Peptide Vendor Reliability Metrics: What to Measure
Written by Jian Wang, Founder & CEO ·

A reliable peptide vendor is one whose claims you can check against data you did not get from the vendor. The metrics that matter are lot-specific purity and identity results from an independent lab, a CoA you can verify at the lab itself, sterility and endotoxin data for anything intended for injection, consistent results across repeat purchases, and a clean regulatory record. Catalog size, slick design and “99%” banners are not metrics. Below are the signals we use, how to read each one, and where each one fails.
TL;DR
- Score vendors on evidence you can verify: a batch-specific CoA, a named independent lab, and both HPLC purity and mass spectrometry identity.
- A CoA is only worth what its authentication is worth. If you can’t confirm it on the issuing lab’s own platform, treat it as marketing.
- Purity and identity say nothing about sterility. For injectable-intended products, look for USP <71> sterility and USP <85> endotoxin results as well.
- One good result is an anecdote. Reliability means the same vendor passes across lots, over time, including after blind purchases.
- Check the regulatory record. The FDA has sent warning letters to online sellers marketing unapproved peptide products under a research label.
Table of Contents
- Why “reliability” needs numbers
- Metric 1: Is the CoA specific to the batch you are buying?
- Metric 2: Who issued the document?
- Metric 3: Can you verify the CoA at the source?
- Metric 4: Purity and identity, reported together
- Metric 5: Sterility and endotoxin, if it will be injected
- Metric 6: Consistency across lots and over time
- Metric 7: Regulatory record and legal posture
- Metric 8: Your own blind test
- A simple scorecard
- Red flags that override the score
- Our perspective
- Using Peptide Vendor Reviews to apply these metrics
- FAQ
- Sources
Why “reliability” needs numbers
Most vendor guides in search results end up as checklists of impressions: does the site look professional, is there an address, is there a chat widget. Those help you spot the worst offenders, but they don’t separate a good vendor from a convincing one. Brand recognition and catalog depth are weak predictors, and several current guides now say so openly.
A metric has three properties. It is measurable, it can be checked by someone other than the seller, and it can be compared between vendors. “We use premium raw materials” fails all three. “Lot MC202603 tested at 99.1% by HPLC at an independent lab, with a verification code” passes all three.
The eight metrics below are ordered from the cheapest to check (reading a product page) to the most demanding (testing samples yourself).
Metric 1: Is the CoA specific to the batch you are buying?
A generic certificate that sits on a product page for years proves nothing about the vial that reaches you. Look for a lot or batch number on the document that matches the number on the label, an analysis date, and the strength of the product tested. A sterility certificate from one published example shows what this looks like: it lists the client, the analysis date, the product name, the strength and a lot number, all on one page (sample sterility CoA).
Questions to ask before you pay:
- Is the lot number on the CoA the same as the one I will receive?
- Is the analysis date recent compared with the manufacture date?
- Is the CoA available before checkout, or only on request after payment?
We go deeper on this in our guide on why you should require a lot-specific CoA to vet peptide suppliers.
Metric 2: Who issued the document?
A CoA written by the seller is a claim. A CoA issued by an independent laboratory is evidence. The distinction is the core of pharmaceutical supplier qualification: under ICH Q7 principles, a supplier is qualified through risk-based evaluation, not by trusting a self-issued CoA. The industry guidance recommends periodically running full analytical testing on batches to confirm that the supplier’s documentation is reliable, and it cites full analyses on at least three batches before reducing in-house testing (supplier management best-practice guide, 2024).
You are probably not running a GMP supplier program. But the logic transfers: trust the vendor’s paperwork only to the extent that you have checked it against independent results.
When a vendor names its testing lab, look at the lab itself:
- Does it hold ISO/IEC 17025 accreditation, and from which body?
- Does it have a public presence beyond the vendor’s website?
- Does it publish its methods?
Accreditation is not a guarantee, but it is a checkable fact, and an unaccredited lab with no public footprint is a weaker source than an accredited one.
Metric 3: Can you verify the CoA at the source?
Altered and fabricated CoAs are common enough that a verification path is now one of the most useful reliability signals. A CoA with no publicly verifiable link or unique authentication code on the testing lab’s own platform is a red flag, because that code is the main defense against forged documents (QSC Lab testing overview).
In practice:
- Find the report ID or verification key printed on the document.
