SoftWSP's L1 prices range from $500 for a security-questionnaire response set to $2,500 for a larger Machine SBOM report, auto-quoted the moment your request matches the listed scope below — no sales call needed. Prices are in USD, exclude tax and bank fees, and invoices are payable within 15 days, matching our terms. Requests outside that scope get an engineer-reviewed custom quote instead.
Fixed-scope reports
$1,500
Scope: 1 firmware version (1 image)
Good fit if: You have one firmware version (one image) ready to scan.
≤ 100 components
$1,500
Scope: 1 machine line, ≤ 100 components
Good fit if: Your machine line has up to 100 components on the list.
101–300 components
$2,500
Scope: 1 machine line, 101–300 components
Good fit if: Your machine line has 101–300 components on the list.
$900
Scope: 1 pcap file, 1 factory
Good fit if: You can record one pcap file from one factory.
$1,000
Scope: 1 project file
Good fit if: You have one PLC/HMI project file to review.
$500
Scope: 1 questionnaire
Good fit if: You have one buyer or insurer questionnaire to answer.
Design Partner programme · Free
The first five device makers or machine builders, and the first five plants, receive their first SoftWSP report free (a firmware scan, a Machine SBOM report or an OT Snapshot) in return for candid, structured feedback on the report. Scope: 1 report (any type above), short agreement included. Any further work is optional and agreed in writing beforehand.
Netbase JSC
Reach
Delivery model
Invoices
SoftWSP findings
Netbase JSC facts as of .
Watchlist
SoftWSP subscriptions for continuous Watchlist monitoring, separate from the one-time reports above.
$0
Need more than the free Watchlist? Ask about Watchlist Pro.
| Row | Firmware Scan Report | Machine SBOM & Vulnerability Report | OT Snapshot | PLC/HMI Project Review | Security Questionnaire Response Set |
|---|---|---|---|---|---|
| You send | The firmware image of the version you sell; no source code needed for the scan | The component list of one machine line: manufacturer, model, firmware where known | One recording of shop-floor traffic from a mirror port | One PLC/HMI project file you export | One buyer or insurer security questionnaire |
| You receive | Summary and detailed report, SBOM, prioritised fix list | Machine SBOM and Vulnerability Report, indicative readiness matrix, walkthrough call | Device inventory, vulnerabilities, remote access view, network separation check | Review for weak passwords, unnecessary services and unencrypted protocols | Draft answers to the questionnaire |
| Fixed scope | 1 firmware version (1 image) | 1 machine line, ≤ 100 components · 1 machine line, 101–300 components | 1 pcap file, 1 factory | 1 project file | 1 questionnaire |
| Monitoring follow-up (custom quote) | Yes | Yes | Yes | No | No |
Requests outside the fixed scope above go to an engineer-reviewed quote, not a fixed price, when any of the following apply:
Enterprise
Tell us how many sites or products are involved, and Netbase JSC scopes one engagement and one quote that covers them all.
Talk to salesOne engagement and one quote that cover every site, plant, product or machine line in scope.
One Netbase JSC engineer team for your whole range of products, machines or plants.
We sign a confidentiality agreement and give you an encrypted upload channel before any file is shared.
Netbase JSC scopes and builds the connection between your AI agents or developer tools and your SoftWSP results as a custom service.
The services behind these reports, delivered remotely by Netbase JSC. Each one is quoted for your scope.
Firmware scan, SBOM and vulnerability report for device makers and brands, with optional remediation, maintenance and monitoring.
A report on the digital components inside one machine line and the published vulnerabilities that affect them.
Record shop-floor traffic from a mirror port, upload it, and receive a device inventory, vulnerabilities and a map of remote access.
An outsourced vulnerability intake and response process for device makers, including support for CRA early-warning and incident reports.
Reviews of Netbase JSC (and its CMSmart product), shown publicly on netbasejsc.com. More on the About page.
Client reviews of Netbase JSC
Co-Founder, Sheedo
Their online editor plugin has really intuitive interface and its easy to use for our clients. It has lots of different possibilities and whenever we had a problem, CMSmart team was there to help us.
Client reviews of Netbase JSC
Spain
Their commitment to meeting my needs promptly is commendable, and their patience in resolving issues sets them apart.
Client reviews of Netbase JSC
United States
From start to finish, the experience was exceptional, and I am thrilled to share my positive review about their outstanding services.
Contracts and invoices are issued by the company, Netbase JSC. You pay by bank transfer to the company account or by PayPal Business. Unless the order says otherwise, invoices are payable within 15 days.
The Free plan costs $0 and includes: Email-verified account; Watchlist up to 10 items (CVE, vendor, product); Email alerts. It is a Watchlist subscription, separate from the one-time reports.
Yes. The first report for each Design Partner carries no fee. Any further work is optional and agreed in writing beforehand.
Netbase JSC (Netbase Enterprise Solutions and Applications Joint Stock Company), the company behind SoftWSP, issues the contract and the invoice. Prices are in USD.
No. Prices exclude taxes, duties and bank charges, which are added where they apply. Each party bears its own bank fees.
Each price covers exactly the scope shown on its card: one firmware version (one image), one machine line with up to 100 or 101–300 components, one pcap file from one factory, one PLC/HMI project file, or one questionnaire. A request inside that scope is auto-quoted at the listed price.
Requests outside the fixed scope, for example more than 300 components in one machine line, several firmware images, several pcap files or factories, or on-site work, get an engineer-reviewed custom quote instead of a fixed price. Tell us what you need and we confirm the scope and the quote in writing before any work starts.
No. The listed prices cover remote work. A request that needs on-site work goes to a custom quote.
No. The cost and responsibility for any re-testing or re-certification lie with the customer.
Questions about this page?
References: prices from the SoftWSP L1 price table (2026-10-21) · Terms · Disclaimer · Design Partner programme · Contact
