Evidence Pack for IT firms and MSPs
Every finding dated, with its source.
£625one-off
See the Evidence PackData Intelligence
For IT support firms, MSPs, and phone and VoIP firms. We check the businesses around your office and hand you the hundred you can help most, each with its finding, the record that proves it, and its date.
26 UK city reports published
1A haulage firm, 1.5 miles away. No DMARC policy published. See its entry
We have not read your area yet. A first look reads the public DNS records of up to 50 office businesses near you, in about a minute.
Each business read from what it publishes about itself, and every finding kept with the place we read it and the day.
Every finding dated, with its source.
£625one-off
See the Evidence PackThe same Pack, at the same price.
£625one-off
See the Pack for phone firmsThe companies that need you, researched.
from£995one-off
See the Target ListOne for each trade, built the same way and sold at the same price: at least 100 businesses near your office that pass every check, within 72 hours of payment.
For IT support firms and MSPs
At least 100 businesses near your office, with the fix for each one.
£625one-off
See the Evidence PackFor phone and VoIP firms
The businesses near your office to ring before 31 January 2027.
£625one-off
See the Pack for phone firmsA 30-day head startA business in your pack goes to no other firm for 30 days after your pack is made. The same issue at a business never goes to two firms within 90 days. Areas are never sold.
Invented businesses, shown as example.com, as an IT firm's Pack shows them. Pick one here or on the map.
No DMARC policy published
Also on this sheet: the certificate expires on 9 Nov 2026, and browsers are not told to refuse an unencrypted connection.
Start at p=none, which changes nothing about delivery and starts the reports arriving at a mailbox somebody reads. After 4 to 8 weeks of reports showing every sender passing, move to quarantine.
Every Pack starts from the businesses we have checked in your city and narrows to the area round your office. Every step is checked, and every record is dated.
We read what every office business in a city publishes about its own email and certificates: its public DNS, its TLS handshake, its home page and a few of its own public pages. No port is scanned, and nothing is logged into.
Anyone who has asked not to be contacted comes off, and first emails are written only for limited companies, LLPs and public bodies. The rest within about ten miles of your office are ranked by what you can fix, each finding tied to the record it came from and the day it was read.
The call sheet for every one, and first emails for those you can email, written from the findings. You ring from your own phone and send from your own mailbox, with your name and your address on every message.
The method in full, including how a record is read, kept and re-verified.
Every finding opens to the record it came from, with the date it was read. Every pack ships with a receipt for each record: where it was read, when, and a hash of the exact text it quotes. A finding that fails re-verification is replaced two for one.
At least 100 businesses near your office that pass every check, and everything you need to ring or write to each one. It is yours to keep.
Not every business gets an email. A first email is written only for a limited company, an LLP or a public body with a mailbox of its own; every other business comes with the number it publishes and the line to open the call. How many of each depends on your area, and often most are to ring. Your own order page shows the count before you pay, or says the count is not finished yet.
And a link to your do-not-contact list, kept up to date for every channel. The call sheet says, on every row, where the number came from and what has and has not been checked.
£625 one-off, in pounds. Within 72 hours of payment.
Our word on the Pack. Every finding is dated and was checked in the last 30 days. If one's wrong when you look, we replace it two for one, and if fewer than 100 pass our checks you get your money back in full. How a refund works.
Rather talk first? Ring 0113 490 0521, weekdays 9am to 5pm UK time. At any other time, book a call and we ring you back.
Every city we read gets a free public report: the share of businesses running their own email that publish no enforced DMARC policy, and the dates of the reads. No business is ever named.
| City | No enforced DMARC | Read | Report |
|---|---|---|---|
| Leeds | Read 20 Sep to 29 Oct 2026 | Leeds report | |
| Bradford | Read 20 Sep to 29 Oct 2026 | Bradford report | |
| Wakefield | Read 23 Sep to 27 Oct 2026 | Wakefield report | |
| Manchester | Read 20 Sep to 30 Oct 2026 | Manchester report | |
| Sheffield | Read 23 Sep to 30 Oct 2026 | Sheffield report | |
| York | Read 23 Sep to 25 Oct 2026 | York report | |
| Birmingham | Read 20 Sep to 27 Oct 2026 | Birmingham report | |
| Bristol | Read 20 Sep to 12 Oct 2026 | Bristol report | |
| Reading | Read 20 Sep to 27 Oct 2026 | Reading report | |
| Milton Keynes | Read 20 Sep to 23 Oct 2026 | Milton Keynes report | |
| Westminster | Read 20 Sep to 27 Oct 2026 | Westminster report | |
| Islington | Read 20 Sep to 27 Oct 2026 | Islington report | |
| Hackney | Read 20 Sep to 27 Oct 2026 | Hackney report | |
| Camden | Read 20 Sep to 27 Oct 2026 | Camden report | |
| Tower Hamlets | Read 20 Sep to 26 Oct 2026 | Tower Hamlets report | |
| Barnet | Read 20 Sep to 24 Oct 2026 | Barnet report | |
| Newham | Read 20 Sep to 26 Oct 2026 | Newham report | |
| City of London | Read 20 Sep to 27 Oct 2026 | City of London report | |
| Harrow | Read 20 Sep to 18 Oct 2026 | Harrow report | |
| Hounslow | Read 20 Sep to 14 Oct 2026 | Hounslow report | |
| Redbridge | Read 20 Sep to 26 Oct 2026 | Redbridge report | |
| Croydon | Read 20 Sep to 26 Oct 2026 | Croydon report | |
| Nottingham | Read 20 Sep to 19 Oct 2026 | Nottingham report | |
| Southwark | Read 20 Sep to 21 Oct 2026 | Southwark report | |
| Leicester | Read 20 Sep to 21 Oct 2026 | Leicester report | |
| Hillingdon | Read 20 Sep to 27 Oct 2026 | Hillingdon report |
No enforced DMARC policy means no DMARC record was published, or the record's policy is set to monitor only. Reports are republished when a city is read again. All city reports, or check your own domain, free.
