A buyer just asked for WCAG on the security questionnaire.
You sell into health systems, and the vendor review wants an accessibility answer you cannot give from memory — plus the privacy and security questions on the same form.
You get: every page of your public surface, the accessibility defects with the element that fails, the headers and third-party requests, and a plain statement of what an automated scan cannot determine.