Business
Business Security · Overview Executive Protection
Individual
Personal Protection · Overview Personal Credential Scan
Programs
Family Offices Wealth Firms Sports & Entertainment Agencies Reputation Threat Intelligence Wealth Manager Program Business Broker Program Partners
Intelligence
Research Library Threat Intelligence Global Breach Map Recent Breach Disclosures
Company
How It Works About Contact
Sign In
Cyber-intelligence glossary

Advisor tenant

Advisor tenant (family office context)

A professional advisor firm (CPA, attorney, wealth manager, insurance broker, custodian, trustee) that holds sensitive information or wire authority on behalf of a principal.

Definition

An advisor tenant is any professional advisor firm sitting on the money or sensitive information of a principal or family office — typically CPA, estate attorney, wealth manager or RIA, insurance broker, custodian bank, and trustee. The term "tenant" reflects the software-industry convention (a multi-tenant SaaS) applied to the observation that a principal typically has four to six such advisor firms, each maintaining its own email infrastructure, credential exposure, DMARC/SPF posture, and third-party dependency chain. Losses on family-office principals rarely originate on the principal’s own account; they originate on the CPA’s inbox, the estate attorney’s paralegal, or the wealth manager’s tenant. Comprehensive family-office cyber intelligence therefore requires per-tenant audit: DMARC posture, credential exposure, breach history, and wire-fraud precursor signals on each advisor firm domain and mailbox range. Advisor-tenant coverage is a defining feature of institutional family-office engagements.

Why it matters

A family-office program that covers only the principal misses the actual attack surface. LeakTrace family-office engagements include advisor-tenant audit up to four tenants at baseline, with expanded tenant coverage available for larger networks.

Related LeakTrace pages
Related program
Family Office Intelligence
Related program
Wealth Manager Program
Related program
Methodology
Related terms
Principal scan
LeakTrace’s baseline intelligence scan covering the principal individual across breach, dark-web, reputation, impersonation, and data-broker surfaces.
Wire-fraud precursor
A publicly-observable signal that indicates an attacker is preparing a business-email-compromise or wire-fraud attack against a target — surfaced before the wire moves, not after.
DMARC
An email authentication protocol that tells receiving mail servers what to do with messages that fail sender authentication (SPF or DKIM).
Business Email Compromise (BEC)
A category of wire-fraud attack where the attacker impersonates a trusted party (executive, vendor, advisor) over email to redirect a payment to a fraudulent account.
Discovery call
Mutual NDA on request. Reply within one business day.
Book at [email protected]. Full glossary at getleaktrace.com/glossary. Frequently asked questions at getleaktrace.com/faq.