations.
Op TELICFront-line land and air platforms supported through urgent operational requirements, where limited evidence, modelling and expert judgement had to produce safe limitations of use.

Subsea

Combat systems, optronics, propulsion plant and the next generation of electric propulsion.

SubmarinesCurrent

Integrated full electric propulsion and energy storage

We lead Phase 1 of a government propulsion technology programme for the submarine delivery and procurement authorities: a horizon scan of conventional and future technologies able to replace pressurised water reactors, large diesels and gas turbines, scored on safety, reliability, availability, maintainability, survivability and performance.

Programme detail
Our roleProgramme lead and technical lead for a collaboration team of academic and industrial partners; author of the programme plan, technology matrix and scoring system.
Standards and methodsTRL / MRL frameworks · trade studies and scoring · Def Stan 00-56 · RAMS³
OutcomePhase 1 report and technology matrix delivered; roadmap under way to take a high-scoring technology through preliminary and detailed design to a ground-based demonstrator.
Submarines

Common combat sub-system for the SSN and SSBN fleet

Requirements management, safety assurance and safety management for a common combat sub-system built on virtualised servers, intended for in-service attack and ballistic-missile submarines and their successors. We set up the requirements structure and the safety baseline for a system that had to serve three classes at once.

Programme detail
Our rolePrincipal safety and reliability engineer and systems architect for the prime contractor’s combat systems business.
Standards and methodsDef Stan 00-56 · JSP 430 · DOORS requirements management · functional and non-functional safety assurance
OutcomeRequirements and safety management framework in place for the development phase.
SubmarinesOptronics

Submarine optronics mast

Updated system definition, architecture and interface control documents for an optronics mast, then a software and firmware safety assessment to show the system met SIL 2 against Def Stan 00-55 and the firmware met DO-254. Baseline safety cases and functional, occupational, environmental and common-cause analysis took the hazards to ALARP.

Programme detail
Our roleLead functional safety engineer and systems architect.
Standards and methodsDef Stan 00-55 (SIL 2) · DO-254 · Def Stan 00-56 · ALARP · ICDs
OutcomeBaseline safety cases and a defensible architecture and interface set for the mast system.
SubmarinesNuclear

Nuclear propulsion plant — shore test facility

Failure analysis review for the secondary steam, feed and hydraulic systems of a ballistic-missile submarine reactor plant at its shore test facility: checking that fault-tree models represented the plant correctly, deriving base-event failure rates from the incident database, and writing the operator procedures and dry-run trials for a core de-fuel and removal.

Programme detail
Our roleSubmarine systems and design engineer for the propulsion plant design authority.
Standards and methodsFault tree analysis (NUREG-0492 method) · failure-rate derivation · stress analysis of the main propulsion shaft during lift
OutcomeVerified FTA models, qualified procedures and a trained, authorised de-fuel team.

Land

Armoured platforms from concept safety targets to live-fire trials.

Tracked vehicles

Next-generation main battle tank and autonomous vehicle concept

Safety targets derived from first principles using R2P2, risk graphs built from battlefield mission and fleet data, and platform-level hazards across functional, operational, occupational and particular risks. Derived requirements from fault trees and FMEDAs were presented in a structured modular safety case for the preliminary design review.

Programme detail
Our roleSystems architect and systems safety lead for the prime’s land systems business, including safety support to an autonomous tracked vehicle concept and its trials validation.
Standards and methodsDef Stan 00-56 · R2P2 · FTA · FMEDA · DOORS as a bespoke hazard log linked to platform and sub-system requirements
OutcomeAn auditable link from safety design influence through architecture and requirements to V&V, and a cradle-to-grave (CADMID) safety strategy for the design and manufacture phase.
Tracked vehiclesC4ISTAR

Complex weapons and C4ISTAR platform turret

Safety Design Authority on a very large programme to develop and deliver a highly complex turret, while coordinating the reliability, maintainability and safety teams as Head of Engineering Integrity. Detailed safety analysis and requirements shaped the system architecture, physical design, electrical and electronic design (including FPGAs, PLCs and ICs) and software development across the whole lifecycle.

