Santa Clara, Calif. - December 4, 2000 - Sanctum, Inc., the established leader in automated Web application control and security software, today introduced AppShield 3.0, the next generation of the company's pioneering eBusiness application security solution. AppShield 3.0 delivers a 25 percent improvement in overall performance with enterprise-class scalability, manageability and interoperability for both enterprise and service provider implementations. AppShield 3.0 is available immediately for Windows NT and Solaris platforms.

"The Internet economy demands that security solutions provide higher levels of protection, availability and integrity. With today's announcement, Sanctum continues to deliver the most advanced application-level security solutions to meet the dynamic needs of Web-centric businesses," said Peggy Weigle, president and CEO of Sanctum. "AppShield 3.0 ensures the security of all Web applications on mission-critical enterprise and service provider Web sites. It delivers the key features and functionality that our customers and partners need to protect their growing digital assets."

"In the ecommerce industry, time to code is not a luxury and long development cycles are likely to cost you a pretty penny. Coupled with resource constraints, this leaves little time for code security reviews," said Mandeep Singh, Director of Technology for Outpurchase.com. "Sanctum's AppShield product takes Web security to the next dimension, allowing companies like ours to customize the firewall to match their application to their specific business needs. Such a product is the first step in redefining Internet security."

About AppShield
AppShield is the first solution to provide eBusinesses and service providers with continuous, autonomous protection against web application perversion. AppShield secures Web sites by detecting, blocking, logging and alerting administrators to any type of application manipulation through the browser. AppShield enables enterprises to focus developer resources on new products and services rather than debugging and patching existing applications.

"Sanctum's AppShield fills a huge gap in eBusiness security: protecting Web-based applications against hacker attacks and cybercrime," said John Pescatore, VP and Research Director for Internet Security at Gartner Group. "By picking up where firewalls leave off, this type of application-level protection provides a transparent solution for blocking all of the most common high impact attacks seen on the Internet."

Responding to significant trends in the Internet security market, including the rapid emergence of managed security services, AppShield's support for shared hosting environments allows service providers to offer the most comprehensive application-level security for their customers. Remote management is now supported through multiple management consoles, enabling administrators to monitor security from virtually anywhere. Improved logging and reporting capabilities make it even easier to track user behavior as well as provide the appropriate security information to different people in the organization. To address the diverse and heterogeneous hardware configurations faced by enterprises and service providers, AppShield 3.0 is compatible with all major Internet component providers. New features for both enterprises and service providers include:

Extended Enterprise Manageability
AppShield provides improved management functionality to seamlessly integrate into existing and growing management infrastructures. Implementing the SNMP standard provides support for enterprise system management tools such as Tivoli, CA/Unicenter and HP OpenView; automatic monitoring; multiple management consoles; and improved logging capabilities deliver the flexibility needed in enterprise-class eBusinesses.

Improved Performance and Scalability
Site performance is a key focus for all eBusinesses. AppShield 3.0 delivers a 25 percent performance improvement (compared to AppShield 2.5).

Increased Compatibility and Interoperability
AppShield 3.0 provides built-in compatibility with a broad range of eBusiness components, including Web servers, application servers, load balancers and firewalls. The new release delivers support for SSL Accelerators and OPSEC compliance, providing easy integration, continuous operation and improved performance for enterprise or service provider online environments.

Pricing and Availability
AppShield 3.0 is available immediately for both Windows NT and Solaris platforms. Pricing is on a per server basis with integrator and service provider schedules available in addition to end-user. Pricing starts at $15,000/server.

About Sanctum, Inc. (www.SanctumInc.com)
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. (formerly Perfecto Technologies) pioneered the market for web application security and control software. Sanctum's software works autonomously and continuously to monitor how individuals interact with web applications. By detecting and defending against any unauthorized behavior, Sanctum prevents web application perversion, even if a site has unknown security holes or flaws. Sanctum's customers include industry leaders in banking, retailing, finance, government, and healthcare. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders, including Sequoia Capital, Walden and Intel Corporation. More information about Sanctum may be obtained by visiting the Company's web site www.SanctumInc.com or by calling the Company directly at (408) 855-9500.

For Immediate Release
Contact:

Kevin Pedraja
Sterling Communications
(415) 749-6550
[email protected]