About SoftWSP
SoftWSP is the firmware and industrial software security brand of Netbase JSC (Netbase Enterprise Solutions and Applications Joint Stock Company, Hanoi, tax code 0105951482), a software company founded in 2012 that has worked with clients in 80 countries. SoftWSP itself is new: today it publishes sourced regulation guides, CVE advisories and free browser tools, and delivers engineer-reviewed firmware, machine and OT reports at fixed launch prices.
SoftWSP exists for one purpose: to make the security of connected products, firmware and industrial software something a manufacturer can prove and keep proving, with AI doing the heavy work and engineers standing behind the result.
The name: SoftWSP — Watch, Secure, Prove. Watch is the SBOM and continuous monitoring, Secure is the scan plus AI-assisted fix, and Prove is the re-scan and the cited report.
SoftWSP is AI-native security for connected products and the plants that run them: device makers, machine builders, OT operators and the enterprises that buy from them. It covers scan, AI-assisted fix, re-scan proof and monitoring, delivered remotely, worldwide, by Netbase JSC.
Our mission
To let any manufacturer of connected devices and machines show, with evidence, that their products are handled responsibly, and to give them the engineering to improve those products, without first building a security department.
Why this field needs a new approach
Connected products now carry software that has to be maintained for years. Regulation has arrived: vulnerability-reporting duties under the EU Cyber Resilience Act apply from September 2026, radio equipment has been subject to the RED delegated act and EN 18031 since August 2025, and the Machinery Regulation applies from January 2027. Most existing tools produce a list of findings and stop. The hard part, making the fix, proving it and watching afterwards, is left to the manufacturer, who often does not hold the source code or the people.
SoftWSP is built around the whole path: analyse, explain, fix what the customer owns, test, re-scan, hand over and monitor.
What SoftWSP delivers
A closed loop for firmware
Scan, AI-assisted fix, re-scan as proof, and continuous monitoring of every version you have shipped.
AI-native reports and tools
Findings written by AI cite their evidence and are reviewed by an engineer before they reach you.
Coverage of emerging risks
AI models and API keys inside firmware, MCP servers and AI-enabled machines, which older checklists do not address.
Remote-first delivery worldwide
Your engineer works with our guide; we work from our side.
Our principles
Evidence first
Every finding points to what produced it: a file, a version, a configuration, a packet. If we cannot show the evidence, we do not report it as a finding.
No "100% secure" claims
We report only what the evidence shows. Our reports describe what is known on the day of analysis and what remains outside the scope.
Coordinated disclosure
If we find a vulnerability in a customer's product, we tell the customer first and do not publish it without agreement. If we find one in a third-party product, we follow coordinated disclosure with the vendor.
The customer keeps the signing keys
Firmware is signed with the customer's keys, under the customer's control. We do not hold production signing keys.
Remote-first, customer-controlled
Anything that touches your devices happens through a lab you set up or a session your engineer approves, and every session is logged.
We stay in our lane
We do not operate production machines or plant networks, and we do not patch the firmware of third-party PLCs, robots or controllers. We tell you where the official fix is.
Plain language
Reports are written so that a plant manager or a product director can act on them, with detail for engineers underneath.
How AI is used
AI speeds up unpacking, matching, report drafting and documentation, and it assists in preparing fixes. AI output is a first draft. An engineer checks the findings, the evidence and the recommendations before you see them. We do not use your files to train public models, and we say so in our privacy notice.
Who we serve
Device makers, brands and importers selling into the EU, UK and US; machine builders; and plants that supply larger manufacturers or face customer and insurer audits. We work in English, and selected pages are also published in German.
Device makers and brands
The firmware lead can tell a buyer or a regulator exactly what ships in the version on sale.
Machine builders and automation OEMs
The engineering head answers a customer’s security questionnaire without opening every cabinet.
Plants and OT operators
The plant manager sees every talking device and every remote-access path, and production never stops.
Product security and PSIRT owners
A report that arrives on a Saturday has an owner, a clock and a draft ready by Monday.
Netbase JSC at a glance
2012
Founded
Netbase JSC, as of ·
Clients in around 80 countries
Reach
Netbase JSC, as of ·
Remote, worldwide
Delivery model
Netbase JSC, as of ·
A brand of Netbase JSC (Netbase Enterprise Solutions and Applications Joint Stock Company)
Parent company
Netbase JSC, as of ·
SoftWSP is a brand of Netbase JSC (Netbase Enterprise Solutions and Applications Joint Stock Company), a Hanoi software company founded in 2012. Netbase JSC has worked with clients in around 80 countries and delivers remotely, worldwide: your engineer prepares the inputs or a local lab, and we do the analysis and engineering from our side. See Contact for how to reach the team behind SoftWSP.
