Requesting SBOMs from Third Parties (Vendors)

Manifest offers a native capability for requesting SBOMs from third parties, such as your organizations' vendors or suppliers. To request SBOMs from third parties:

1. Navigate to the Uploads page.
2. Click the blue “Request SBOMs” button in the top right corner of the Uploads page.
3. Type in the recipient’s email address(es) and any custom messaging that you would like to include.
4. Click “Send Emails” button to send a secure email with your request.

Your vendors and suppliers will receive an email from Manifest with a secure one-time link to a special secure portal where they can upload their SBOM directly to your Manifest app. When they arrive at the portal, they will need to re-enter the email address that received the invitation. The vendor will then get access to a simple portal where they can drag and drop their SBOMs. Once they have finished, the SBOMs they uploaded will automatically be appear as third-party assets.