Before a Lead is saved, require a company name. If Company is blank, stop the save and tell the user what to enter.
Write bulk-safe trigger logic and do not run SOQL or DML inside loops.