What Is BowTieXP?
BowTieXP is the world’s most widely used software for bowtie risk assessment. Developed by CGE Risk Management Solutions (now part of Wolters Kluwer), it is the de facto standard tool for barrier-based risk management in high-hazard industries — oil and gas, aviation, chemical processing, mining, rail, and nuclear.
The software is built around the Bowtie Method: a risk visualization technique that represents a hazard scenario as a bow-tie shaped diagram. The center of the bow tie is the Top Event (the loss of control moment). To the left are Threats (causes that could lead to the top event) connected to Prevention Barriers (controls that stop the threat from reaching the top event). To the right are Consequences and Recovery Barriers (controls that limit harm after the top event occurs).
This structure gives risk managers, HSE professionals, and senior management a single, clear picture of both the proactive and reactive sides of any major hazard scenario — something that traditional risk registers and fault trees struggle to communicate.
Version 12 (BowTieXP 12.0.8) is the current release, bringing interface improvements, enhanced reporting capabilities, and expanded integration with the BowTieXP Suite platform.
Who Uses BowTieXP?
- HSE managers and process safety engineers in oil & gas, petrochemical, and refining industries
- Aviation safety teams managing safety management systems (SMS) and major risk scenarios
- Mining and quarrying operations conducting major hazard assessments
- Rail and transport operators mapping operational risk and barrier performance
- Nuclear and energy facilities building safety cases and demonstrating ALARP
- Offshore installation managers managing major accident hazard (MAH) barriers
- Risk consultants building bowtie libraries for industrial clients
- Regulators and government agencies assessing operator safety cases
BowTieXP has been explicitly recommended or required by regulators in multiple jurisdictions, including the UK Health and Safety Executive (HSE), the Dutch Safety Board, and various offshore oil and gas regulatory bodies.
The Bowtie Method — Core Concepts
Understanding the bowtie methodology is essential for effective use of BowTieXP. The diagram has five core elements:
Hazard
The source of potential harm — a substance, condition, or situation with the potential to cause a major incident. Examples: stored hydrocarbons under pressure, rotating machinery, electrical energy, height.
Top Event
The moment control over the hazard is lost. This is the critical pivot point of the diagram. Examples: loss of containment, loss of control of aircraft, structural collapse.
Threats
The pathways or initiating causes that could lead to the top event. A bowtie typically maps multiple threats, each with its own set of barriers. Examples: corrosion, human error, mechanical failure, external impact.
Prevention Barriers (Left Side)
Controls that interrupt the pathway from threat to top event. These are the proactive side of risk management. Examples: inspection programs, interlocks, permits to work, pressure relief valves.
Consequences
The outcomes that follow the top event if not controlled. Examples: fire, explosion, fatality, environmental release, reputational damage.
Recovery Barriers (Right Side)
Controls that limit the severity of consequences after the top event. The reactive side of risk management. Examples: fire detection and suppression, emergency response plans, evacuation procedures, medical response.
Escalation Factors
Conditions that can defeat a barrier, making it less effective or completely ineffective. Examples: poor maintenance, inadequate training, bad weather. In BowTieXP, escalation factors are attached to specific barriers with their own escalation factor controls.
BowTieXP Editions
BowTieXP Standard
The core product for creating and maintaining bowtie diagrams. Includes:
- Full bowtie diagram creation with all standard elements (hazards, threats, consequences, barriers, escalation factors)
- Barrier categorization and effectiveness rating (traffic light color coding)
- Risk matrix generation (inherent and residual risk assessment)
- Safety Management System (SMS) visualization — link activities and documents to barriers
- Export to PDF, image formats (JPG, PNG, SVG), and HTML for web distribution
- Bulk/group editing of multiple diagram elements
- Drag-and-drop diagram building interface
- Standard reporting suite
BowTieXP Complete
All Standard features plus advanced capabilities for power users:
- LOPA (Layer of Protection Analysis) — automatically calculate top event frequency using initiating event frequencies and barrier probability of failure on demand (PFD). Compare calculated frequency against risk tolerability targets
- Quantitative Risk Assessment — attach frequency and consequence data to produce quantitative risk outputs
- Audit Module — plan, execute, and document barrier audits directly within the bowtie framework. Track audit findings linked to specific barriers
- Advanced reporting — custom report templates, regulatory reporting formats
- Barrier performance monitoring — track real-world barrier status over time
- Custom fields and categories — extend the data model to match your organization’s risk framework
BowTieXP Enterprise / BowTieXP Suite
The cloud-based platform for organizations managing bowties across multiple sites or departments:
- Centralized bowtie database accessible by multiple users simultaneously
- Role-based access control
- Real-time collaboration on diagram development
- Integration with incident management (IncidentXP)
- KPI dashboards showing barrier performance across the organization
- Integration with audit and inspection workflows
- API access for connection to ERP, CMMS, and safety management platforms
Key Features in Detail
Visual Diagram Builder
BowTieXP’s drag-and-drop interface makes diagram construction fast. When hovering over elements, contextual “+” buttons appear for adding threats, barriers, consequences, and escalation factors without navigating menus. The software handles diagram layout automatically, keeping complex multi-threat bowties readable.
