Vendor alerts
Upload your vendor list. We’ll watch it for you.
Paste or upload a CSV of suppliers, with their websites if you have them. Matching is strict on purpose: the same company name or the same domain, so “Apple” never matches “Apple Valley Clinic”.
- Passwordless, private access. One-time sign-in links, your list encrypted at rest, never shared.
- Escalation, not spam. One email per company per level: claimed, then reported, then confirmed.
- Loop in your team. Up to three colleagues on every alert.
Northwind Payroll Services
Confirmed: regulator filing
Contoso Logistics GmbH
Unverified ransomware claim reported by a ransomware group
Example alert with fictional companies.
Get started with vendor alerts
From vendor list to first alert in four steps.
- Request a demoVendor alerts are part of Pro (from $299 a month, billed annually; see the plans page). Request a demo and we walk you through it with your own vendor list. For invoicing or a purchase order, email contact@cyberzenpulse.com from your work address. We set up your account and tell you when it’s ready.
- Sign in, no passwordGo to the sign-in page, enter your work email, and click the one-time link we send. It works once, for 15 minutes.
- Add your vendorsPaste your list or upload a CSV file, one vendor per line, in the format below. Saving replaces the whole list.
- Get notifiedYou and up to 3 colleagues get an email when a vendor appears in the breach data. Matches from the last 12 months also show on your page.
What your vendor list looks like
Upload a .csv file, not .xlsx. Make your list in Excel or Google Sheets, then save it as CSV and upload that file.
- 1Header row is optional. If present, it’s skipped automatically.
- 2Column B is the website: just the domain;
https://www.and paths are cleaned up for you. - 3Legal endings are fine: GmbH, Inc, LLC, Ltd are ignored when matching.
- 4Commas in a name: Excel adds the quotes when it saves; if you type the list by hand, add them yourself.
- 5No website? Leave it empty; we match on the name only.
- →Then upload the .csv on the sign-in page, or copy columns A and B and paste them.
How to format your vendor list
- One vendor per line: company name, then its website. The website is optional, but it makes matching more reliable.
- Separators: comma, semicolon or tab. A header row such as
Vendor name, Websiteis skipped automatically. - Commas in a name: wrap the name in double quotes, e.g.
"Contoso Cloud, Inc." - Legal endings don’t matter: Inc, LLC, Ltd, GmbH, S.p.A. are ignored, so “Acme Payroll Inc.” matches “Acme Payroll”.
- Websites:
https://www.acme.com/aboutbecomesacme.com, and subdomains count. A line with just a domain works too. - File type: .csv (or .txt), not .xlsx. In Excel use File → Save As → CSV UTF-8; in Google Sheets, File → Download → .csv. Or copy the two columns and paste them.
- Limits: 150 vendors (Pro), and 250 KB per file.
Vendor name, Website Acme Payroll, acmepayroll.com Northwind Logistics GmbH, northwind.de "Contoso Cloud, Inc.", contoso.com Fabrikam SoftwareDownload the CSV template
How notifications work
- Checked as new data arrives. Your list is compared with every ransomware claim, regulator filing, data-leak listing and news report we collect; each source is checked every 5 to 60 minutes.
- Same company only. A match needs the same name (legal endings ignored), a known alias, or the same website. Similar names never match.
- Three levels:
Unverified ransomware claim only a ransomware group's leak site says so; not confirmed Public report covered by the news, or leaked data verified by Have I Been Pwned; not confirmed by the company Company confirmed regulator filing (e.g. SEC 8-K, HHS OCR), the company's own notice, or its own public statement - One email per company per level. When a vendor first appears, and again only if it moves up. No repeats.
- Only new activity is emailed: the last 30 days, from about a week before you added the vendor.
- What’s in the email: the vendor, how it was listed, the level, the ransomware group, first-seen date and links to the sources.
Treat an unverified ransomware claim as a reason to ask your vendor, not as proof, and never act against a vendor on a claim alone. We only see what is reported publicly, so no alert does not mean a vendor is safe.
Already using vendor alerts? Every alert email has a one-click “Was this useful?” link, and we read every feedback email.