Rocq is a free interactive theorem prover and proof assistant for developing mathematical proofs, formal specifications, and programs, including…
Alternatives to Lean
Lean combines a functional programming language with a proof assistant, so it can support general coding as well as formalized mathematics and software verification. Its small trusted kernel checks proofs, while Grind automates some pattern matching, case analysis, and linear-inequality systems. Mathlib provides a community-driven collection of formalized mathematics, and Lean works with VS Code or Neovim; Lean4Web offers browser-based use. Lean is free and open source, with…
cvc5 is a free, open-source automatic theorem prover for satisfiability modulo theories problems.
Why3 is a platform for deductive program verification.
- 4
PVS
PVS is a mechanized environment for formal specification and verification.
Free planLinuxmacOSWindows6.6Free plan - 5
Z3
Z3 is a theorem prover and satisfiability modulo theories (SMT) solver used in software verification and analysis.
Free planAndroidWebAPILinux6.6Free plan - 6
HOL4
HOL4 is an interactive proof assistant for higher-order logic, with a programming environment for proving theorems and building proof tools.
Free planLinuxmacOSSelf-hostedWindows6.5Free plan - 7
Boogie
Boogie is a modeling language and tool for building program verifiers for other languages.
Free planLinuxmacOSWindows6.4Free plan - 8

Agda
Agda is an open-source dependently typed functional programming language and interactive proof assistant for writing and checking proofs.
WebExtensionLinuxmacOS6.1 - 9
CPAchecker
CPAchecker is a configurable software verification tool for analyzing programs.
Free planLinuxmacOSSelf-hostedWindows6.1Free plan - 10
Isabelle
Isabelle is a free proof assistant for expressing mathematical formulas in a formal language and establishing them within a logical calculus.
Free planLinuxmacOSSelf-hostedWindows6.1Free plan - 11
OpenJML
OpenJML checks whether Java programs annotated with Java Modeling Language specifications meet those specifications.
Free planAPIExtensionLinuxmacOS6.1Free plan - 12
SPIN
SPIN is a free tool for checking whether asynchronous systems meet logical correctness requirements.
Free planLinuxmacOSWindows6.1Free plan - 13
UPPAAL
UPPAAL is an environment for modeling, simulating, and verifying real-time systems represented as networks of timed automata.
Free planLinuxmacOSWindows6.1Free plan - 14
VeriFast
VeriFast is a free, MIT-licensed research prototype for modular formal verification of C, Rust and Java programs.
Free planExtensionLinuxmacOSWindows6.1Free plan - 15

Alloy Analyzer
Alloy Analyzer explores models written in the Alloy language, searching for structures that satisfy constraints or counterexamples to properties.
Free planAPILinuxmacOSWindows6.0Free plan - 16
CBMC
CBMC is a free bounded model checker for C and C++ programs.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 17

F*
F* is a free, open-source programming language for purely functional and effectful programs, designed around proving program properties.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 18
HOL Light
HOL Light is free software for formally proving mathematical theorems in higher-order logic.
WebLinuxmacOSSelf-hosted6.0 - 19
NuSMV
NuSMV is a free software tool for formally verifying finite state systems.
Free planLinuxmacOSWindows6.0Free plan - 20
PRISM
PRISM is a free, open-source probabilistic model checker for formal analysis of systems with random or probabilistic behaviour.
Free planLinuxmacOSWindows6.0Free plan - 21
TLA+
TLA+ is a free, open-source language and toolset for modeling software and hardware, particularly concurrent and distributed systems.
Free planExtensionLinuxmacOSWindows6.0Free plan - 22
Frama-C
Frama-C is a plug-in platform for analyzing C programs and checking for bugs.
LinuxmacOSWindows5.9 - 23
SeaHorn
SeaHorn is an open-source framework for analyzing LLVM-based programs, developed mainly for research in automated verification.
LinuxmacOSSelf-hosted5.8 - 24
Stainless
LinuxmacOSWindows5.8 - 25

Dafny
Dafny is a verification-aware programming language that lets developers write specifications alongside code and uses a static verifier to check whether programs meet them.
LinuxmacOSSelf-hostedWindows5.7 - 26
K Framework
APILinuxmacOSSelf-hosted5.7 - 27
Ultimate Automizer
Ultimate Automizer is a free software model checker and a toolchain in the Ultimate program analysis framework.
WebLinuxWindows5.7 - 28
Viper
Viper is a free, open-source language and tool suite for building program verifiers and prototyping verification techniques.
WebExtensionLinuxmacOS5.7 - 29
ACL2
ACL2 is an interactive theorem prover that pairs a Lisp-based language for formal models with a reasoning engine to prove properties of those models.
LinuxmacOSSelf-hostedWindows5.6 - 30
Apalache
APILinuxSelf-hosted5.4

