Sample reports
SoftWSP publishes one sample report today — a Machine SBOM & Vulnerability Report for a hypothetical packaging machine — built entirely on real public vulnerability data from the NIST National Vulnerability Database and CISA’s Known Exploited Vulnerabilities Catalog, so you can see our format and depth before sending your own firmware, component list or network recording.
Every finding in these reports is matched against public data, not invented for the sample: component and vulnerability matches come from the NIST National Vulnerability Database and CISA's Known Exploited Vulnerabilities Catalog, and component lists follow the same bill-of-materials formats (CycloneDX, SPDX) your own tools likely already export.
Sources
What is in a SoftWSP sample report?
Every sample on this page follows the same shape: a plain-language executive summary, a component inventory (the SBOM) for a hypothetical machine, a list of findings matched against real public sources such as the NIST National Vulnerability Database and the CISA KEV catalog, a priority ranking, and an indicative mapping to the regulations a machine builder is asked about.
The machine itself and its bill of materials are invented for illustration; every advisory, CVE and CVSS score cited against it is real and was read at its own source on the date shown on the report. Sending your own firmware, component list or network recording as a Design Partner gets you a report in the same format, built from your machine instead of a sample one.
Questions about this page?