ISP RAS

What ISP RAS does

ISP RAS (the Institute of System Programming of the Russian Academy of Sciences, founded 1994, Moscow) is a federal state budgetary research institution under the Russian Academy of Sciences, employing 501-1,000 staff across seven scientific departments and six internal centers covering Linux verification, system software security, trusted AI, parallel and distributed computing, software certification, and shared research infrastructure. The institute develops world-class technologies in operating systems, compiler technologies, static and dynamic program analysis, big data analysis, and artificial intelligence. Core commercial products include the Svace static analyzer for C/C++ (deployed at Samsung, Huawei, Kaspersky Lab, and RusBITech), the SharpChecker static analyzer for C#, the Texterra intelligent text analysis system, the Talisman platform for information-analytical systems, the Asperitas cloud environment, the Natch attack-surface tool, the Crusher analysis complex, and the Blesna dynamic-analysis tool; more than 16 of these are registered in the Russian Software Registry and over 200 computer programs have been state-registered since 2004.

The institute's AI portfolio includes neural-network ECG analysis (ECGlib), medical-imaging tools (Marklab), a Trusted AI Research Center, and a 2024-2025 wave of AI-safety products such as ML-Factory, TrustFlow, TrustTorch, ML Backdoor Detection, ML Bias Detection, Federated Learning Framework, and the LLM-based ISP Circea code review system. Patent activity is accelerating, with 2023-2025 grants covering adversarial-example generation for network and industrial-control intrusion detection and explainable AI for text topic determination, alongside an existing US patent (US 9,201,957 B2) for semantic document modeling.

Revenue is generated through federal budget allocations, government research grants, technology transfer, software licensing (pricing publicly disclosed on the institute's website), and contracted research for industry partners such as Samsung (compiler toolchain for Tizen), Huawei, Kaspersky Lab, RusBITech, GosNIIAS, Postgres Professional, and the FSTEC-coordinated Bank of Data on Information Security Threats. The institute also operates postgraduate training and chairs system programming at MSU, MIPT, and HSE. The director is Academician of RAS Arutyun Avetisyan.

Name

ISP RAS

Legal name

Федеральное государственное бюджетное учреждение науки Институт системного программирования им. В.П. Иванникова Российской академии наук

Website

https://ispras.ru

Company type

Private

Founded year

1994

Operating status

Operating

Headcount range

501–1,000 employees

Short description

ISP RAS is a Moscow-based federal research institute under the Russian Academy of Sciences that develops static and dynamic program analyzers, compiler technologies, NLP platforms, and trusted AI systems, serving Russian and international technology companies, government agencies, and academic partners.

Ownership category

akta.pro rank

Product category

Software Security and Analysis Tools

NAICS

Custom Computer Programming Services (541511), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

Keywords

• Static code analysis
• Software security tools
• Compiler technologies
• Program verification
• Artificial intelligence research

Headquarters

HQ city

Moscow

HQ country

Russia

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Others

Distribution channels1 record

Marketing channels6 records

Core offering

ISP RAS is a federal state research institute that develops and licenses specialized software tools for static and dynamic program analysis, compiler technologies, operating system verification, big data and text analysis, and AI-based medical and security applications. Its registered portfolio includes vulnerability detection analyzers, code review systems, cloud environments, and intelligent information-analytical platforms used by IT companies and government organizations.

Product overview

ISP RAS develops a portfolio of specialized software tools primarily focused on software security, analysis, and verification. The core offerings include static code analyzers (Svace for C/C++, SharpChecker for C#), binary analysis tools (ТРАЛ), and dynamic analysis systems (Blesna, Crusher). The AI-powered suite includes Texterra for NLP, Talisman for information-analytical systems, and ECGlib for medical diagnostics. The cloud platform Asperitas and testing tools like ISPuaro round out the development and deployment capabilities. These products are designed for secure software development lifecycle management, with several integrated into the Russian Software Registry for government use.

