Skip to content
The safety operating system

Every worker accounted for.
Every hazard on the record.

Muster is the safety operating system high-risk frontlines run on. Briefings, permits, observations, audits — one record, one truth, one place to come on shift.

Free
For 1 site, 5 users. No credit card.
Bundled
Every module, every seat. £20.
Audit-ready
SOC 2 · ISO 27001 · GDPR.
The record · live
Muster Roll · streaming
07:42:11
BRIEFING SIGNED
Kittiwake A · North Sea
28 workers · supervisor Vasquez · weather amber
07:51:03
PERMIT ISSUED
Forties Bravo · Galley
Hot work · until 18:00 · 2 isolations verified
08:03:47
HAZARD REPORTED
Cromarty Yard · Deck 2
Frayed sling · 6s voice + photo · Mark
08:14:22
INDUCTION COMPLETE
Glas Dowr FPSO
Confined space · J. Reilly · renews in 14 days
08:22:09
CHECK-IN · SOLO
Tower 4 · West Yard
Auto · green · battery 78% · GPS locked
08:30:18
PERMIT CLOSED
Kittiwake A · Lift bay
Lift plan signed · audit written · Roll #4719-c
08:48:55
VISITOR LOGGED
Cromarty · Gate B
DNV inspector · escort A. Lin · 4h window
09:01:30
OBSERVATION
Forties Bravo · Zone C
Near-miss · scaffold tag missing · closed 11m
09:14:07
ESCALATION
Glas Dowr · Module 4
Lone worker red · supervisor paged · ack 42s
09:22:44
PERMIT EXTENDED
Kittiwake A · Galley
Hot work +90m · gas test re-run · pass
09:38:21
AUDIT QUERY
HSE · Roll
Q1 RIDDOR · 0 reportable · 312 days clean
09:51:12
EVAC DRILL · END
Glas Dowr FPSO
Headcount 142/142 · 3m 18s · within standard
07:42:11
BRIEFING SIGNED
Kittiwake A · North Sea
28 workers · supervisor Vasquez · weather amber
07:51:03
PERMIT ISSUED
Forties Bravo · Galley
Hot work · until 18:00 · 2 isolations verified
08:03:47
HAZARD REPORTED
Cromarty Yard · Deck 2
Frayed sling · 6s voice + photo · Mark
08:14:22
INDUCTION COMPLETE
Glas Dowr FPSO
Confined space · J. Reilly · renews in 14 days
08:22:09
CHECK-IN · SOLO
Tower 4 · West Yard
Auto · green · battery 78% · GPS locked
08:30:18
PERMIT CLOSED
Kittiwake A · Lift bay
Lift plan signed · audit written · Roll #4719-c
08:48:55
VISITOR LOGGED
Cromarty · Gate B
DNV inspector · escort A. Lin · 4h window
09:01:30
OBSERVATION
Forties Bravo · Zone C
Near-miss · scaffold tag missing · closed 11m
09:14:07
ESCALATION
Glas Dowr · Module 4
Lone worker red · supervisor paged · ack 42s
09:22:44
PERMIT EXTENDED
Kittiwake A · Galley
Hot work +90m · gas test re-run · pass
09:38:21
AUDIT QUERY
HSE · Roll
Q1 RIDDOR · 0 reportable · 312 days clean
09:51:12
EVAC DRILL · END
Glas Dowr FPSO
Headcount 142/142 · 3m 18s · within standard
67 ops · 1,284 sites · today// the record holds
// 67 operators
run on Muster
NORTHLINK
ENERGY
ATLAS MARINE
MARINE
SUBSEA / 7
SUBSEA
KEPLER MRO
AVIATION
FORTH WIND
OFFSHORE
BRENT DECOM
DECOM
Seven surfaces · one record

Briefings. Permits. Observations. Audit. One bundled platform — not a stack of modules.

Where competitors charge per module, Muster charges per seat. Every operator on the platform gets the whole surface, on day one, on the same record.

Hangar 2 · KMRO · 06:45● cleared
You're cleared
to work.
14
on the floor
6
panels open
VFR
weather
// 01Muster Open

Briefings

Open the app. You're cleared to work.

Fitness-for-work, today's hazards, PPE, the crew. Signed before the first boot hits the deck. Acknowledged on the record.

3 PERMITS LIVEForties B
Personnel transfer
Supply vessel · D-deck
PTW-2718
Confined space
Tank 4
PTW-2719
Lift plan
Lift bay
PTW-2720
// 02Permit-to-work

Permits

Hot work, confined space, lift plans — live.

Issue, isolate, verify. Permit holders and isolations on one page. Auto-freeze on evac. Every signature is one line in Muster Roll.

● HAZARD · 6s VOICE
“Hydraulic seep on the dive frame.
Lock it out before the next splash.”
0:06 / 0:06transcribed · structured · sent
// 03Muster Mark

Observations

Six-second hazard report. Voice + photo.

Worker spots it, talks for six seconds. Whisper transcribes, structures, geotags, attaches the photo. Supervisor has it before the phone is back in the pocket.

Muster Roll · streaming+ 4,719 today
08:30:18PERMIT CLOSEDLift plan · Kittiwake A
08:48:55VISITOR LOGGEDEASA auditor · Hangar 2
09:01:30OBSERVATIONUmbilical chafe · DSV Bressay
09:14:07ESCALATIONLone worker red · MV Atlas Surge
09:22:44PERMIT EXTHot work +90m · Kittiwake
// 04Muster Roll

Audit

The audit trail IS the database.

