psmWatch, Risk Software
A product ofWatchmen Industrial Safety Experts
Process Safety Management platform

Process safety data that drives action.

psmWatchTM centres your operation on a living operational risk register. Bring data in from any study or source, then drive critical element management, recommendation tracking and defensible ALARP justification from one secure source of truth. Your PSM data works for you instead of collecting dust on a shelf.

Oil & GasPetrochemicalMidstreamPowerMiningIntegrates with IBM Maximo
psmwatch.watchmenise.com
psmWatch risk dashboard with KPIs and class distribution chart
The problem

Studies should not stop at the report.

Operations invest heavily in hazard and risk studies. Then the findings sit in a PDF that nobody opens until the next revalidation, the recommendations drift through spreadsheets, and the barriers the study relied on are bypassed with no one checking the plan. psmWatchTM keeps that data alive and connected.

Today

The HAZOP is a 400-page PDF.

Scenarios, safeguards and recommendations are locked in a document. Nobody can ask the study a question, and the next revalidation starts from scratch.

With psmWatch

The study becomes a living register.

Import the worksheet from any PHA tool. Scenarios that share a consequence become one risk with many causes, each cause keeping its provenance. The study is now data you can filter, chart and act on.

Today

Risk in the ALARP band is accepted without analysis.

The matrix says this band should drive action, but the analysis is hard, so the risk is treated as green or passed to management to sign off.

With psmWatch

Every scenario carries its own ALARP demonstration.

Screening, cost benefit analysis, decision and justification take minutes, are stored against the scenario, locked to the matrix and fatality value in force at the time, and print as a report on demand.

Today

Recommendations have no owner and no priority.

Hundreds of actions across studies and facilities, ranked by whoever shouts loudest, with overdue items discovered at the audit.

With psmWatch

One action log with computed priority.

Every recommendation has an owner, a due date, an approver and closure evidence. Priority is scored from the risk it treats, so the order of work follows the risk.

Today

Bypasses are decided under pressure.

A trip is defeated at 2 a.m. with no pre-agreed limit, no compensating measures on record and no link back to the scenario it protects.

With psmWatch

The bypass plan exists before you need it.

Each critical element has a pre-approved bypass plan with a maximum duration and compensating measures. Live bypasses are checked against it, routed for approval, and expired-not-removed events are flagged.

How it connects

Everything flows from your risk register.

Data from any study or source flows into one living register. Recommendations, critical elements and ALARP justification build on it, and analytics and risk-informed decisions flow back out to the people who need them.

Data in
HAZOP / What-Ifany PHA tool, CSV or Excel
LOPA and bowtiescenarios and barriers
Other sourcesincidents, inspections, audits, MOC
IBM MaximoCMMS assets, PMs, work orders
The core
Operational Risk Registerone living record of risk
Built on it
Recommendation Managementown, prioritise, close out
Critical Element Managementmaintain, test, bypass plan
ALARP Managementdefensible, audit-ready
Bowtiespreview today
PHA and LOPA toolsplanned, next modules
Insight out
Analytics and dashboardsfacility and enterprise
Risk-informed decisionsinsight in front of the call
Watchmen AIpreview today, next upgrade
Module 01Available now

Operational Risk Register

The heart of psmWatchTM. A living, enterprise-wide record of operational risk across all your facilities, ranked against your own matrix, that every other module builds on.

What it solves: the study that sits on the shelf, the register that lives in six spreadsheets, and the ranking nobody can reproduce a year later.
  • The single source of truth. Every risk, safeguard and action lives here. Severity is set once; likelihood steps down from inherent to current to residual.
  • PHA import in five steps. Upload, map columns, attach recommendations, group causes by consequence, preview and commit as one traceable batch.
  • Every facility in one place. Manage the risks of all your facilities in one register, compare facilities side by side on the portfolio map, and roll them up to an enterprise view. Heat map, Pareto and trend at either level.
  • Bowtie analysis. Threats, barriers and consequences for any scenario, with barriers backed by critical elements showing their live state. Preview
  • Change-aware. A management of change tie-in so the register reflects the plant as built. Roadmap
Operational Risk Register with sortable columns and filters
Operational Risk Register. Forty risks across eight facilities, filtered and sorted live.
Module 02Available now

Recommendation Management

Turn study recommendations into tracked, owned, prioritised actions across every facility.

