One wrong click can expose every client file in your office.
Security awareness training built for tax offices. Your team learns to spot phishing, gets tested with real-world simulations, and you get completion reports to keep on file with your WISP.
- Security awareness training for every person on your team
- Phishing simulations that test what your team actually does
- Completion reports: proof of who trained and when
- LinkedIn badge for every team member who completes
The FTC Safeguards Rule requires security awareness training for your personnel, updated for the risks in your risk assessment.
FTC · 16 CFR 314.4(e)Your written security plan says your staff is trained. Completion reports are how you show it.
IRS Pub 5708The IRS warns tax professionals about phishing and spear-phishing scams aimed at their offices every filing season.
IRS Pub 4557A breach involving 500 or more consumers must be reported to the FTC within 30 days of discovery.
FTC · 16 CFR 314.4(j)Would your team click this?
This email has 5 red flags. Click on everything that looks suspicious. Most people stop at two.
Dear Valued Customer,
We detected unusual activity on your account. To avoid interruption of e-filing during tax season, verify your login and EFIN now.
Verify my account
Review the attached security notice before signing in.
Security_Notice_2027.html.zip
— TaxSoft Pro Security Team
- 1. Look-alike sender"taxsoft-pro-verify.net" is not the real vendor domain.
- 2. Fake urgency"24 hours" pressure is designed to stop you from thinking.
- 3. Generic greetingYour real vendor knows your name.
- 4. Credential linkNever sign in from an email link. Go to the site yourself.
- 5. Dangerous attachmentA zipped .html file is a classic malware or fake-login trick.
Example email created for training. "TaxSoft Pro" is fictional.
Your firewall can't stop a click.
Antivirus, MFA and backups protect your systems. Your people are the last line of defense, and attackers know tax offices are busiest, and most rushed, from January to April.
A template policy that says "staff are trained" isn't the same as a team that actually recognizes a fake login page.
Everything your team needs. Nothing for you to manage.
Security awareness training
Online training on phishing, passwords, MFA and safe handling of client data. Each person trains at their own pace.
Phishing simulations
Realistic test emails show who clicks, so you know where the risk is before a real attacker finds it.
Completion reports
Records of who completed training and when. Keep them with your WISP for your annual review.
LinkedIn badge
Every team member who completes gets a badge to share. Clients see a firm that takes their data seriously.
We manage every user
We enroll your team, send reminders and track progress. No platform for you to learn.
Bilingual support
Questions? Call or email us in English or Spanish, Mon–Fri, 9 a.m.–6 p.m. CT.
Free videos vs. a training program you can prove.
Do it yourself
- ContentFind and pick videos yourself
- TestingNot included
- ProofSign-in sheet, if anyone remembers
- Admin workYou chase every employee
- RecognitionNot included
AT4TP
- ContentStructured awareness training
- TestingPhishing simulations
- ProofCompletion reports for your WISP file
- Admin workWe enroll, remind and track
- RecognitionLinkedIn badge per person
Simple pricing. One price per person.
How many people touch client data?
Count preparers, front desk, bookkeepers and seasonal staff, including yourself.
Larger team or multiple offices? (979) 710-3386
- Training for every person
- Phishing simulations
- Completion reports + LinkedIn badges
- We manage every user
Three steps. We handle the setup.
Check out
Pick how many people to train and complete checkout. No software to install.
Send us your team
Reply with names and emails. We enroll everyone and send their login.
Train, test, keep the proof
Your team trains, we run phishing simulations, and you get completion reports for your WISP file.
Complete your security program.
Training is one part of the Safeguards Rule. These cover the plan and the devices.
- In your order
Awareness training
Your team trained, tested with phishing simulations, and documented.
$199 / personEnroll my team → - Recommended nextThe plan
Custom WISP
Your Written Information Security Plan, written for your practice in under 5 minutes. English or Spanish.
$199Get my WISP → - The devices
Remote IT Security Assessment
We check your actual devices against what your WISP says.
From $599Call to schedule →
Questions, answered.
Mon–Fri, 9 a.m.–6 p.m. CT, in English or Spanish.
Is security training actually required for tax preparers?
I'm a solo preparer. Do I need this?
What's a phishing simulation?
Do I have to manage the platform?
Is support available in Spanish?
Does training make my office compliant?
What's your refund policy?
Train your team before tax season.
$199 per person · phishing simulations · completion reports · LinkedIn badge · we manage every user