TrustInSoft

TrustInSoft builds TrustInSoft Analyzer, a static and dynamic source-code analysis tool that applies formal methods, specifically abstract interpretation, to source code. Rather than heuristically flagging code patterns that are probably bugs, as most static application security testing tools do, the analyzer aims to mathematically guarantee the absence of specific classes of critical runtime errors and memory-safety vulnerabilities across the code paths it examines. The technique originated in academic and safety-critical research and has been recognized by the US National Institute of Standards and Technology (NIST) for its use of advanced formal methods.

Founded in 2013 by Fabrice Derepas, Benjamin Monate, and Pascal Cuoq, three former researchers from France’s Alternative Energies and Atomic Energy Commission (CEA), and headquartered in Paris, TrustInSoft raised roughly 5 million euro from Ace Management and Idinvest Partners. The company serves industries where a single memory-safety defect can be catastrophic or trigger a regulatory recall: automotive, aerospace, industrial and embedded systems, medical devices, and telecommunications, entering the automotive cybersecurity market specifically in 2023 and adding Rust language analysis capabilities in 2025.

Formal verification tools occupy a narrow, technically demanding niche relative to the broader application security market, trading breadth of coverage for a much stronger correctness guarantee on the specific properties they check. As memory-safety vulnerabilities in C and C++ remain a persistent root cause of serious security flaws in embedded and safety-critical software, and as government and industry pressure mounts toward memory-safe engineering practices, that narrow but rigorous approach keeps TrustInSoft relevant to a real and enduring problem rather than a general-purpose AppSec buyer.