What it solves: actions that drift between spreadsheets and inboxes, overdue items discovered at the audit, and priority set by whoever argues hardest.
  • One action tracker. Every recommendation, across every study and facility, in one place with states, owners, dates, estimated cost and closure evidence.
  • Prioritised automatically. A customisable, automated prioritisation engine ranks every action from the risk it treats, so the order of work follows the risk. Manual overrides stay visible.
  • Feeds ALARP. Closed and rejected actions carry into the scenario's ALARP justification automatically.
Recommendations dashboard with KPIs and status charts
Recommendations Dashboard. Open, overdue, unowned and critical counts with status and priority breakdowns.
Module 03Available now

Critical Element Management

A single register for the equipment your operation depends on, safety, environmental, asset and mission-critical, with the maintenance, testing and bypass workflows to keep it dependable.

What it solves: barriers the HAZOP credited that nobody is proof-testing, bypasses improvised under pressure, and no way to see which safeguards are actually in service today.
  • Maintenance and testing management. Recurring assurance plans with last done, next due and overdue status derived from completion records, findings and test results. Pull PM schedules and work orders straight from Maximo.
  • Bypass planning, before you need it. Build the contingency plan for defeating an element in advance, with maximum duration, authorisation level, risk during bypass and compensating measures.
  • Approval workflow in your hands. Route bypasses, bypass plans and recommendations to named approvers with the plan and mitigations attached. Every decision and reminder is logged.
  • Barrier health, computed live. Each element is healthy, degraded or bypassed based on maintenance and test records from your maintenance management system (Maximo) and on live bypasses run through the psmWatch Bypass Management process.
Critical Elements dashboard with criticality and maintenance status charts
CE Dashboard. Overdue maintenance, due soon, active bypasses, expired not removed, bypassed with PM overdue.
Module 04Available now

ALARP Management

Demonstrate, and defend, that risk has been reduced As Low As Reasonably Practicable, with the evidence attached.

What it solves: risks that land in the ALARP or conditionally tolerable band of the matrix are meant to drive action, yet the analysis rarely happens. They get accepted as if they were green, or passed up to management to sign off, because ALARP analysis is hard. psmWatchTM makes it easy.
  • Structured, repeatable assessment. Flag a risk as requiring ALARP and the linked scenario is created. Screening by cost and benefit bucket returns Accept, Evaluate or Reject.
  • Gross disproportion test. Plant life, discount rate and disproportion factor give whole-life cost against present-value benefit by receptor, with a RAGAGEP gate before any rejection on cost.
  • Value of Preventing a Fatality presets by jurisdiction. Each analysis stays locked to the figure in force when it was signed.
  • Audit-ready on demand. The ALARP Evaluation Report prints executive summary, methodology, register, CBAs, recommendations and action sheets in one pass, kept current as risk changes.
ALARP scenario detail with screening, decision and justification
ALARP Scenario. Cross-reference, screening, decision and justification, linked critical elements.
Across the platform

Built to be read in the control room and printed for the audit.

Excel, CSV and print to PDF on every register and dashboard. Light and dark themes. A layout that works on a phone at the unit.

psmWatch risk dashboard on a phone
Risk Dashboard at phone width.
Next planned upgradePreview

Built-in AI that turns data into insight.

Watchmen AI reads across your connected PSM data to surface patterns, flag where risk is concentrating and point you to what matters most. Ask which high risks have no recommendation, what is overdue and for whom, which barriers are bypassed, or what is waiting for approval. It drafts reminders and recommendations for you to review and never changes a record on its own. The richer your data, the more useful it gets.

Shown in preview form today. Scope and availability will be confirmed with pilot clients.