What SPF, DKIM and DMARC each do, and why monitor only protects nothing yet: our plain English guide.
A finding about somebody's email is only worth saying if the way it was found would stand being told. So these are things this service does not do, for anybody, at any price.
A pack is built from what a business publishes: public DNS, a TLS handshake, its home page and a few of its own public pages, every one listed in the method. No port scan, and no request for a file a site keeps private.
No passwords, no portals, nothing installed, and no account that is not our own.
Reports carry counts only. A business is named only to an IT firm near it, on a private page or in a pack made for that firm, never on a public page.
A sole trader is an individual under PECR and needs consent, so first emails go only to limited companies, LLPs and public bodies. A business we cannot tie to a company can still be a number to ring, and its row says it could be a person's own line.
We promise what we control: the checks, the records and the dates. Nobody honest can promise the rest.
Bondstone was founded by Rudi Myers, who is from Leeds. Every figure it publishes is counted from what businesses publish about themselves, and dated. Every finding it hands over opens to the record it came from.
When you order a Pack, a person on our team looks at any Pack the checks hold back, and answers the phone, weekdays 9am to 5pm UK time.
Bondstone Global, ABN 46 950 504 862, Melbourne, Victoria, Australia. UK address: Hollywell House, Hollywell Lane, Leeds LS12 3HP. [email protected]
About BondstoneFor the area round your office, we read what each office business publishes about itself: its public DNS records, the certificate it presents in a TLS handshake, its home page, a few of its own public pages (contact, about, privacy) and its robots.txt. Every request is listed in the method. No port is scanned, no private file is asked for, and nothing is logged into. Every check is dated, and the exact text it came from is kept.
PECR treats a limited company, an LLP or a public body as a corporate subscriber, which can be written to without consent as long as every message says who sent it and gives a valid address to ask for it to stop. A pack's emails go from your own mailbox, signed with your name and your postal address, so a reply reaches you. Sole traders and partnerships are individuals under PECR and need consent, so the first emails go only to businesses tied to a company registration. A business with no registration we could tie to it can still be on the call sheet as a number to ring, and its row says the number could be a sole trader's or a partner's own. Tell us when somebody asks you to stop, and by the next weekday morning, UK time, they are on the do-not-contact list for every channel and out of every later pack. The full position.
Yes, one domain at a time, and the commands are on this page so you can check our work. The pack is the part that takes the time: every office business around you read, first emails written only for limited companies, LLPs and public bodies, a number to ring found for most of them with its source, the rest ranked by what you can fix, and a finding sheet written for every one, with the do-not-contact list applied. Within 72 hours of payment. You spend your week on the phone instead.
We don't know yet, and anyone quoting you a number they haven't measured is guessing. The call sheet comes first because a call is where a conversation starts.
You do, from your own mailbox, with your own name in the From line and your postal address at the foot. Tell us when somebody asks you to stop, and by the next weekday morning, UK time, they are on the do-not-contact list for every channel and out of every later pack. We send nothing to the businesses in your pack.
No, and nobody honest can. We promise the things we control: at least 100 businesses that pass every check, every finding tied to a dated record, a full refund if we fall short of 100, and a two-for-one replacement for any finding that fails re-verification.
Because a finding about somebody's email is theirs first. The city reports carry counts only. A business is named only to an IT firm near it, on a private page or in a pack made for that firm, never on a public page.
Bondstone is run by Bondstone Global, ABN 46 950 504 862, from Melbourne, Australia, and its UK address is Hollywell House, Hollywell Lane, Leeds LS12 3HP. Our team works UK hours, weekdays 9am to 5pm UK time. Write to [email protected] and a person answers.
If we have already read your city and found your firm among its IT firms, you see the counts straight away. If not, your request is recorded and is on Rudi's screen at once, and he writes back to you by hand on a weekday morning, UK time: the same morning, or the next one if you write after midday. Your details are used to count the businesses near you and reply to you, and for nothing else.
Tell us your firm's website. If we have already read your city and found your firm among its IT firms, you see the counts straight away. If not, a person writes back to you by hand on a weekday morning, UK time: the same morning, or the next one if you write after midday.
Ready for the Pack itself? Order the Pack, or see what is in it first.