- Enter it on the lab’s own site, not a link the vendor supplies.
- Check that the product name, lot, purity figure and date on the lab’s record match the PDF.
If any field differs, or if no lab record exists, downgrade the vendor. Our guide on three checks to trust a peptide COA walks through the process, and the traceability checks for COA interpretation covers the lab side.
Metric 4: Purity and identity, reported together
Two tests do two different jobs. Reverse-phase HPLC quantifies purity, usually reported as a percentage of the main peak. Mass spectrometry (ESI-MS or MALDI) confirms identity by measuring molecular weight. Common benchmarks are HPLC purity of 98 to 99% or higher, with mass spectrometry tolerance typically under 1 Da for standard peptides (QSC Lab).
A vendor reporting only one of the two is hiding half the picture. A highly pure peak of the wrong molecule is still the wrong product, and a correct mass with 80% purity is still a contaminated one.
Two cautions when you read the numbers:
- HPLC percent is not peptide content. A chromatogram reports relative peak area at a detection wavelength. A sample can show a high HPLC percentage and still contain a large share of salts, water and counterions. We explain this in why 98% HPLC purity can be 75% peptide.
- Check the chromatogram, not just the number. Look for a clean baseline, a single dominant peak and a stated method. A bare figure with no trace is weaker.
For GLP-1 class compounds, we maintain a separate list of four data points to demand for GLP-1 peptide purity. To see how purity data looks in aggregate across vendors, browse our peptide purity lab results.
Metric 5: Sterility and endotoxin, if it will be injected
HPLC and MS tell you what the molecule is and how much of the peak it takes up. They tell you nothing about microbes or bacterial toxins. For injectable-intended peptides, insiders look for USP <71> sterility and USP <85> endotoxin results, and a CoA without them does not confirm the product is safe to use (sterility CoA example).
A sterility metric has three parts:
- The test is named (for example USP <71>), not just “sterile.”
- The result is tied to the same lot as the purity test.
- The condition tested matches the product sold (lyophilized powder versus reconstituted).
If a vendor offers purity data only, that is a gap, not a pass. Our COA checklist for verifying sterility testing covers what to look for.
Metric 6: Consistency across lots and over time
A single clean certificate says the vendor can pass once. Reliability is variance. Ask:
- Are results published for multiple lots of the same peptide?
- Do purity figures hold within a narrow band, or swing between 99% and 90%?
- Are failures visible, or does every result suspiciously pass?
That last point matters most. A vendor whose published data contains no failures is either extraordinary or curating. This is the reason we publish every result we generate, including the ones that fail. See the 20-minute two-check method for verifying purity if you want to sample a lot yourself.
Metric 7: Regulatory record and legal posture
The FDA regularly issues warning letters to online sellers it says market unapproved and misbranded drugs. One letter to a US-based site states that the agency observed it introducing unapproved and misbranded semaglutide and tirzepatide products into interstate commerce, and notes the inherent risks of unapproved new drugs (FDA warning letter, February 26, 2025). A search of the FDA’s warning letter database for a vendor’s name or domain takes two minutes and is a legitimate reliability check.
The “research use only” label does not change this analysis. The Alliance for Pharmacy Compounding argues that the label is often used to sidestep safety rules, and that legitimate suppliers in the regulated space, such as state-licensed compounding pharmacies and FDA-registered outsourcing facilities, follow enforced compounding standards rather than operating in the research gray market (Alliance for Pharmacy Compounding statement, December 2024).

If you are a clinician or patient
This is where the research framing ends. A clinician sourcing a therapy for a patient should be working with a licensed pharmacy, not a research vendor. One physician quoted in The Hill describes the lack of physician oversight for dosing, injection technique and side effect management as a severe safety risk when injectable peptides come from unverified gray-market sources (The Hill). If you are a clinician, talk to your state board of pharmacy and your compounding partner about what is permitted in your state.
For receiving compounded product, a practical resource is this clinician guide to five checks before accepting 503A versus 503B shipments, which explains how regulated compounding differs from research-use-only sales.
Metric 8: Your own blind test
The strongest reliability metric is one the vendor cannot influence: buy the product like any customer, and test it. Blind purchases remove the chance that a vendor sends a specially prepared lot to a known reviewer, and a third-party lab removes the vendor from the measurement.