Barrier Effectiveness Analysis
Each barrier in BowTieXP can be rated for effectiveness using a configurable traffic light system (green/amber/red) or numerical scoring. This gives HSE managers an instant visual summary of where risk controls are strong and where they are degraded or insufficient.
Risk Matrix Integration
BowTieXP generates inherent risk matrices (risk before barriers) and residual risk matrices (risk after barriers are applied). Comparing these demonstrates the value of existing controls and helps prioritize improvement actions.
Safety Management System (SMS) Visualization
Activities from your SMS — inspections, training programs, maintenance tasks, permits — can be linked directly to the barriers they support in BowTieXP. This creates a traceable connection between daily operational activities and the major hazard controls they maintain, which is increasingly required by regulators.
LOPA Integration (Complete Edition)
The Layer of Protection Analysis module allows quantitative frequency calculation within the bowtie framework. Attach initiating event frequencies to threats and PFD values to barriers. BowTieXP automatically calculates the residual top event frequency and compares it against your risk tolerability criteria (e.g., ALARP thresholds).
Reporting and Communication
BowTieXP produces print-ready diagram exports, management summary reports, and web-based HTML bowties for distribution across the organization. Many companies use BowTieXP exports for toolbox talks, safety inductions, and regulatory submissions. Diagrams can be filtered to show only the information relevant to a specific audience (e.g., the barriers relevant to a field technician vs. a safety manager).
Group Editing
Select multiple diagram elements and edit shared properties simultaneously — essential for large bowtie libraries where standards change across many diagrams at once.
Industry Applications
Oil and Gas
BowTieXP originated in the oil and gas industry — Shell was among the earliest adopters in the mid-1990s. Today it is used throughout the upstream and downstream sectors for:
- Major accident hazard (MAH) bow ties for offshore installations
- Process safety barrier management in refineries and petrochemical plants
- Pipeline integrity management
- Well control risk assessment
- ALARP demonstration for safety cases
Regulators in the UK, Norway, Australia, and elsewhere explicitly reference the bowtie methodology in their process safety guidance.
Aviation
Aviation regulators and airlines use BowTieXP for Safety Management System implementation, mapping threats and barriers for major risk scenarios such as runway excursion, CFIT (controlled flight into terrain), and ground handling incidents. CHC Helicopter, one of the world’s largest helicopter operators, standardized on BowTieXP for risk management across all its global bases.
Rail and Transport
The British Transport Police and rail operators across Europe use BowTieXP for managing operational safety risk on the rail network, including infrastructure failure, human factors, and level crossing incidents.
Chemical and Process Industry
Process safety engineers in chemical manufacturing use BowTieXP to document HAZOP findings in a visual barrier format, demonstrate ALARP compliance to regulators, and manage the lifecycle of safety critical controls.
Mining
Mining companies use BowTieXP for high-energy hazard management — ground fall, explosives, mobile equipment interactions — providing a standardized framework for major hazard risk communication across sites and workforce levels.
BowTieXP vs. Competing Tools (2026)
| Feature | BowTieXP 12 | BowTie Pro | Causalio | Sphera BowTie |
|---|---|---|---|---|
| Industry standard status | ✅ De facto standard | ✅ Strong in AU/NZ | ❌ Newer entrant | ✅ Enterprise niche |
| Ease of use | ✅ Very user-friendly | ✅ Good | ✅ Cloud-native UX | ⚠️ Complex |
| LOPA integration | ✅ Complete edition | ✅ | ❌ | ✅ |
| Quantitative risk | ✅ Complete edition | ✅ | Limited | ✅ |
| Collaborative/cloud | ✅ Suite (enterprise) | Limited | ✅ Native | ✅ |
| Audit module | ✅ Complete edition | ✅ | ✅ | ✅ |
| SMS visualization | ✅ | ✅ | ✅ | ✅ |
| Regulator recognition | ✅ Widely cited | ✅ | ❌ | Limited |
| Oil & gas pedigree | ✅ Shell origin | ✅ | ❌ | ✅ |
| Pricing model | Per-user license | Per-user license | Subscription SaaS | Enterprise custom |
| Free trial | ✅ | ✅ | ✅ | ❌ |
When BowTieXP is the clear choice: You are in oil and gas, aviation, or a regulated process industry where regulator familiarity with the format matters. Your organization needs the Standard or Complete desktop edition with LOPA and audit capability. You are building a safety case that will be submitted to a regulatory body.
