Vendor alerts

Upload your vendor list. We’ll watch it for you.

Paste or upload a CSV of suppliers, with their websites if you have them. Matching is strict on purpose: the same company name or the same domain, so “Apple” never matches “Apple Valley Clinic”.

  • Passwordless, private access. One-time sign-in links, your list encrypted at rest, never shared.
  • Escalation, not spam. One email per company per level: claimed, then reported, then confirmed.
  • Loop in your team. Up to three colleagues on every alert.
From: Cyber Pulse alertsSubject: Vendor alert: 2 of your vendors
Northwind Payroll Services
Confirmed: regulator filing
Group: Akira · first seen 3 days ago · 2 sources
Contoso Logistics GmbH
Unverified ransomware claim reported by a ransomware group
Contact the vendor before acting · first seen today

Example alert with fictional companies.

Get started with vendor alerts

From vendor list to first alert in four steps.

  1. Request a demoVendor alerts are part of Pro (from $299 a month, billed annually; see the plans page). Request a demo and we walk you through it with your own vendor list. For invoicing or a purchase order, email contact@cyberzenpulse.com from your work address. We set up your account and tell you when it’s ready.
  2. Sign in, no passwordGo to the sign-in page, enter your work email, and click the one-time link we send. It works once, for 15 minutes.
  3. Add your vendorsPaste your list or upload a CSV file, one vendor per line, in the format below. Saving replaces the whole list.
  4. Get notifiedYou and up to 3 colleagues get an email when a vendor appears in the breach data. Matches from the last 12 months also show on your page.

What your vendor list looks like

Upload a .csv file, not .xlsx. Make your list in Excel or Google Sheets, then save it as CSV and upload that file.

  1. 1Header row is optional. If present, it’s skipped automatically.
  2. 2Column B is the website: just the domain; https://www. and paths are cleaned up for you.
  3. 3Legal endings are fine: GmbH, Inc, LLC, Ltd are ignored when matching.
  4. 4Commas in a name: Excel adds the quotes when it saves; if you type the list by hand, add them yourself.
  5. 5No website? Leave it empty; we match on the name only.
  6. →Then upload the .csv on the sign-in page, or copy columns A and B and paste them.

How to format your vendor list

  • One vendor per line: company name, then its website. The website is optional, but it makes matching more reliable.
  • Separators: comma, semicolon or tab. A header row such as Vendor name, Website is skipped automatically.
  • Commas in a name: wrap the name in double quotes, e.g. "Contoso Cloud, Inc."
  • Legal endings don’t matter: Inc, LLC, Ltd, GmbH, S.p.A. are ignored, so “Acme Payroll Inc.” matches “Acme Payroll”.
  • Websites: https://www.acme.com/about becomes acme.com, and subdomains count. A line with just a domain works too.
  • File type: .csv (or .txt), not .xlsx. In Excel use File → Save As → CSV UTF-8; in Google Sheets, File → Download → .csv. Or copy the two columns and paste them.
  • Limits: 150 vendors (Pro), and 250 KB per file.
Vendor name, Website
Acme Payroll, acmepayroll.com
Northwind Logistics GmbH, northwind.de
"Contoso Cloud, Inc.", contoso.com
Fabrikam Software
Download the CSV template

How notifications work

  • Checked as new data arrives. Your list is compared with every ransomware claim, regulator filing, data-leak listing and news report we collect; each source is checked every 5 to 60 minutes.
  • Same company only. A match needs the same name (legal endings ignored), a known alias, or the same website. Similar names never match.
  • Three levels:
    Unverified ransomware claim only a ransomware group's leak site says so; not confirmed Public report covered by the news, or leaked data verified by Have I Been Pwned; not confirmed by the company Company confirmed regulator filing (e.g. SEC 8-K, HHS OCR), the company's own notice, or its own public statement
  • One email per company per level. When a vendor first appears, and again only if it moves up. No repeats.
  • Only new activity is emailed: the last 30 days, from about a week before you added the vendor.
  • What’s in the email: the vendor, how it was listed, the level, the ransomware group, first-seen date and links to the sources.

Treat an unverified ransomware claim as a reason to ask your vendor, not as proof, and never act against a vendor on a claim alone. We only see what is reported publicly, so no alert does not mean a vendor is safe.

Already using vendor alerts? Every alert email has a one-click “Was this useful?” link, and we read every feedback email.