San Francisco, CALIF. — April 24, 2003 - Sanctum, Inc., the established leader in Web application security software, today announced the preliminary Spring schedule for Web events on secure coding and AppScan � Developer Edition (DE) 1.5, an automated testing tool integrated with Microsoft Visual Studio .NET 2003. Since general availability on March 17, 2003, AppScan DE has gained widespread acceptance by Microsoft developers to help them create secure, next-generation Web applications and Web services.

During the Spring Webinar Series, Sanctum executives will provide hands-on advice for secure coding practices, as well as discuss current market trends, such as balancing the need for educating developers on secure design and development techniques with the integration of automated testing tools. Upcoming events include:

• Securing .NET Framework Applications from the Start
  April 24, 2003 at 11:00 a.m. PST
  Sanctum CTO Steve Orrin and Michael Howard, senior security program manager for the Secure Windows Initiative at Microsoft and coauthor of "Writing Secure Code," will address how security unit testing in the daily development process can save time in delivering quality applications. To pre-register, visit http://searchSecurity.com/r/0,,12524,00.htm?sanctum.
  
  
• Security Best Practices in the .NET Framework Environment
  May 9, 2003 at 1:00 p.m. PST
  Sanctum CTO Steve Orrin and Microsoft Senior Security Program Manager Michael Howard will address the strength of security unit testing in the .NET Framework development environment for real-time training and meeting security best practices. For event details, and to enroll, visit http://www.microsoft.com/usa/webcasts/upcoming/1940.asp.

"Sanctum's AppScan DE 1.5 for Microsoft Visual Studio .NET 2003 helps make building secure software and applications easier," said Michael Howard, senior security program manager for the Secure Windows Initiative at Microsoft Corp. "With AppScan DE, .NET Framework developers can quickly find security defects and, more importantly, learn to design and develop much more secure applications in real time."

"By integrating AppScan DE into Microsoft Visual Studio .NET 2003, Microsoft is providing seamless access to a powerful, easy-to-use and automated tool that optimizes the rapid development of high-quality software and provides real-time training for optimal security," said Steve Orrin, CTO, Sanctum, Inc. "We commend Microsoft for taking security seriously with the launch of Visual Studio .NET 2003, and are excited to collaborate with the company on the upcoming webinar series to deliver practical advice and innovative ideas for developers to continue to raise the bar on the quality of applications they deliver to the market."

About AppScan DE
Designed with the qualities needed to make a developer's work more secure without making it more complicated, AppScan DE integrates into the Visual Studio .NET 2003 Integrated Development Environment (IDE), and tests applications built with any of the languages supported by Visual Studio .NET. AppScan DE can be quickly configured to unit test any Web application for security defects directly from within the IDE. After identifying the location of each defect, AppScan DE delivers in-line fix recommendations, provides detailed descriptions and enables the developer to perform granular analyses of each test and response. AppScan DE helps make enterprise applications resistant to attack without destroying any of their functionality, elegance or effectiveness. For more information, or to purchase AppScan DE, visit www.SanctumInc.com.

About Sanctum, Inc.
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity-from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement-even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, Wachovia Strategic Ventures Group, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

For Immediate Release

Contact:

Diane Fraiman
Sanctum, Inc.
(408) 352-2000
[email protected]

Tara Dugan or Dara Sklar
Schwartz Communications, Inc.
(415) 512-0770
[email protected]