Core contributor across SAFURE, CITADEL, certMILS, AQUAS, DECODER, ADMORPH, and AMPERE — all requiring OS-level safety or security guarantees.
SYSGO GMBH
German SME building certified real-time operating systems and MILS hypervisors for safety-critical embedded systems across automotive, space, and autonomous platforms.
Their core work
SYSGO develops real-time operating systems (RTOS) and separation kernel hypervisors for safety-critical and security-critical embedded systems. Their core product PikeOS enables multiple applications of different criticality levels to run on a single hardware platform using MILS (Multiple Independent Levels of Security) architecture. They serve industries where software failure is not an option — aerospace, automotive, defense, railways, and industrial automation. In H2020 projects, they contribute OS-level and hypervisor expertise to consortia building certified, resilient cyber-physical systems.
What they specialise in
CITADEL focused on adaptive MILS for critical infrastructure, certMILS on compositional security certification, and SAFURE on mixed-critical system safety.
ADMORPH targets adaptively morphing embedded systems with fault-tolerance; ADACORSA addresses resilient architectures for drones and automated vehicles.
DECODER applied formal methods and NLP to code documentation; certMILS addressed automated certification assurance with verification tools.
MORAL (largest single grant at EUR 838K) develops a rad-hard microcontroller for space applications — a new domain for SYSGO.
How they've shifted over time
In 2015–2018, SYSGO focused squarely on safety and security certification for mixed-critical systems, contributing MILS separation kernel expertise to projects like SAFURE, CITADEL, and certMILS in automotive and telecom domains. From 2019 onward, their scope broadened significantly — into formal methods and code analysis (DECODER), adaptive morphing systems (ADMORPH), parallel heterogeneous computing (AMPERE), space-grade hardware (MORAL), and autonomous drones (ADACORSA). The trajectory shows a company expanding from its RTOS/hypervisor core into new application domains while maintaining the same foundational competence in safety-critical system software.
SYSGO is diversifying from its traditional automotive/telecom safety-critical base into space, autonomous vehicles, and energy-efficient computing — signaling readiness for cross-domain embedded systems partnerships.
How they like to work
SYSGO consistently operates as a technology contributor rather than a consortium leader — zero coordinator roles across 10 projects, with 8 participations and 3 third-party contributions. With 132 unique partners across 21 countries, they maintain a wide and non-exclusive network, joining different consortia rather than clustering around the same partners. This profile suggests a reliable specialist that brings a well-defined, high-value component (OS/hypervisor layer) to diverse teams without seeking to drive the overall research agenda.
Extensive European network spanning 132 unique consortium partners across 21 countries, reflecting broad demand for their embedded systems expertise. No visible geographic clustering — they collaborate pan-European, from ECSEL joint undertaking projects to Marie Curie training networks.
What sets them apart
SYSGO occupies a rare niche as an SME that builds certified separation kernel technology — the software layer that guarantees isolation between safety-critical and non-critical functions on shared hardware. Few European companies can provide this MILS-based foundation, which is why they appear in projects spanning automotive, aerospace, drones, space, and industrial automation. For any consortium that needs a certified RTOS or hypervisor component with real commercial product backing (not just research prototypes), SYSGO is one of a handful of credible partners in Europe.
Highlights from their portfolio
- MORALLargest single grant (EUR 838K) and a strategic move into space-grade microcontrollers — a new market for SYSGO's embedded OS expertise.
- certMILSDirectly aligned with SYSGO's core MILS product, targeting composable security certification for medium- to high-assurance COTS systems.
- ADACORSABridges SYSGO's safety-critical OS work into the fast-growing autonomous drone and vehicle sector with resilient system architectures.