For accountants & bookkeepers
A hygiene check your firm can attach to its engagement letter.
Vantyris runs a scan against your firm's site, returns a plain-English report and a PDF, and gives you something concrete to put in front of a client or auditor.
The reality
What we hear from accounting partners
Your engagement letter mentions security in vague terms because nobody actually checks.
A client added a 'cyber hygiene scan in the past 12 months' line to their questionnaire.
Tax season is now and you have no idea whether your client portal leaks information.
What a typical accountant scan surfaces
One finding, shown in plain English.
Every finding in your Vantyris report is shaped the same way: what it means for your business, how to fix it, who to ask, and the technical evidence one tap below.
SPF record covers too many DNS lookups
Your SPF record exceeds the 10-DNS-lookup limit, which causes some receiving mail servers to silently mark your email as failing SPF. Client mail occasionally lands in spam.
How to fix it
Flatten your SPF record, remove redundant include: entries, or move to an SPF macro service. Most domain registrars offer this as a managed setting. About an hour with your IT contractor.
Why accountants buy Vantyris
Documented hygiene
Pay per scan
Plain-English brief for your IT contractor
We have no accountant testimonials to publish until real customers consent to being case-studied. Until then, we'd rather ship nothing than ship something fake.
FAQ for accountants
Common questions from accounting firms
Does this count for PCI DSS / Cyber Essentials?
Vantyris is not a certification. It is a hygiene scan that helps you address the kinds of issues those frameworks care about. We do not produce formal compliance evidence.
Will my client see anything?
No. Vantyris scans your firm's externally-visible attack surface. Your client's data isn't visible to a Vantyris scan unless your firm exposes it on the public internet, which itself would be a finding.
Can I scan a client site on their behalf?
Yes, with their written authorisation. See our Acceptable Use Policy. We provide a template authorisation letter.
What if our IT contractor disagrees with a finding?
Every finding has its technical evidence in the report. If your contractor has a justified reason, mark the finding 'Ignored with reason' (the suppression has a 90-day expiry so it's not silently forgotten).
More questions? Full FAQ.