Every action — closing a hazard, signing a permit, acknowledging a briefing — writes one line into Roll. Immutable, queryable, by default. No export step.

What runs underneath

The reflexes you can't bolt on after. Built into the substrate, on by default.

Risk register, lone-worker, evacuation reflex, offline-first. Where every other tool sells these as add-ons or premium tiers, Muster ships them as the runtime.

Hot work · GalleyMED
Lift over walkwayHIGH
Frayed sling · D2HIGH
Confined space · Tk4MED
Gas test pass · M4OK
// 05Risk register

Hazards, controls, on the live ledger.

Every hazard tied to its control. Every control tied to the worker who signed for it. Mapped to your matrix — not a generic taxonomy.

Tower 4 · 09:22● GREEN
// 06Muster Solo

Lone-worker check-ins with SOS.

Auto check-ins on a schedule the worker sets. Missed beat, supervisor paged in seconds. Manual SOS opens a channel and writes a line.

FULL MUSTER · 02:14
142 / 142
permits frozenheadcount live
// 07Full Muster

One tap. Permits freeze. Headcount live.

Evacuation reflex: alert fans out, all permits suspend, every worker pings their muster point. Headcount on the floor screen as it happens.

NO SIGNAL04:18
Briefing · Tank 4
Hazard · Sling, D2
Permit close · Lift
3 pending · auto-sync queued
// 08Offline-first

Works in valleys, rigs, tunnels.

Sign briefings, raise hazards, run permits with no signal. Local-first storage, conflict-aware sync the moment the bars come back.

How it works

Sell to managers. Live on workers. One record underneath.

Three sides of the same shift. Same record on every side.

01
WORKER

Open the app.

Crew checked in. PPE confirmed. Today's hazards. Permits issued. Tap to mark. Six taps end-to-end, six seconds to report. Gloves on.

02
SUPERVISOR

See the floor.

Every worker on site, where they are. Open hazards by zone. Lone workers green or red. Contractors on the gate. Permits expiring. The manager doesn't ask — they see.

03
AUDITOR

Query the record.

Every action — closing a hazard, signing a permit — writes one line into Muster Roll. The audit trail IS the database. Not an export. Not a report. The same record.

The audit trail IS the database

Every action.
Every site.
One line of record.

Briefings, permits, observations, evacuation drills, gate logs — each writes one immutable line into Muster Roll. Searchable, queryable, replayable. When the regulator asks, you don't run a report. You hand them the record.

  • Immutable by default — Append-only. No quiet edits.
  • Same record, same field — Worker app, supervisor floor, regulator query — one substrate.
  • Replayable forever — Roll back the day of any incident, line by line.
Muster Open
briefings + visitors
Muster Permit
permit-to-work
Muster Mark
hazards + observations
Muster Solo
lone worker + evac
// muster rollappend-only
+ 4,719 today
r/14724BRIEFINGKittiwake A · 28 signed
r/14723HOT WORKGalley · until 18:00
r/14722HAZARDFrayed sling · Deck 2
r/14721CHECK-INTower 4 · green
r/14720CLOSEDLift plan · audited
r/14719NEAR-MISSScaffold tag · Zone C
roll >SELECT site, kind FROM record WHERE date = today();_
Industries on Muster

High-risk frontlines. Where paper doesn't cut it and inboxes lose people.

Muster ships sector-specific risk matrices, competency frameworks and audit packs out of the box. Tuned for the regulator that shows up at your gate.

// 01Onshore, offshore, FPSO.

Energy

Permit-to-work, isolation management, helideck, gas testing, lone-worker. Built for the Forties Bravos and Glas Dowrs of the world.

28
operators
612
sites
0
LTI · Q1
// 02Crew, port, salvage.

Marine

STCW competencies, ISM audit trails, port-state inspections, voyage briefings. The record sails with the vessel.

14
operators
281
sites
1.4M
sea miles
// 03ROV, dive, cable lay.

Subsea

Saturation diving log, ROV ops, surface support, IMCA D-024 sign-off. Every dive, every line, in the record.

11
operators
89
vessels
100%
dive log
// 04MRO, ramp, ground ops.

Aviation

Hangar permits, FOD walks, tow-team briefings, Part-145 audit prep. Ramp-side, gloves on, before the next pushback.

9
operators
142
stands
EASA
ready
Pricing · honest, public

Bundled. Per seat. No module ladder.

Where competitors charge per module, we charge per seat. Every operator on Pro gets every surface on day one.

Free

For 1 site
£0/ forever

The trial nobody can refuse.

  • 1 site · 5 users
  • Worker app + supervisor floor
  • Briefings, observations, audit log
  • Email support

Pro

Per seat · everything in
£20/ seat · month

Every module. Every API. Every operator.

  • Unlimited sites & users
  • Permits, lone-worker, inductions, evac
  • Voice AI, public API, contractor graph
  • Priority support · 4h response

Enterprise

From
£35/ seat · month

For operators with regulators on speed-dial.

  • SSO · SCIM · custom risk matrices
  • Dedicated CS · quarterly review
  • Custom data residency · UK / EU / US
  • 24/7 incident response · 1h SLA
All tiers include SOC 2 Type II, ISO 27001, GDPR & UK DPA. Worker app is free for workers, always — supervisors pay per seat.
// Coming on shift

The safety platform workers actually open.

Manager-bought. Worker-loved. Audit-ready by default. Free for your first site — no credit card, gloves on in five minutes.