SoftWSP's Design Partner programme gives the first five device makers or machine builders, and the first five plants, a free first report — a firmware scan, a Machine SBOM report or an OT Snapshot — in exchange for candid, structured feedback on the report. Any further work after that first report is optional and agreed in writing beforehand.
What the programme offers
We are looking for two groups.
The first five device makers or machine builders
Device makers receive a firmware scan report for one firmware version. Machine builders receive a Machine SBOM and Vulnerability Report for one machine line.
The first five plants
Plants receive an OT Snapshot, based on a passive network recording from the shop floor.
Reports follow the SoftWSP loop: scan, AI-assisted fix where you own the code, re-scan as proof, and monitoring. AI-written findings cite their evidence and an engineer reviews them before they reach you.
Each report comes with a short call with one of our engineers, so that you understand the findings and know what to do first.
What we ask in return
Structured feedback
Tell us what was clear, what was not, and what you expected to find. We will ask for a short conversation after you receive the report.
A named contact
One engineer who can answer a few questions by email or call.
Optional: permission to tell the story
If you are happy with the result, we would like to share it as a case study. We do not name you or reveal sensitive details unless you agree in writing.
We do not ask for payment, for a long contract or for a commitment to buy.
What you prepare
Device makers. The firmware image of a version you actually sell. If you also hold the source code, tell us, because it determines whether we can fix problems as well as find them.
Machine builders. The electrical component list for one machine line: manufacturer, model and firmware where known. A spreadsheet is enough.
Plants. One engineer who can set up a mirror port on a shop-floor switch and record 24 to 72 hours of traffic with free software. We send a guide. Nothing is sent into your production network.
How it works
You apply using the form below. We confirm whether you fit the programme and agree a confidentiality agreement. You send us your input through an encrypted channel. We analyse it, and an engineer reviews the output. You receive the report and a walkthrough call. We ask for your feedback. If you want to go further, we discuss options and scope, in writing, before any work starts.
What we do not do
We do not promise that a product or a plant is secure. Our reports show known vulnerabilities and observed behaviour on the day of analysis, and they support your work with regulators, buyers and insurers; they are not a certificate. We do not touch running machines or production networks, and we do not hold or operate your devices.
Apply
Tell us who you are and what you would like us to look at. We read every application and reply personally.
If you prefer to write to us directly, see the contact page.
SoftWSP — Watch. Secure. Prove.
Design Partner programme: your first report, free
The first five device makers or machine builders and the first five plants receive their first SoftWSP report free, in return for feedback on the report.
Frequently asked questions
Is it really free?
Yes. The first report for each Design Partner carries no fee. Any further work is optional and agreed in writing beforehand.
Will you name us publicly?
Only if you say yes. By default, any story we tell leaves out your name and confidential details.
What happens to the files we send?
They are stored encrypted, used only for your job, and deleted after the period we agree. A confidentiality agreement covers both sides.
Are we obliged to buy anything afterwards?
No. There is no obligation to purchase.
What if we are not selected?
Places are limited. If the groups are full, we will tell you and keep your details if you agree, so we can contact you when we open more places.