When BowTie Pro is considered: Your team is based in Australia or New Zealand where BowTie Pro has strong local support and integrator networks. The feature sets are comparable for most applications.
When Causalio is preferred: You need real-time cloud collaboration for distributed teams and don’t require deep LOPA quantification. Better suited for risk workshops and lighter-duty applications than full process safety cases.
System Requirements
| Component | Requirement |
|---|---|
| OS | Windows 10 / 11 (64-bit) |
| RAM | 4 GB minimum, 8 GB recommended |
| Storage | 500 MB for installation |
| Display | 1280 × 768 minimum |
| .NET | .NET Framework 4.7.2 or later |
BowTieXP is a Windows desktop application. There is no native macOS or Linux version — Mac users typically run it via Parallels or a Windows virtual machine.
License Activation
BowTieXP uses online license activation tied to a user account:
- Download the installer from the CGE Risk / Wolters Kluwer portal
- Install on your Windows machine
- On first launch, enter your license key when prompted
- The software activates online and stores the license locally
- An internet connection is required for initial activation and periodic license validation
For organizations without reliable internet access, offline activation is available — contact CGE Risk / Wolters Kluwer support to obtain an offline license file.
License transfer: BowTieXP licenses can typically be deactivated and reactivated on a new machine through the customer portal, subject to the license terms.
Frequently Asked Questions
Is there a free version of BowTieXP?
CGE Risk offers a free trial of BowTieXP with full functionality for a limited evaluation period. There is no permanently free tier — a license purchase is required for ongoing use. Universities and educational institutions may qualify for discounted academic licensing.
What is the difference between BowTieXP Standard and BowTieXP Complete?
Standard covers all core bowtie diagram creation, barrier analysis, risk matrices, and SMS visualization. Complete adds LOPA frequency calculation, quantitative risk assessment, an audit module, and advanced reporting templates. For most HSE professionals and safety consultants, Complete is the recommended edition.
Can BowTieXP diagrams be shared with people who don’t have the software?
Yes. BowTieXP exports diagrams as PDF, PNG, SVG, and HTML. The HTML export produces an interactive web-based bowtie that can be viewed in any browser without a BowTieXP license — ideal for distributing risk information to the wider workforce.
Does BowTieXP integrate with other safety management systems?
The BowTieXP Suite (enterprise cloud version) offers API integration with ERP systems, CMMS platforms, and incident management software. The desktop BowTieXP Standard and Complete editions have limited direct integration but can export and import data in XML and Excel formats.
What is BowTieServer?
BowTieServer is the predecessor multi-user server product that has been largely superseded by the BowTieXP Suite cloud platform. Existing BowTieServer customers can migrate to BowTieXP Suite for enhanced collaboration and cloud functionality.
Can BowTieXP be used for cybersecurity risk assessments?
The bowtie methodology is applicable to any risk domain, including cybersecurity. BowTieXP can be used to model cyber threats, controls, and consequences — though it was designed primarily for physical safety hazards in industrial environments. Dedicated cybersecurity risk tools (e.g., FAIR analysis platforms) may be better suited for purely cyber-focused assessments.
Is BowTieXP recognized by ISO standards?
The bowtie methodology aligns with ISO 31000 (Risk Management) principles and ISO 45001 (Occupational Health and Safety) requirements for hazard identification and risk control. BowTieXP is not itself an ISO-certified product, but its methodology and outputs support compliance with these standards.
Summary
BowTieXP 12 is the industry benchmark for bowtie risk assessment software. Its combination of user-friendly diagram creation, quantitative risk capability (Complete edition), regulatory recognition across major industrial sectors, and integration into the broader BowTieXP Suite platform makes it the default tool for HSE professionals managing major hazard risk.
For organizations in oil and gas, aviation, chemical processing, or mining that need to build, maintain, and communicate major hazard bowties for regulatory compliance and internal safety management, BowTieXP remains the most credible and widely supported choice available.
For licensing assistance or technical support with BowTieXP, contact our team via Telegram: t.me/DoCrackMe
Related articles: BowTieXP vs BowTie Pro — Which Is Right for Your Industry? | How to Build a Process Safety Bowtie Diagram — Step by Step | BowTieXP LOPA Tutorial — Calculating Top Event Frequency