If you buy in volume, follow the pharmaceutical logic: test the first few lots in full, then retest at intervals. The guidance on supplier qualification frames this as periodic full analysis rather than one-time trust (best-practice guide). For a quick screen, our five-minute authenticity check can save you weeks of waiting on a bad lot.
A simple scorecard
Use this to compare any two vendors. Give each row 0, 1 or 2 points.
| Metric | 0 points | 1 point | 2 points |
|---|---|---|---|
| Batch-specific CoA | None or generic | On request only | On product page, lot matches |
| Issuer | Vendor itself | Unnamed lab | Named, accredited independent lab |
| Verification | None | Vendor-supplied link | Code verifies on the lab’s own site |
| Purity and identity | One test | Both, no chromatogram | Both, with traces and methods |
| Sterility and endotoxin | None | Claimed, not shown | USP <71> and <85> results for the lot |
| Consistency | One lot shown | A few lots | Many lots, failures published |
| Regulatory record | Warning letter or none checkable | Unclear | Searched, nothing found |
| Independent blind test | None | Single | Repeated |
A vendor scoring under 8 out of 16 is a gamble. Between 8 and 12, buy small and test. Above 12, you are looking at a vendor whose claims can mostly be checked. The scorecard is our own simplification, not an industry standard, so adjust the weights if you are buying only for in vitro work, where sterility matters less.
Red flags that override the score
Some findings should end the evaluation regardless of points:
- Dosing or injection instructions aimed at consumers, or claims that a product treats a condition.
- A CoA whose verification code does not exist at the lab.
- Identical chromatograms across different products or lots.
- Pressure tactics, “limited stock” countdowns or payment only by methods with no buyer recourse.
- Refusal to say which lab tested the product.
Our perspective
We built Peptide Vendor Reviews because vendor claims and vendor reality kept diverging. Our rule is simple: every purity and identity result on the platform comes from blind sample purchases and third-party lab testing, and we publish all of it, failures included. We don’t sell peptides, and rankings are not influenced by pay-to-rank or advertising, so a vendor can’t move up by paying us.
What that has taught us is that the single most predictive question is not “how pure is it?” but “can I check that number without the vendor?” Vendors who welcome independent verification tend to be the ones who pass it. Vendors who get defensive about it usually have a reason.
We also hold our own methods to the same standard. We state our lab methodology openly, so you can judge our data the way we ask you to judge theirs. Use our data as a starting point, and test the lot in your hands before you build an experiment on it.
— Ross
Using Peptide Vendor Reviews to apply these metrics
If you want the lab data without running the tests yourself, our platform compares more than 200 verified vendors using independent HPLC and mass spectrometry results, with prices updated daily. Start with lab results by research goal or the peptide price list with cost per mg. Vendors who want their products tested can see plans and the per-sample testing fee on our vendor page. Purchases made through our outbound links may earn us a referral commission, which does not affect rankings.
FAQ
How do I know if a peptide vendor is legit?
Start with the CoA. It should be specific to the lot, issued by a named independent lab, and verifiable on that lab’s own platform. Then check that the vendor reports both HPLC purity and mass spectrometry identity, and search the FDA warning letter database for the vendor’s name.
Is 99% HPLC purity enough to trust a peptide?
No. HPLC percent describes relative peak area, not total peptide content, and says nothing about identity, sterility or endotoxin. A trustworthy result pairs it with mass spectrometry and, for injectables, sterility and endotoxin testing.
Does a “research use only” label make a vendor reliable or legal?
No. The label does not exempt a product from FDA rules, and the agency has issued warning letters to sellers of unapproved semaglutide and tirzepatide products. Anyone considering peptides for human use should speak with a licensed clinician and a licensed pharmacy rather than a research vendor.
How often should I retest a vendor?
Test the first few lots fully, then retest at regular intervals. Pharmaceutical supplier guidance describes full analysis of at least three batches before reducing testing, with periodic checks of the supplier’s CoA reliability afterward. Retest sooner if the appearance, solubility or price of a lot changes.
Sources
- QSC Lab: Peptide purity testing, HPLC and mass spectrometry
- Best practices guide for managing suppliers of API manufacturers, Version 2, March 2024
- FDA warning letter, February 26, 2025
- Alliance for Pharmacy Compounding statement, December 18, 2024
- The Hill: injectable peptides and health concerns
- Sample sterility CoA, lot MC202603