Changed wire instructions
A familiar-looking sender asks accounting to redirect settlement funds. Practice stopping the change and calling a previously verified number.
Managed phishing & awareness
Phishing simulation for law firms
Would your team stop a convincing wire-change request? Our managed phishing simulation for law firms tests that decision with authorized emails, practical follow-up training, and dated evidence for leadership, insurers, and clients.
One campaign from $395. Managed monthly program from $199/month. No assessment prerequisite.
Practice law, not damage control. SYLF complements your existing MSP or IT provider with independent, legal-risk-focused program management.
From a test to an ongoing program
Practice the requests that put client money and trust at risk.
Choose a single campaign for a defined need or a monthly cycle of simulations, learning, and review. Ongoing means recurring practice, not daily testing or round-the-clock threat monitoring.
Trust-account changes
An urgent message requests new trust-account payment details. Test whether staff follow independent verification and approval procedures.
Client-portal notices
A simulated document notice asks a lawyer to sign in. Practice checking the request through the known portal instead.
E-filing alerts
An unexpected court-filing notice introduces a link or deadline. Test whether staff verify it through the approved filing system.
Opposing-counsel lures
A message imitates counsel sharing a revised agreement. Practice checking the sender and reporting an unexpected request.
Campaigns use agreed fictional details, not live matters. Start with the wire-instruction verification checklist and law firm wire-fraud guide to connect practice to your payment controls.
SYLF runs the program
Not another platform for your office manager to administer.
We select scenarios, coordinate delivery, follow up on learning, and explain the results. A SYLF-branded simulation and learning platform supports the managed service.
Our weekly law firm security awareness challenges keep practice tied to legal work. The managed program adds short library modules and a human-risk view. These are complementary records, not a claim that two separate workspaces are one integrated system.
- Review the insurer or client question and agree the purpose of testing
- Obtain written authorization, named participants, and approved delivery windows
- Coordinate delivery configuration and a test send with your existing IT provider
- Select legal-work scenarios, schedule campaigns, and administer delivery
- Assign short follow-up learning and track completion and overdue work
- Review automated email-security activity before interpreting staff interactions
- Provide dated reports, limitations, and a plain-language leadership readout
Evidence for your malpractice carrier and your biggest clients.
Show participation, campaign scope, risk trends, and overdue follow-up. SYLF adds the leadership explanation and next actions, not just a software license.
Securing Your Law Firm
Human Risk Dashboard · Example firm
Assigned learning completed
18 of 20
2 people need follow-up
Simulated emails reported
12 of 20
One example campaign
Example risk indicator
42 → 31
Illustrative direction, not a result
Leadership follow-up
Review overdue learning. Rehearse the trusted callback process before changing wire instructions.
Evidence to review
Campaign dates, participant scope, completion records, reporting behavior, and outstanding actions.
One campaign or a managed monthly program.
Prices are in USD. Standard email setup is included. Confirm participants, delivery needs, start date, access, retention, and contract terms in writing before enrollment. Voice and SMS are not included.
1–10 people
One-time email campaign
$395
One scenario, setup, follow-up learning, dated report, and manager readout.
Request a campaignManaged monthly program
$199/month
Monthly email simulation, weekly challenges, library-based learning, dashboard access, completion follow-up, and quarterly leadership review.
Discuss monthly enrollmentPrefer quarterly testing only? Existing four-campaign email package: $995/year. Campaign-specific learning and an annual readout included; ongoing weekly training and the managed monthly dashboard program are separate.
11–25 people
One-time email campaign
$595
One scenario, setup, follow-up learning, dated report, and manager readout.
Request a campaignManaged monthly program
$349/month
Monthly email simulation, weekly challenges, library-based learning, dashboard access, completion follow-up, and quarterly leadership review.
Discuss monthly enrollmentPrefer quarterly testing only? Existing four-campaign email package: $1,495/year. Campaign-specific learning and an annual readout included; ongoing weekly training and the managed monthly dashboard program are separate.
26–50 people
One-time email campaign
$895
One scenario, setup, follow-up learning, dated report, and manager readout.
Request a campaignManaged monthly program
$599/month
Monthly email simulation, weekly challenges, library-based learning, dashboard access, completion follow-up, and quarterly leadership review.
