Managed phishing testing
See how your staff handle a suspicious workplace email. We run an authorized simulation, provide short follow-up training, and explain the results in a dated report and manager readout.
From $395 for up to 10 participants, including standard setup.
What SYB handles
We set up and administer the phishing campaign, coordinate the scenarios, and provide a short follow-up training assignment so the business can review what happened without managing another platform.
Setup may require assistance or limited authorized access from the email administrator. We do not collect or retain actual passwords.
Who this is for
This is designed for businesses that need someone to run the process, without building a security program from scratch.
Realistic business scenarios
Practice judgment in common business workflows.
A realistic message can test whether employees pause to verify a request before they click or reply.
This type of business scenario is common in accounting, operations, and procurement workflows.
Organizations often need to confirm whether staff recognize suspicious requests that appear to come from a familiar internal process.
For trucking and logistics teams, email scenarios often mimic carrier, driver, or dispatch correspondence.
Voice, SMS, in-person, and bespoke executive exercises are quoted separately.
For trucking and logistics teams
Campaigns can use controlled dispatch, load-document, or carrier-portal scenarios. For the operational context behind those scenarios, see our trucking and logistics guidance and the recent fake-logistics-app warning.
Pricing
Participants are individual people enrolled in the campaign, not total company headcount. Shared mailboxes, contractors, and employees without individual work email accounts are addressed during scoping.
| Participants | One-time campaign | Annual program |
|---|---|---|
| 1–10 | $395 | $995/year |
| 11–25 | $595 | $1,495/year |
| 26–50 | $895 | $2,495/year |
| More than 50 | Scoped quote | Scoped quote |
What you'll see
The managed program brings campaign results, training completion, and per-user risk trends into the same dashboard. SYB turns those signals into practical priorities at your quarterly readout.
Change over three campaigns
Completed in this example period
Review outstanding learning with the manager
The ongoing version
Choose monthly or quarterly campaigns with auto-assigned micro-learning, completion tracking, and a shared human-risk dashboard. SYB reviews progress with you quarterly and adjusts the next practice priorities.
Choose the fixed annual package for four campaigns, or request a monthly managed-program quote for ongoing learning, dashboard access, and quarterly reviews.
Explore the managed programWhat the business receives
The service shows what happened, which staff engaged with the scenario, and what needs attention next.
Simulation difficulty and automated email-security activity affect interpretation.
Keep learning with the ongoing managed programHow it works
We confirm the purpose, the participants, and the business context for the campaign.
We confirm the email environment, any required access, and final campaign timing.
We deliver the simulation, track engagement, and assign concise follow-up training.
Leadership receives a short readout, campaign results, and supporting records as published.
FAQs
The launch pricing is $395 for up to 10 participants in a one-time campaign, $595 for 11–25 participants, and $895 for 26–50 participants. Annual programs are priced at $995, $1,495, and $2,495 respectively. Larger programs receive a scoped quote.
Yes. One-time campaigns include one selected email scenario, standard setup, short follow-up training, a dated report, and a short manager readout.
No. Managed phishing testing is a standalone service. It is available without the Security Baseline and can be scoped independently for your business.
Yes. We can coordinate with your MSP or provider when an authorized email environment or support contact is needed for setup.
Yes. The campaign covers the agreed enrolled participants, counted individually, with records for that audience.
Shared mailboxes, contractors, and people without individual work email accounts are addressed during scoping. The campaign scope should reflect the specific participants in the test.
If your insurer has requested phishing testing or security awareness training, share the exact wording with us. We can scope the engagement around the stated requirement and provide dated records of the work completed. Your insurer or broker confirms whether those records satisfy its requirements.
No. Actual passwords are not collected or retained as part of the campaign. We focus on the business interaction and the training follow-up, not credential capture.
The standard annual program includes four campaigns over 12 months, with four short training assignments and completion reminders. Quarterly campaigns are the standard annual schedule.
No. Vishing (voice-call simulations) and smishing (SMS simulations) are premium add-ons with separately agreed participants, authorization, timing, scenarios, and pricing. In-person impersonation and bespoke executive exercises are outside the standard email scope.
The fixed annual email package retains four quarterly campaigns and its published annual total. The quote-based monthly Managed Human-Risk Program is the ongoing version: monthly or quarterly campaigns, auto-assigned micro-learning, dashboard access with per-user risk trends, and quarterly readouts. Its scope and terms are confirmed separately.
A separate weekly habit
Authorized simulations test responses to an email campaign. Weekly awareness challenges provide decision practice and feedback. Explore online cybersecurity training for small businesses, including freight and logistics training and agriculture training.
Compare training and the annual combination