ECR offers a collection of products and services for customers building autonomous systems. Whether you’re a stealth-mode startup marching toward an MVP or an established OEM facing production deadlines, ECR is here to help you innovate safely.


Hologram is a platform for building more robust autonomous perception. Hologram’s features are built to support better coordination of key roles across autonomy development: design and training of machine-learning algorithms, managing fleet deployments, and performing system-safety programs.

Hologram is an integral counterpart to simulation and road testing. Hologram’s end-to-end capability provides identification of perception weakness, sensor data analysis, and support for training machine-learning perception algorithms.

Hologram’s edge case engine and analytics platform integrate via APIs with your existing data lakes and perception software, accelerating the construction of strong safety cases, achieving standards compliance, and maximizing investments into on-road testing.

Hologram intelligently tests your perception software against adversarial examples, which Hologram produces from your own sensor data. Hologram uses this approach to test your perception software against realistic “what if” scenarios to identify credible risks.

“a heavy tail distribution of surprises from the real world could make it impossible to use a simplistic drive/fail/fix development process to achieve acceptable safety”

Phil Koopman

Co-Founder & CTO


The MISSA process can utilize existing work to avoid duplicated effort. If you have already worked through a preliminary hazard analysis, ECR can take you through the functional hazard analysis, the verification plan, and beyond. A common frustration with traditional safety processes is that work products become outdated by the time they are finished. This is especially true in complex, fast-moving fields like autonomous vehicle development. MISSA’s iterative nature means that new features with safety- or mission-critical implications can be easily incorporated by refining the existing model. There is no need to go through the time and expense of re-creating manual fault trees as behaviors and identified risks evolve. The implication of design changes on the safety case are immediately communicated to developers so that intelligent tradeoffs can be made. While every system is different, we estimate that a safety program using MISSA is 5-6x faster than a traditional safety process. Rather than being a box-checking solution to standards compliance, MISSA’s output actually helps developers build safer systems on time and on budget.



Our decades of experience show that a focused safety concept can save significant development
expense while cutting risk. Using MISSA, our services team helps customers construct a safety concept iteratively, based on a clear accounting of hazards within your deployment environment and the safety requirements necessary to avoid them.


History shows that a majority of the cost required to develop safety-critical systems is spend on verification and validation. So MISSA helps you optimize your system architecture to isolate safety-criticality in a way that meets your safety concept using minimal technology. MISSA’s model-based functional hazard assessment tools help quickly evaluate design trade-offs from a risk perspective.


Using MISSA, our services team helps you integrate your system’s safety requirements with our Hologram and Switchboard tools to perform robustness testing. We also help customers plan and conduct standards-based verification activities called for in MIL-STD-882E, ISO 26262, and other standards.


The fundamental goal of any safety program is building a better, safer product. Unfortunately, many safety programs are structured as “boxes to check” that don’t add inherent value to the product itself. As a result, “safety” is siloed from “development”. MISSA bridges this gap to achieve continuous integration for your safety case.


The Switchboard stress test engine performs random, intelligent fuzzing that complies with your system’s defined interfaces. Switchboard’s novel process accelerates your ability to find and fix realistic edge case bugs before products are launched. Switchboard intelligent automation empowers development teams and eliminates concerns of testing bias. Developers simply define undesirable outcomes in Switchboard and run tests to isolate the circumstances that surround failures.

Connect with Us

2 + 13 =


Commentary: Recent Waymo Test Vehicle Crashes

There has been a lot of commentary and concern over recent autonomous vehicle testing accidents over the past few months, most notably since the fatal accident involving Elaine Herzberg and an Uber autonomous test vehicle. In that case, the safety driver was blamed...