We scanned 62 US peptide storefronts. Most would not survive a close read.

How 62 storefronts scored

Grades band the 0-100 score: A is 90 or above, B is 75-89, C is 60-74, D is 45-59, F is below 45. The distribution is bottom-heavy: the single largest cluster sits in the 50s, and 39 of 62 sites scored below 60.

What drags the bottom of the curve down is remarkably consistent, and it is the same pattern the FDA quotes in its letters: catalogs listing compounds in categories the agency has already acted on, copy that describes benefits or outcomes to a human reader, and accessory cross-sells that imply how the product will be administered. The top of the curve fails differently - the highest scorers mostly lose points on missing disclosures, missing lab documentation, and missing policy pages rather than on what they sell or say.

The leaderboard: the 17 storefronts that scored 75 or higher

These are the 20 highest scores in the index, named because they earned it. Ties are ordered alphabetically. One scanned domain was excluded from ranking because it no longer hosts a store. Everyone else appears only in the aggregate numbers above - this index exists to raise the bar, not to hand regulators or competitors a target list.

A place on this list means a site scored well on the surfaces our scan reads at scan time. It is not an endorsement, a certification, or a statement that any site is compliant with any law. Scores change when sites change; any listed site can be rescanned at any time.

Methodology: what we scan, what we score, and what a score is not

What we scan

The scan reads what a shopper's browser reads: the homepage, catalog and product pages, policy and legal pages, and the copy visible on the path from product page to cart. It renders JavaScript, follows internal links, and records exactly what a customer, a payment underwriter, or a regulator doing a desk review would see. It does not log in, does not place orders, and does not access anything non-public.

What we score

The 0-100 score is built from five weighted pillars:

• Catalog composition - whether the storefront lists products in categories that published FDA warning letters have treated as prohibited for research sellers, including approved or investigational drug analogs.
• Copy language - dosing or administration instructions, disease or treatment wording, and benefit or outcome claims in customer-visible text.
• Required disclosures - a research-use-only disclaimer a shopper actually encounters, a regulatory-status statement, and an age plus qualified-researcher gate.
• Human-use signals - accessory cross-sells and content that imply how a product will be administered, plus customer reviews and testimonials, which regulators read as evidence of intended use.
• Documentation and trust - published certificates of analysis, policy pages, a real contact channel, and baseline site integrity (working HTTPS, functioning pages).

How the matching works

The engine pattern-matches site language against language quoted verbatim in published FDA warning letters to peptide and research-chemical sellers from 2024 through 2026, plus the disclosure practices those letters treat as absent. When a site's copy resembles copy the agency has already cited, the site loses points in proportion to how central that pattern was to the letters that quoted it.

What a score is not

A score is a similarity measurement, never a legal conclusion. We are not a law firm, we do not determine that any site violates any law, and we do not publish per-site findings for anyone outside the leaderboard. A low score means the scan found patterns resembling those quoted in enforcement letters; only the FDA decides what the FDA acts on. The "would likely fail an FDA totality review" figure above is a statement about our scoring model's threshold, not a prediction about any individual site.

Editorial rules

• Failures are reported only in aggregate. We never name a site below the leaderboard cutoff, publicly or privately, and we do not sell or share the underlying list.
• Client sites of Stonegate Systems are excluded from the index entirely, in both directions - they are not eligible for the leaderboard and they are not in the aggregate pool.
• Every site named on the leaderboard has a standing right of reply and rescan, below.
• The index is rescanned periodically; scores and rankings on this page reflect the scan date shown at the top.

The leaderboard badge

If your storefront is on the leaderboard above, you are welcome to display the badge. It is a single inline SVG - no external script, no tracking, nothing loaded from our servers. Copy the snippet, paste it into your footer or about page, and link it back to this page so visitors can verify the listing.

<a href="https://stonegatesystems.co/compliance-index"
   title="Verify this listing on the Stonegate Compliance Index">
  <svg xmlns="http://www.w3.org/2000/svg" width="250" height="72"
       viewBox="0 0 250 72" role="img"
       aria-label="Stonegate Compliance Index, Top Tier, 2026">
    <rect x="1" y="1" width="248" height="70" rx="10"
          fill="#0b0a07" stroke="#c9a15a" stroke-width="2"/>
    <circle cx="36" cy="36" r="17" fill="none"
            stroke="#c9a15a" stroke-width="2"/>
    <path d="M28.5 36.5l5 5 10-11" fill="none" stroke="#c9a15a"
          stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"/>
    <text x="64" y="26" font-family="Georgia, 'Times New Roman', serif"
          font-size="13" font-weight="700" fill="#f3f1ec">STONEGATE</text>
    <text x="64" y="41" font-family="Helvetica, Arial, sans-serif"
          font-size="9.5" letter-spacing="1.6" fill="#a8a293">COMPLIANCE INDEX</text>
    <text x="64" y="58" font-family="Helvetica, Arial, sans-serif"
          font-size="11" font-weight="700" letter-spacing="1.2"
          fill="#c9a15a">TOP TIER · 2026</text>
  </svg>
</a>

Badge rules: display it only while your domain appears in the leaderboard above. If a rescan moves a site off the list, we ask that the badge come down within 14 days. The badge signals a scan result on a given date, not a certification of legal compliance, and it may not be altered to suggest otherwise.

Right of reply, disputes, and rescans

Automated scans are honest but not infallible: a crawler can hit a stale cache, an A/B test, a staging leak, or a page you have since fixed. So every operator in the index, listed or not, gets the same standing offer:

• Dispute a score. Email [email protected] with the subject "Compliance Index dispute", your domain, and what you believe the scan got wrong. A human reads every dispute and answers within 5 business days.
• Request a rescan. Fixed something? Ask for a rescan any time - same address, subject "Compliance Index rescan". We re-run the identical scan, and if your new score changes your ranking, this page updates at the next publication cycle with the new date noted.
• Ask what we found. If your site is in the aggregate pool, we will privately share your own site's findings with a verified owner of the domain, free. Your findings are yours; nobody else's are shared with you, and yours are shared with nobody else.
• Opt out of naming. Leaderboard sites that would rather not be named can ask to be removed; the score stays in the aggregate statistics, anonymously.

Corrections are noted on this page. If we got something wrong, we will say so in plain sight, not in a changelog nobody reads.

Questions, answered straight

This page is general information, not legal advice, and no statement here is a legal conclusion about any named or unnamed site. Scores reflect automated pattern-matching against language quoted in published FDA warning letters, as of the scan date shown above. Stonegate Systems LLC is a website development and monitoring company, not a law firm.