What Netbase JSC's clients say
Reviews of Netbase JSC (and its CMSmart product), shown publicly on netbasejsc.com. They describe Netbase JSC's software work for these clients, not SoftWSP security engagements.
Client reviews of Netbase JSC
Gala Freixa
Co-Founder, Sheedo
Their online editor plugin has really intuitive interface and its easy to use for our clients. It has lots of different possibilities and whenever we had a problem, CMSmart team was there to help us.
Client reviews of Netbase JSC
Mapi Rodriguez
Spain
Their commitment to meeting my needs promptly is commendable, and their patience in resolving issues sets them apart.
Client reviews of Netbase JSC
Jun
United States
From start to finish, the experience was exceptional, and I am thrilled to share my positive review about their outstanding services.
Client reviews of Netbase JSC
Jacqueline
Hong Kong
Selena was prompt, friendly, and incredibly knowledgeable. She took the time to understand my specific needs and guided me through the plugin's features with clarity and patience.
Client reviews of Netbase JSC
Sam Coldwell
United Kingdom
We've been using the NB designer over the last few years and had nothing but rave reviews from customers who use it. We've also received excellent and timely support from the team at Netbase.
Client reviews of Netbase JSC
Adrien Darmon
France
Ultra easy installation and configuration. And even when I needed specific development in relation to my theme, Andrea from customer service was very competent and fast.
Technologies and data sources
What SoftWSP runs, from upload to report
Firmware and SBOM
Shop-floor network recordings
- Zeek
Reads a passive network recording into a connection log
- ICSNPP
Decodes industrial protocols such as Modbus and S7comm
Vulnerability data
- NVD
CVE records and CVSS scores
- CISA KEV
Vulnerabilities known to be exploited
- FIRST EPSS
Daily likelihood that a vulnerability is exploited
- CISA ICS advisories (CSAF)
Advisories for industrial control systems
AI and platform
- Claude (Anthropic)
Drafts advisory and report text from cited evidence, reviewed by an engineer
- PostgreSQL
Stores the knowledge graph and each organisation's data, isolated per tenant
- S3-compatible object storage
Holds uploaded files and finished reports
- FastAPI
Serves the platform API behind the dashboard and reports
Technologies Netbase JSC works with
The platforms, languages and clouds Netbase JSC builds with.
- WooCommerce
- Shopify
- PrestaShop
- Shopware
- Odoo
- Laravel
- Symfony
- WordPress
- PHP
- React Native
- Python
- Google Cloud
- DigitalOcean
- Cloudflare
Source: Netbase JSC technology registry, attested 2026-09-15.
Names are trademarks of their respective owners, used only to name a technology or data source (nominative use). No endorsement or partnership is implied.
The team behind SoftWSP
SoftWSP is delivered by the engineering team of Netbase JSC, a Hanoi software company founded in 2012 that has worked with clients in around 80 countries. The team analyses firmware images and SBOMs, maps OT/ICS networks from passive captures, and writes the reports; every finding is reviewed by an engineer before it reaches you. Three of its technical leaders are pictured below.
Our technical leadership team
Our office and legal entity
Netbase JSC's registered office is at No. 18, Lane 445/46 Lac Long Quan, Xuan La Ward, Tay Ho District, Hanoi, Vietnam; the operating office is at 91 Nguyen Chi Thanh, Dong Da, Hanoi, Vietnam. Enterprise and tax code 0105951482. See Contact to reach the team behind SoftWSP.
Work with us
We are opening SoftWSP through a Design Partner programme. If you make connected products or machines, or run a plant, we would be glad to look at your first case.
Frequently asked questions
Who is behind SoftWSP?
Netbase JSC (Netbase Enterprise Solutions and Applications Joint Stock Company), a Hanoi software company founded in 2012, tax code 0105951482. Its CEO, Huy Nguyen (David), is the contact for SoftWSP.
Is SoftWSP an established firmware security vendor?
SoftWSP is a brand of an established company, Netbase JSC. Its guides, advisories and free tools are live, its report prices are published, and every finding cites its evidence and is reviewed by an engineer. Small device makers can start with one report and judge the result.
Where does SoftWSP work?
Remotely, worldwide. Your engineer prepares the inputs or a test lab at your site, and we do the analysis and engineering from our side. Netbase JSC has worked with clients in 80 countries.