Programme detail
Our roleSystem Safety Design Authority; Head of Engineering Integrity; management of internal teams and suppliers across multiple programmes; presentations to customer authorities and governing bodies.
Standards and methodsIEC 61508 / 61511 · BS 5760 · EN 50126 · ARP 4761 · ISO 13849 · Def Stan 59-114 (OB Proc P101) · Def Stan 07-85 · Def Stan 00-35 · Def Stan 00-56 · JSP 318B
OutcomeA safe and serviceable design post release to service, with a full legislation compliance matrix.
Tracked vehiclesTrials

Infantry fighting vehicle capability sustainment and manned live fire

Safety case and procedures for live fire trials on a capability sustainment programme, as part of the live fire team reporting to the trials and range safety managers. Separately, a detailed hazard log for manned live-firing trials of a turret interface programme, independently assessed by the defence ordnance safety authority, enabled crewed firing trials in the UK.

Programme detail
Our roleTrials safety lead; hazard identification sessions and qualitative risk assessment; independent safety review on several ground-based ISTAR, biological detection, air picture and electronic warfare platforms.
Standards and methodsDef Stan 00-56 · UK range safety regulations · HAZID / HAZOP · qualitative risk assessment
OutcomeTrials conducted safely; a legacy turret kept in service through ALARP mitigations identified after a public enquiry.

Air

Air traffic management at national scale, guided weapons on operations, and fast-jet integrations.

ATM & air defence

Nationwide military air traffic management transition

Safety management and safety engineering, cradle to grave, for the replacement of air traffic systems across 77 military aerodromes, airfields and ranges without disrupting flying. Sixteen technical services, each with many sub-system combinations per site, including the first hub-and-satellite ATM system of its kind, were carried through Part 1 to Part 4 safety cases and hand-over to the Front Line Command.

Programme detail
Our roleSystems safety manager for the delivery team; author of the Part 4 safety case structure; chair of the safety working groups and hazard log working groups for primary and secondary radar, data display, DVOR, DME, secure and clear communications, ILS, MLS, PAR, TACAN, direction finding and collision avoidance systems.
Standards and methodsMAA Regulatory Articles · MMATM · Def Stan 00-56 · ASEMS · technical service safety assessments, installation and transition safety reports
OutcomeOn average one release-into-service decision a week sustained across the programme, with the bespoke safety management system improved as it went.
ATM & air defenceIndependent

Independent safety assessment for a Front Line Command’s ATM estate

Independent review of the safety cases and safety data for navigation, surveillance and radio communication systems nearing end of life, with advice on their safety status, life extension and the requirements for their replacements. Alongside it, the architecture and data-integrity assessment of the national onward-routed radar data network linking civil and military radar heads.

Programme detail
Our roleIndependent safety assessor and adviser; independent systems engineering V&V testing; operational and support hazard assessments on a fully operational air base.
Standards and methodsMAA RA 3130 / 3132 · Def Stan 00-972 · CAP 670 · logical modelling and timing breakdown analysis (photon in, photon out) for latency, corruption and unauthorised access
OutcomeSafety and security requirements recommended to the station chief engineer for enhanced data integrity; systems kept safely in service.
Op HERRICKGuided weapons

Guided weapons on the UK Apache

A goal-based modular safety argument showing that legacy guided weapons and munitions were safe and serviceable for use, built on design integrity, definition, hazard log, certification, configuration and quality evidence. Certificates of design were maintained through in-service updates, and an in-flight trajectory deviation was narrowed to its root cause with six-degree-of-freedom modelling.