What is overdue?
Reading recommendations log
Grouping by owner
5 open recommendations are past their due date. Two belong to the Operations Lead.
  • RA-006 Restore VRU to service and close workaround, Operations Lead, 51 days overdue
  • RA-014 Install fall-arrest cages on remaining rail loading spots, Terminal Manager, 26 days overdue
  • RA-001 Install independent high-level trip on Tank 201, Operations Lead, 20 days overdue
  • and two more
Open overdue actionsDraft a reminderGroup by facility
Watchmen AI chat with the Risk profile analytics board open beside it: KPIs, class distribution, heat map, risks by facility and highest open risks
Ask for risk analytics and Watchmen AI opens a board beside the chat: KPIs, class distribution by stage, the live heat map, exposure by facility and the highest open risks.
Roadmap

Start where the value is highest today. Grow into the full lifecycle.

Four modules are in production now. The next set brings the studies themselves inside psmWatchTM.

Next modules

PHA Tool

Author and manage HAZOP and What-If studies in one place, kept evergreen and live-connected to the register and the critical elements list. Until then, bring studies in from any other tool.

  • HAZOP and What-If in one worksheet
  • Living studies that stay current between revalidations
  • Recommendations tied to PHA scenarios, so revalidation starts from the data
Next modules

LOPA Tool

Layer of protection analysis in its own worksheet, linked scenario by scenario to the HAZOP and to the register.

  • Protection layers credited against the critical elements that provide them
  • Full SIF traceability from the scenario to the element
  • Target risk reduction checked against your matrix
Preview

Watchmen AI

Analytics and insight across the whole portfolio, surfacing the highest-impact risks and actions so effort goes to the right place first.

  • Reads every connected study, register and action in one place
  • Drafts reminders and recommendations for human review
  • Never creates, edits or closes a record on its own
Roadmap

Live bypass detection

Pull control system data to detect when a critical element is bypassed, and check it against the approvals in Bypass Management.

  • Unauthorised bypasses flagged as they happen
  • Stale bypasses that outlived their approval called out
  • Barrier health adjusted automatically from the live state
Roadmap

SIF component breakdown

Decompose a safety instrumented function into its sensor, logic solver and final element, each tracked as its own critical element.

  • Proof tests and bypasses recorded per component
  • Loop health rolled up from the weakest component
  • Traceability from the LOPA scenario down to the device
Across the whole platform

Built to be trusted with your safety data.

A multi-tenant service where each client has a physically separate database. Hosted on Microsoft Azure with point-in-time restore, monitoring and alerting.

Secure by design

Password plus an emailed one-time code on every sign in, or single sign-on through your identity provider. Rate limits, token revocation, timing-safe login, strict content security headers. No client data cached in the browser.

Flexible data residency

You choose where your data is housed. Production runs in Canada Central today, with seven-day point-in-time restore. Other jurisdictions are provisioned on request.

One database per client

Your risks, scenarios and records live in a dedicated PostgreSQL database. No shared tables and no cross-tenant queries, by construction.

Role-based access

Viewer, reviewer, editor, admin and owner, enforced by the server rather than hidden by the browser. Clear indication of who can change what.

Full traceability

Structured IDs link every scenario, safeguard and action back to its origin. Each change stores a before and after snapshot with who and when. Admin and platform actions land in an activity log.

Import and interoperate

PHA worksheets in from any tool. IBM Maximo for assets, PM schedules and work orders, read-only by default. Excel, CSV, Word and PDF out of every page.

csv / xlsx inMaximoxlsx / docx / pdf out

See psmWatchTM on your process.

Book a walkthrough and we will bring a sample of your risk data in, then show how it flows through to managed critical elements, tracked actions, ALARP justification and the analytics that drive decisions. Pilots start with a single facility and grow from there.

psmWatch, Risk Software Watchmen Industrial Safety Experts
Learn more: Dave Summers, dsummer@watchmenise.com
Process Safety Management Platform. Copyright 2026 Watchmen Industrial Safety Experts. Screens show demonstration data.