Santa Clara, Calif. — August 12, 2002 - Sanctum, Inc., the established leader in Web application security, today announced the appointment of Steve Orrin as chief technology officer. Orrin brings in-depth CTO experience in data security from LockStar, Inc. and SynData Technologies, Inc. At Sanctum, Orrin will play a key role in driving the long-term technology direction as well as the strategy for addressing emerging application trends and standards.

"Steve's commitment to Sanctum's success, combined with his extensive technology and entrepreneurial track record, makes him the obvious choice for Sanctum," said Peggy Weigle, chief executive officer, Sanctum. "IDC's latest research projects an exponential growth for the Web intrusion protection market, expected to exceed $690 million by 2006. Sanctum, recognized in the report as the de facto leader in this market, is in the sweet spot to capture that demand. In his new role as chief technology officer at Sanctum, Steve's in-depth knowledge of data security technologies will be instrumental as we continue to innovate our products and help our customers increase the speed and ease of application deployment in a secure environment."

Prior to joining Sanctum, Orrin served as co-founder and chief technology officer at LockStar, Inc., where he was responsible for designing Enabler, a PKI-based authentication and data security product for Web-based mainframe data access and authentication, and FullAccess, a Web-to-host integration platform that uses XML/SOAP, CORBA, COM and EJB to connect to legacy CICS applications. Prior to LockStar, Orrin served as chief technology officer at SynData Technologies, where he designed the company's flagship product SynCrypt, an email and file encryption utility. Orrin currently holds a patent in the field of steganography, "Encryption-based selection system for steganography." Additionally, he has three more pending patents in the field of steganography, two pending patents in n-tier authentication and data security mechanisms, and one pending patent on a secure system for Electronic Chattel Paper.

"In only a few years, Sanctum has done a tremendous job of evangelizing the need to assess and protect against inherent vulnerabilities in Web applications," said Steve Orrin, the new chief technology officer at Sanctum. "With the explosion of Web-based business operations, companies find themselves largely unprotected against browser-launched cybercrimes. Sanctum's products uniquely address security at all stages of the application lifecycle to avoid extraordinary cost and risk after the applications are in production."

AppShield is the industry's leading Web application firewall that provides comprehensive, automatic protection against all types of Web application attacks by monitoring for correct use of the application, blocking the attacker's unauthorized actions, logging IP information and alerting administrators to all attack attempts. A standalone application running on Windows 2000, AppScan is easily adapted into any auditor, Q/A or developer environment. The most powerful vulnerability assessment tool for Web applications, AppScan extends Internet security assessments through all phases of the application lifecycle with the most advanced validation tests for both common web vulnerabilities (CWVs) and application-specific vulnerabilities (ASVs).

About Sanctum, Inc. (www.SanctumInc.com)
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity—from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement—even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, Wachovia Strategic Ventures Group, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

For Immediate Release
Contact:

Tara Dugan or Annie Kim
Schwartz Communications, Inc.
(415) 512-0770
[email protected]