Why3 review
An open-source, multi-prover environment for contract-based program verification.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Why3 is an open-source platform for deductive program verification, developed by the Toccata team at Inria with CNRS and Université Paris-Saclay. It is designed for teams and researchers who need to specify programs with contracts, generate verification conditions, and delegate proofs to automated or interactive external theorem provers. Why3 includes the WhyML specification and programming language, supports WhyML as well as micro-C, micro-Python, MLCFG, and Coma inputs, and can extract OCaml programs. Its web, Linux, and Windows availability gives it a broad deployment footprint.
Its strongest differentiator is the prover ecosystem. Why3 integrates with Alt-Ergo, CVC4, CVC5, Z3, Coq, Isabelle/HOL, and PVS, allowing verification workflows to combine automated solvers with interactive theorem proving. Verification-condition generation and proof strategies help organize proof work, while proof-session storage, replay, and reporting support repeatable review. Potential and validated counterexample generation adds diagnostic value for supported provers. The OCaml API also allows Why3 to be used as a software library, extending it beyond its graphical IDE and command-line tools.
The main trade-off is setup complexity: external theorem provers generally need separate installation, so teams should plan for a multi-component environment rather than a single self-contained application. Why3 fits users who value formal contracts, multiple prover back ends, counterexamples, and detailed proof-session management. It is less suitable for teams seeking a narrow, single-prover workflow or AI-assisted verification, since it has no AI features. Choose Why3 when interoperability and deductive depth matter more than minimizing the number of tools involved.
Why3 pros and cons
- Where it wins
- Connects automated and interactive external theorem provers
- Combines graphical IDE, CLI tools, proof replay, and reporting
- Supports counterexamples, multiple input formats, and OCaml extraction
- Where it doesn't
- External theorem provers generally require separate installation
- Requires familiarity with deductive verification and contracts
- Does not include AI features
Why3 fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update