Differentiator

Problem solved

Functional benefit

Brands

• Svace: Static source code analyzer for detecting security vulnerabilities and defects
• SharpChecker
• Texterra
• DigiTEF
• Asperitas
• Talisman
• FANLIGHT
• Natch
• Crusher
• Blesna (Блесна)

Products and services

• Svace Static source code analyzer for detecting security vulnerabilities and critical defects in C/C++ code, used by IT and security companies.
• SharpChecker Static analyzer for C# programs that detects vulnerabilities and unreachable code using context-sensitive, flow-sensitive analysis techniques.
• Texterra Intelligent text analysis system providing semantic processing of texts using natural language processing technologies.
• Talisman Platform for building intelligent information-analytical systems with components for data stream processing, biography generation, and knowledge base management.
• DigiTEF Digital testing bench for conducting virtual experiments and testing in digital environments.
• Asperitas Cloud environment for deploying and managing virtual machines and containers on demand, supporting mixed cloud infrastructure.
• FANLIGHT Software platform for organizing problem-oriented web laboratories, providing unified environment for research, development, and education.
• Natch Attack surface determination tool that analyzes software to identify potential vulnerability entry points and security risks.
• Crusher

Quantifiable outcome

• Svace static analysis system deployed in Samsung, Huawei, Kaspersky Lab, RusBITech for improving program quality and security

Segments3 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability13 records

Feature13 records

Partnerships

Ten partnerships are on record, tiered core and minor.

• Kaspersky LabcoreStrategic or Co-development PartnerMajor Russian cybersecurity company collaborating with ISP RAS on security technologies and secure software development lifecycle solutions
• SamsungcoreStrategic or Co-development PartnerISP RAS developed compiler toolchain and optimization technologies used in Tizen mobile platform; joint IoT Academy and research collaboration
• HuaweicoreStrategic or Co-development PartnerCollaboration on static analysis technologies and software development tools
• RusBITech (РусБИТех)coreStrategic or Co-development PartnerCollaboration on Astra Linux security improvements and trusted operating system development
• GosNIIAScoreStrategic or Co-development PartnerState Research Institute of Aviation Systems - collaboration on certifiable real-time operating systems for aircraft
• Fraunhofer-GesellschaftminorStrategic or Co-development PartnerGerman research organization partnership for collaborative research
• INRIAminorStrategic or Co-development PartnerFrench National Institute for Research in Computer Science and Control - international research collaboration
• FSTEC of Russia (ФСТЭК России)coreStrategic or Co-development PartnerFederal Service for Technical and Export Control - ISP RAS cybersecurity technologies deployed; partner of FSTEC initiative Bank of Data on Information Security Threats along with Digital Security, NTC Stankoinformzashita, ALTEX-SOFT, NPO Echelon, RusBITech, Perspective Monitoring
• Moscow Center IEEE CSminorStrategic or Co-development PartnerIEEE Computer Society Moscow Center for professional collaboration
• Office of Naval Research (ONR)minorStrategic or Co-development PartnerUS Navy research office - international research collaboration

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• PVS-Studio: Russian commercial static analyzer for C, C++, C# and Java. Most direct competitor to ISP RAS's Svace and SharpChecker, focused exclusively on code quality and security analysis with commercial licensing.
• Positive Technologies: Leading Russian cybersecurity vendor with PT Application Inspector (SAST) and other application security products. Overlaps directly with ISP RAS's secure SDLC and vulnerability detection portfolio, serving the same Russian enterprise and government buyer base.
• Solar (Ростелеком-Солар): Russian cybersecurity subsidiary of Rostelecom offering application security, code analysis and SOC services. Competes with ISP RAS for the same import-substitution-driven Russian enterprise security budget.

Broad incumbents

• Kaspersky Lab: Global Russian-headquartered cybersecurity company and named ISP RAS partner. Overlaps in application security and threat research but operates at much broader scale with a global commercial SaaS distribution model.
• SonarSource (SonarQube): Global code quality and static analysis platform widely adopted in CI/CD pipelines. Comparable to ISP RAS's static analysis products but commercialized as a recurring SaaS business with broad language coverage.
• Synopsys (Coverity): Global leader in static analysis via Coverity and broader application security testing portfolio. The commercial benchmark for SAST products like Svace, with deep enterprise distribution.
• Veracode: Application security testing SaaS vendor covering SAST, DAST and software composition analysis. Comparable functional overlap with ISP RAS's static and dynamic analysis stack but delivered as managed enterprise SaaS.

Emerging players

• Semgrep: Modern lightweight static analysis engine popular with developer and DevSecOps teams. Competes in the same application security segment as Svace and SharpChecker but with a developer-first, open-source-driven model.

Others

• Postgres Professional: Russian PostgreSQL company and named ISP RAS partner. Not a competitor but an adjacent Russian trusted-software vendor serving similar import-substitution-driven enterprise and government customers.
• Fraunhofer-Gesellschaft: Germany's applied research organization and named ISP RAS international research partner. Comparable as a government-funded applied research institute conducting industry-facing software and systems research.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/ispras

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Subsidiaries6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ISP RAS