Hacked
Their website has been hacked
There is spam hidden on it, on their own address. We show you where it is and the day we saw it. Most hacked websites look fine to the owner, so they may not know.
Supplier Check
Which of the suppliers you pay can be faked?
Upload your list of suppliers, or paste it in. We tell you whose email can be faked, whose website has been hacked, and whose web address has lapsed or passed to someone else.
The suppliers you pay
Read 30 Oct 2026, 09:47 GMT
- A catering supplierHackedSpam hidden on its own website. Seen 30 Oct.
example.co.uk - A print firmChanged handsIts old web address now shows a gambling site.
example.net - A cleaning contractorNot registeredIts web address is not registered to anyone.
example.org - A van hire firmCan be fakedEmail in its name can be faked.
example.com
Before you pay a changed bank account, ring them on a number you already have.
What we check
Four things anyone can see about a supplier, each said plainly, with the place we found it.
Changed hands
Their old web address now belongs to someone else
It shows someone else's site now, a gambling site for example. An email from that address may not be from your supplier at all.
Not registered
Their web address is not registered to anyone
Anyone could buy the address we have for them and receive email sent there. Check it is the right one, and ask them which address they use now.
Can be faked
Email in their name can be faked
Their address doesn't tell inboxes to refuse forgeries (no enforced DMARC), so a fake email from them can look real. DMARC is a short public record that tells inboxes what to do with email that only pretends to come from an address.
Before you pay a changed bank account, ring them on a number you already have.
Not a number from the email asking for the change: one from an invoice you have already paid, or from your own records.
Where your list gives company numbers, we add what Companies House says: a supplier in liquidation or being struck off, or with accounts more than a month overdue. And we tell you which suppliers invoice from a free webmail address, which leaves nothing to check their email against.
How it works
No account, nothing to install, and the check itself is free.
- 01
Upload your list
A CSV from your accounts system or a spreadsheet, or the names pasted in. A name is enough to start. An email address or a website beside it makes the match exact.
- 02
We read each supplier
We find each one's web address and read what anyone can see: its public records, and its website as a visitor sees it. We email you the link, and your results fill in as we read.
- 03
You see who to ring
Every urgent finding by name, with its proof, and three of the suppliers whose email can be faked. A plan shows you every supplier, reads your list again every week, and emails you when anything changes.
We never guess. A supplier found from its name alone is marked as matched by name, with the address beside it, so you can check it is the right business.
Plans
The free check tells you where you stand today.
A plan tells you when it changes.
Small
£49a month
Up to 500 suppliers, read every week, with an email when anything changes.
Business
£149a month
Up to 1,000 suppliers, read every week, with an email when anything changes.
Large
£399a month
Up to 2,500 suppliers, read every week, with an email when anything changes.
The free check
Where you stand today
- Your list read once
- Every urgent finding by name, with its proof
- Three of the suppliers whose email can be faked
- A page for each urgent supplier, to send them
- Your results kept 30 days
Every plan
When it changes
- Your list read again every week
- An email when anything changes, at most one a day
- An all-clear email every four weeks while nothing changes
- Every supplier shown by name, with its proof
- A page for each flagged supplier, to send them
- Your results as a CSV, to open in a spreadsheet
- Your results kept while the plan runs
Your plan is the smallest that holds your whole list: 800 suppliers is Business. Paid monthly by card, and you can cancel any time.
Start with the free checkIf a supplier wants it fixed
The page you send a supplier shows what we found on its own address and how to fix it free. If it would rather we did it, Bondstone Cyber does, at a fixed price the supplier pays.
- Email lock-downEmail in its name made hard to fake, with DMARC set to refuse forgeries.£295one-off
- Domain rescueA lapsed web address registered again in its own name.£95one-off
- Emergency Clean-UpA hacked website cleaned within 48 hours of getting access.£495one-off
Councils and public bodies
Every supplier a public body pays, read every week.
For a council, a health trust, a university or any public body that pays thousands of suppliers.
Supplier Watch is the managed service for public bodies and regulated firms, from £12,000 a year, invoiced.
See Supplier WatchWant to see it first? The free check reads up to 500 of your suppliers. Start with the free check
What we read, and what we never do
Only what anyone can see
A supplier's public DNS records, its website as any visitor sees it, the public registers of web addresses, Companies House and public map listings.
Your suppliers never hear from us
We never contact your suppliers unless you ask us to, and we never use your list for anything else. If you want one to fix what we found, you send them its page yourself, and it never says who sent it.
A free list is kept 30 days
Then the suppliers on it are deleted, and its link says the check has expired. Your results are on a private page, at a link only you are sent.
Questions
What does my list need to have in it?
A supplier's name on each line is enough to start. A column with their email address or website makes the match exact, a company number adds what Companies House says about them, and what you paid each one puts your biggest suppliers first. Any spreadsheet saved as a CSV will do.
Is the free check really free?
Yes. No card and no account. It reads up to 500 suppliers and shows you the counts, every urgent finding by name with its proof, and three of the suppliers whose email can be faked. A plan shows you the rest.
The free check reads 500 suppliers. Why would we pay for a plan?
The free check tells you where you stand today. A plan tells you when it changes. A supplier that is fine today can be hacked next month, or let its web address lapse. A plan reads your list again every week and emails you when anything changes, and it shows you every supplier by name. The free check reads your list once, and we keep the results for 30 days.
Will my suppliers know we checked them?
No. We read only what anyone can see, and we never contact your suppliers unless you ask us to. If you want one to fix what we found, your results give you a page to send them. It shows what we found on their own address and how to put it right, and never says who sent it.
What does “can be faked” mean?
Anyone can send an email that claims to come from any address. A short public record called DMARC lets an address tell inboxes to refuse those forgeries. When a supplier publishes none, or one that refuses nothing, a forged email in their name can land in your inbox looking real.
What should we do about a supplier whose email can be faked?
Nothing about how you work with them needs to change, except one rule: before you pay a changed bank account, ring them on a number you already have. If they want to close the gap, setting up DMARC costs them nothing and the page you send them shows how, or we do it for them for £295.
How do you find each supplier's web address?
From the email address or website on your list first. For a name alone, from Companies House and public map listings, and only when they agree on one address: we never guess an address from a name. A supplier found that way is marked as matched by name, with the address beside it, so you can check it is the right business.
Our list is longer than 500 suppliers.
The free check reads the first 500. The Large plan reads up to 2,500 every week, and the public sector plan up to 10,000. For more than that, write to sales@bondstone.app.
How do we pay for a plan?
By card, from your results page, once you have seen your free check. Plans are paid monthly and you can cancel any time. The public sector plan is set up by email and paid once a year.
Check your suppliers free.
Up to 500 suppliers, with the proof. We email you the link to your results.
Rather talk first? Ring 0113 490 0521, weekdays 9am to 5pm UK time. At any other time, book a call and we ring you back.