™Model Checkers™
Spin/Premela
SMV
Prism

™Theorem Provers™
Coq
Isabelle/HOL
ACL2
Agda
PVS