Programme detail
Our roleWeapon design qualification and certification engineer; OME qualification; trade studies and trials safety case for integrating a new insensitive-munition rocket motor; research into military aircraft release compliance for new munitions.
Standards and methodsSTANAG 4170 / 4187 / 4439 · OB Proc P101 / P102 · Def Stan 13-129 · Def Stan 59-411 · Def Stan 00-35 · Def Stan 05-123 · Def Stan 07-85 · JSP 553 · MIL-HDBK-1763 · 6-DOF simulation
OutcomeMunitions cleared for continued use on operations; a DOORS database linking customer requirements, specification and release requirements to verification.
CSG25 / FASGWGuided weapons

Helicopter-launched anti-surface guided weapon

Systems safety management for the all-up round and its integration equipment, in line with the delivery team’s through-life management plan: live firing trials, then the two ordnance safety review clearances needed for ship storage and embarkation and for initial operating capability with the helicopter. The complete electronic hazard log for the programme was ours.

Programme detail
Our roleSystems safety manager for the delivery team; author of the hazard log; key contributor to the safety and environmental case reports across a large design authority and MOD stakeholder community.
Standards and methodsJSP 520 · Def Stan 00-56 · Def Stan 07-85 · OSRP clearance process · eCassandra hazard log
OutcomeDeliverables on time and commended by the ordnance safety review panel, programme management and the chief engineer, in time for the carrier group deployment.
AircraftHeritage

Fast-jet and transport aircraft integrations

An interim safety case for a more powerful engine and an integrated weapons upgrade on a V/STOL fighter; the safety case for a defensive aids suite fitted to a reconnaissance aircraft under urgent operational requirement; a safety plan and analysis for a buddy-to-buddy air-to-air refuelling pod on a fast jet; and static code analysis of a transport aircraft’s mission system software to DO-178B Level A.

Programme detail
Our roleSystems safety consultant and project manager; single-person programme delivered on time and budget for the defence research agency; SPARK Ada static analysis as part of the V&V process.
Standards and methodsDef Stan 00-56 · Def Stan 00-58 (HAZOP) · Def Stan 00-55 · DO-178B · PHA · FTA · ETA · zonal and common-cause analysis
OutcomeA reversionary mode designed in to bypass software on detected failure; SILs established per system for the design document; anomalies found before conventional test.

Space

Re-entry systems, launch integration and flight readiness with a US launch authority.

Strategic spaceRe-entry

Re-entry aeroshell system

System safety for an aeroshell through manufacture, transportation and flight trials against US military system safety requirements: COSHH assessments for working with thermal protection materials, review of structural safety factors, ancillary equipment compliance, drawing and document approval, and safe working practices written into the test procedures.

Programme detail
Our roleSystem safety engineer; later, on a concept re-entry vehicle, the safety work breakdown structure, basis of estimate, information needs per lifecycle stage and top-level derived safety requirements.
Standards and methodsMIL-STD-882C · US Eastern and Western Range Safety Regulations · COSHH (EH40 / EH75) · LOLER · PUWER · Def Stan 07-85 · JSP 538
OutcomeFlight trials conducted safely; advanced knowledge of thermal protection depletion and its effect on re-entry body dynamics.
Strategic spaceLaunch

Space-based experimental payload and launch system readiness

Safe integration of a UK experimental payload onto a US launch platform, working directly with the launch authority: a suite of operating procedures for unpacking, sub-assembly fitting, connection to the rocket module and final arming and disarming, including electronic release circuit tests. Separately, a process to assess the flightworthiness of a development launcher and a safe-state inspection of a disused launch system.

Programme detail
Our roleSafety lead for payload integration; author of the flightworthiness assessment process; leader of the expert inspection team checking initiators, thermal batteries, high-pressure accumulators and toxic materials.
Standards and methodsOB Proc P101 / P102 / P112 · US range safety regulations · functional, continuity, insulation and no-volts testing
OutcomePayload integrated and armed to the launch authority’s satisfaction; launcher assessed and disused system made safe.

Cross-domain

Systems that serve every environment, and the same disciplines applied outside defence.

Air · Land · SeaIdentification

Identification friend-or-foe system across three environments

The system-level safety case for a successor identification friend-or-foe system fitted to air, land and sea platforms, using an electronic, modular safety case that integrated compliance matrices, goal-structured argument and the requirements database — one of the first of its kind. Fault trees, occupational and health hazard analysis and a SIL 2 compliance matrix mapped to DO-178B fed a hazard log for every variant.