Discuss monthly enrollmentPrefer quarterly testing only? Existing four-campaign email package: $2,495/year. Campaign-specific learning and an annual readout included; ongoing weekly training and the managed monthly dashboard program are separate.
More than 50 people or a smaller enrolled group within a larger firm? Contact Us. Testing a subset does not establish firm-wide completion. Existing annual training bundles remain available on the training page.
Phishing testing for cyber insurance and client questionnaires.
Bring the exact question, deadline, required frequency, and workforce scope. We help organize campaign dates, delivery totals, observed reporting and clicks, learning assignments, completion gaps, and recommended follow-up.
A falling risk score can inform the discussion; participation and dated work records explain what actually happened. Neither guarantees insurer acceptance, malpractice coverage, lower premiums, or compliance.
Read the law firm cyber-insurance evidence guidePremium vishing and smishing simulations.
Vishing means a voice-call exercise. Smishing means a simulated SMS lure. Add either under a separately priced scope, with agreed participants, destination numbers, authorization, consent requirements, and timing.
These are optional exercises, not included in the monthly email program. We confirm delivery capability and legal boundaries before accepting the scope.
Discuss premium add-onsFrom authorization to the next safer decision.
01
Agree scope
Confirm goals, workforce scope, insurer wording, and written authorization.
02
Prepare delivery
Coordinate with your IT provider and verify the agreed test setup.
03
Practice and learn
Send the scoped campaign, assign learning, and follow up on incomplete work.
04
Review and repeat
Explain the evidence, limitations, and next priorities. Monthly clients receive quarterly leadership reviews.
Pair reporting practice with named response roles in the law firm incident response plan template. For a real suspected compromise, use your incident process and insurer contacts, not a simulation request.
Law firm phishing simulation questions
An authorized exercise sends simulated suspicious emails to agreed staff. Legal-work scenarios test responses to wire changes, trust-account requests, portal notices, e-filing alerts, and opposing-counsel messages. We review observed behavior, provide follow-up training, and document the exercise. No real transfer or client matter is used.
One-time campaigns cost $395 for 1–10 people, $595 for 11–25, or $895 for 26–50. The managed monthly program costs $199, $349, or $599 for the same size bands. It combines monthly email simulations, weekly challenges, learning-library assignments, dashboard access, and quarterly leadership reviews. More than 50 people require a quote.
Yes. One campaign includes one agreed email scenario, standard delivery setup, short follow-up learning, a dated report, and a manager readout. A Security Baseline or free Exposure Review is not required first.
Share the exact application or renewal wording, including required participants, frequency, and evidence. Dated campaign reports and participation records can support a response. Only the insurer or broker can confirm acceptance. The program does not guarantee coverage, renewal, lower premiums, or compliance.
You can review relevant records with your malpractice or cyber carrier and clients who request training evidence. Include the reporting period, participant scope, completion gaps, and limitations. The dashboard is not an audit, certification, or proof that all controls work. Do not share employee-level details more broadly than necessary.
The monthly managed program includes one email campaign per month, weekly law-firm challenges, library-based follow-up learning, dashboard access, and quarterly leadership reviews. Existing annual email packages include four quarterly campaigns, campaign-specific learning, dated reports, and an annual readout; they are not the monthly program.
Voice-call simulations (vishing) and SMS simulations (smishing) are separately quoted premium add-ons, not included in email pricing. Participants, phone numbers, authorization, consent requirements, timing, scenario, and price must be agreed before any exercise.
No. We scope simulations without collecting actual employee passwords or using client files, privileged matter details, or real payment instructions. Program administration uses participant work emails, campaign interactions, and training records. Access, retention, and deletion terms are agreed before enrollment; the free Exposure Review’s zero-retention model does not apply to ongoing training records.
No. A risk indicator helps prioritize follow-up. Participation, scenario difficulty, and automated email-security tools affect results. Compare like-for-like periods and review completion gaps. A lower score is not a prediction of loss or proof of security, insurance eligibility, or compliance.
No. SYLF acts as an independent legal-risk cybersecurity advisor. We manage the exercise and explain the evidence while your MSP or IT provider continues managing technical controls. Ongoing practice is not 24/7 monitoring, incident response, or a replacement for payment-verification procedures.
Test the decision before real client money is at stake.
Start with an authorized campaign. If you first want to understand public visibility, the free review checks public signals only; it does not test employees.