01
Visual reasoning
Bowtie diagram
Map threats, preventive controls, the risk, recovery controls, consequences, and the conditions that degrade a control.
Control-based risk analysis
See the risk.
Engineer the controls.
Prove they work.
Turn threats, consequences, and critical controls into one defensible model — with the register, performance standards, and complete PDF export already connected.
Full product · work email · no credit card
Or explore the interactive preview
Product film
00:29
One model Bowtie to control register to audit-ready PDF
Built for high-consequence work
A precise risk picture for the people who design, own, verify, and audit critical controls.
- Process safety
- Asset integrity
- Risk & assurance
- Engineering consultancies
Supports established practice across
- IEC 31010
- CCPS Process Safety
- ICAO Doc 9859
- ISO 14971
- RCM / Asset Integrity
- WHS Psychosocial CoP
01The connected model
Your bowtie should be more than a picture.
Static diagrams explain the workshop. Connected controls carry the decision into operations, assurance, and the next review.
When files drift apart
The diagram changes.
The spreadsheet does not.
- Control ownership becomes hard to trace
- Linked controls get re-keyed in multiple places
- Audit evidence is assembled after the work
With one connected model
Change the risk picture.
Every view follows.
- Linked control copies stay consistent
- Criticality, owners, and control effectiveness stay attached
- The complete register is ready to export
02From workshop to assurance
One source of truth. Five useful views.
Each view answers a different engineering question without breaking the thread back to the model.
02
Load-bearing controls
Control summary
See which controls appear across the most threats and consequences, so review attention goes where it matters.
03
Structured ownership
Control register
Keep type, criticality, control effectiveness, owner, linked instances, and notes together in a structured register.
04
Assurance criteria
Performance standards
Define the objective, criteria, verification, degradation controls, target performance, and triggers on the control itself.
05
Review-ready evidence
Audit-ready PDF
Export the summary, preventive and mitigative registers, degradation factors, and performance standards as one multi-page record.
Prove it on a real scenario
Bring one of your risks.
Build the evidence around it.
Start free 3-month trial
Full editor and control register.
No credit card required.
03Built around the work
The vocabulary changes. The control logic holds.
Start from a worked template, then adapt the scenario, controls, and assurance language to your operation.
01 / Primary
Process safety
Loss of containment, ignition, toxic release, and major-hazard control assurance.
View workflow 02 / PrimaryAsset integrity
Critical equipment failure, degradation mechanisms, monitoring, trips, and recovery planning.
View workflow 03Aviation SMS
Operational threats, loss of separation, preventive controls, and mitigations.
View template 04Cybersecurity
Threat paths, preventive controls, access loss, containment, and recovery.
View template04The picture and the proof
Evidence that stays connected to the engineering.
The same model travels from facilitation to review without being translated into a second system.
-
Run the workshop visuallyBuild and revise the causal picture in the room.
-
Assign and assure the controlsCarry ownership and performance into the register.
-
Export one complete recordPrepare clean evidence for reviews, safety cases, and procurement.
Bowtie Risk Engine
Control register &
performance standards
performance standards
01Control summary
02Preventive controls
Complete
export
export
Generated from one model Page 1
PDF
05Work where the risk lives
Browser when connected.
Desktop when you are not.
Use the signed-in web workspace, or run the native desktop edition fully offline on macOS, Windows, and Linux.
Web workspace
Signed-in access with autosave under your account. Exports are produced locally in your browser.
Offline desktop
Your diagrams and registers stay on your machine unless you explicitly export or share them.
Open exports
PNG for slides, SVG for print, JSON for revision control, and PDF for the complete register.
06Before you evaluate
Straight answers for technical teams.
Need to discuss deployment, licensing, or a specific risk workflow?
Talk to usCan I evaluate the full product before buying?
Yes. The three-month trial includes the full editor and control register. Sign up with a work email; no credit card is required.
What does the PDF export include?
The multi-page PDF includes the control summary, preventive and mitigative registers, degradation factors, and authored performance standards.
Can it run fully offline?
Yes. The licensed desktop edition runs fully offline on macOS, Windows, and Linux, with diagrams and registers stored on your machine.
Can we start from an existing example?
Yes. Worked templates cover process safety, reliability and asset integrity, aviation SMS, cybersecurity, and medical devices.
Start before the event
Make the next risk review
the one that stays connected.
Start with the full product for three months, or bring your scenario to a guided demonstration.
Work email required · no credit card