Programme detail
Our roleLead safety engineer in the team; member of the safety committee sentencing hazard probabilities, accident risks and cost-benefit analysis for ALARP.
Standards and methodsDef Stan 00-55 · Def Stan 00-56 · JSP 430 · DO-178B · GSN · DOORS · MISRA C for safety-related software
OutcomeA paperless, modular safety case that could be reviewed constructively; the electronic safety case approach later reused on air-launched munitions.
WeaponsAir-launched

Air-launched munitions electronic safety cases

Electronic safety cases for all operational guided and unguided bomb variants and an air-to-air missile family used by the RAF, structured to JSP 520 with definitions to Def Stan 00-56 and compliance to Def Stan 07-85. Splitting the generic and specific aspects of each variant kept the argument compact and the evidence gathering manageable.

Programme detail
Our roleProduction and management of the safety cases; smart use of goal-structured notation to limit repetition across variants.
Standards and methodsJSP 520 · Def Stan 00-56 · Def Stan 07-85 · GSN · eSafety Case
OutcomeA complete, maintainable set of munition safety cases for the in-service fleet.
ATMEurope · NATO

European airspace and NATO air command safety arguments

A goal-based safety argument for reduced vertical separation in European airspace, built on research into best safety practice across aerospace, defence, rail, medical, nuclear, space, offshore and automotive, modelling accidents from aircraft system failure, human error, air traffic control failure and weather. Then the safety management plan and consequence and event-tree analysis for a NATO air command and control system.

Programme detail
Our roleSafety analyst on both; bid support and post-bid delivery on the NATO safety case.
Standards and methodsGoal-based safety argument · ETA · consequence analysis · cross-industry best practice review
OutcomeReduced vertical separation is now in operation in parts of European airspace; the NATO design team took mitigation changes to design and operational use.
AutomotiveRail

Functional safety in automotive and rail

Setting up an organisational infrastructure and culture for functional safety at a vehicle systems company, then independent assessments of vehicle systems against ISO 26262 ASIL C and ISO 13849 PL e for a powertrain controls supplier. New hybrid rail business was won with the rail standards body, a transport innovation centre and the infrastructure owner, leading to a hybrid electric concept locomotive developed with partners.

Programme detail
Our roleChief engineer for system safety and systems engineering; engineering manager; lead functional safety adviser.
Standards and methodsISO 26262 · ISO 13849 · IEC 61508 · Def Stan 00-56 · BS 5760 · EN 50126 · Yellow Book · HAZOP / HAZID / FTA / ETA / FMECA / FMEDA
OutcomeSafety cases delivered to sub-system and platform authorities for certification and release to service; a roadmap to List X status; a CPD scheme for young engineers.
How we are engaged

Much of our defence work arrives through the frameworks and portals below. We are also working towards direct contracts with the National Armaments Director group and the Front Line Commands, and we collaborate with industry primes whose own frameworks open further routes.

Aurora Engineering Partnership logo

Aurora Engineering Partnership

Down-selected to the Aurora Engineering Delivery Partner provider network, through which we supply engineering services to DE&S and the Submarine Delivery Agency under standard Aurora terms.

Futures Lab logo

Futures Lab

A proven Futures Lab lead organisation, bringing academic and manufacturing partners together on research and concept programmes for the defence customer, from TRL 1 upwards.

Defence Sourcing Portal (DSP) logo

Defence Sourcing Portal (DSP)

Registered on the MOD’s Defence Sourcing Portal, which hosts all of the Ministry of Defence’s advertised requirements, where we respond directly to tenders and to subcontracting opportunities advertised by strategic suppliers.

Dstl R-Cloud (Research Cloud) logo

Dstl R-Cloud (Research Cloud)

A supplier on R-Cloud, the Defence Science and Technology Laboratory’s dynamic gateway for contracting science and technology research, through which research tasks in defence and security are placed with us.

Contact

Want the version with names?

Under the right agreement we can talk through the programmes behind these cards.

Get in touch