Rust for critical systems, enabling engineers to ship safe and correct code, faster.

The Ferrocene logo. A ball between two planes. The name ferrocene next to it.

Ferrocene is an open source qualified Rust compiler toolchain. With this, Ferrous Systems invested its decades of Rust experience to make Rust a first-class language for mission-critical and functional safety systems.

Mark of approval called `TÜV SÜD Mark P`

For its first release, Ferrocene 23.06 is a ISO 26262 (ASIL D) and IEC 61508 (SIL 4) qualified version of the existing open-source compiler, rustc, based on Rust 1.68.

We plan to work on standards like DO-178C, ISO 21434, and IEC 62278 in the future.

Open source

The source code of Ferrocene is fully open source under the MIT OR Apache-2.0 license, including the full qualification documents. Check out the ferrocene/ferrocene repository on GitHub and our "Open Sourcing Ferrocene" blog post.

Available for Purchase Later This Year

Ferrocene will be available for purchase by individuals and companies later this year at €25 per month per seat (or €240 per seat if paying annually). Purchasing Ferrocene will grant you access to the pre-built binaries and packages of our qualified compilers, and the rendered qualification documents for all versions of Ferrocene.

Early access is available right now for organizations with more than 10 users: contact us if you're interested.

Support plans, and Ferrous Systems' digital signatures of the qualification documents (to present to the assessors when certifying your projects), are going to be available separately. Contact us for more information!

Stay up to date
Sign up for our Newsletter
Contact us
Get in touch

Long-Term Support while never losing upstream

Rust moves fast. Ferrocene allows you to pick your pace by never losing upstream itself, while supporting older versions to your needs. We ship all available Rust compilers for all your needs.

Supply Chain Security

Ferrocene goes beyond the compiler in keeping all aspects of the software being built in mind, particularly the distribution, traceability and use of own or foreign libraries.

We’re committed to providing secure, auditable distribution channels for these toolchain updates. Active communication of issues to clients and helping with fixes rounds up the package.


Ferrocene is committed to strong compatibility with the Rust project's Rust distribution: check out our "Qualifying Rust without forking" blog post to learn more.


The Ferrocene project acts as a beacon and gathering place for mission and safety-critical concerns in the Rust project. This includes strong testing of the very core of the language on a number of specialized platforms. We’re creating a developer representation and raising the visibility of these industries in the Rust ecosystem. As a downstream of the main Rust project, we see it as a force multiplier.

Stay up to date
Sign up for our Newsletter
Contact us
Get in touch