Start by comparing procurement, TPRM and expense records, then use external evidence to look for supplier relationships those sources do not explain. DNS, certificates, scripts, APIs, redirects and shared infrastructure can reveal candidates. Each candidate should be validated with internal owners or commercial records before it is treated as a confirmed supplier.
FAQ
Supplier Discovery