UIs you can certify.
A memory-safe, deterministic UI layer.
No garbage collector, no hidden allocations, small enough for bare metal.
Rust core · no GC · deterministic rendering · runs freestanding on MCUs
Meet Slint-SC, the certifiable core.
The safety-critical build of Slint: a qualifiable subset with a documented safety manual and traceable requirements. Built for IEC 61508 / ISO 26262 / EN 50128 / IEC 62304, with qualification in progress.
Why it holds up
Properties a safety case can rely on
Memory-safe by construction
The runtime is written in Rust. No buffer overruns, no use-after-free, no data races in safe code. A whole class of CVEs simply can't occur.
Deterministic, no GC
No garbage collector means no unpredictable pauses. The same inputs produce the same frame, every time. Predictable timing you can actually budget for.
Freestanding & tiny
~300 KiB, runs on bare metal or an RTOS with no operating system underneath. A smaller surface is a smaller thing to verify.
Auditable & declarative
The UI is described declaratively and compiles to predictable, inspectable code: no hidden control flow, no reflection, nothing that surprises a reviewer.
Separation that survives review
The UI can't take down the system
Keep your safety-critical logic in the verified core you already trust. Slint is the render and interaction layer on top, clearly bounded, message-driven, and easy to reason about as its own partition.
- Declarative UI compiles ahead of time, with no interpreter shipping in your safety image.
- The certifiable path renders in software in deterministic manner. Support for path with GPU acceleration is planned.
- State flows in over typed properties and callbacks; the UI doesn't reach into your core.
- Mixed-criticality friendly: render on one partition, control logic on another.
Where it ships
Already in regulated industries
Teams in safety-conscious markets pick Slint
for the reach and the memory-safe core.
OTIV
Autonomous rail-vehicle HMI
"The high-performance UI we need to stay at the forefront."
Sam De Smet · Co-Founder
Read the story →SK Signet
15″–32″ EV-charger displays
"Flexibility, high performance and value-for-money, with great support."
Sang-Baek Lee · Manager
Read the story →A sound base for your functional-safety case
Slint isn't a black box. The traits above make it a defensible UI layer inside a safety-certified product. Our engineering team works with teams pursuing certification against standards like IEC 61508, ISO 26262, EN 50128 and IEC 62304, and we'll tell you plainly what the toolkit covers and what your product still owns.