Tool
SBOM request pack
Ask a vendor for an ingredients list, then mark what came back.
The email asks for the 2026 CISA minimum elements, including for SaaS and AI software, not only code the buyer compiles. The field list below is the ask. Tick Received when a field comes back. Missing rows stay on the page.
What came back
| Field | Asked | Received | Missing |
|---|
Tools. Also: Renewal scorecard, Agent access, Vendor claim, Token cost.