Santa Clara, Calif. - December 18, 2000 - Sanctum, Inc., the established leader in automated Web application control and security software, today announced that TruSecure Corporation (formerly ICSA.net), a leading Internet security assurance company will now offer Web application security certification using Sanctum's AppScan. AppScan is the first completely automated tool capable of identifying and recommending fixes for both known and unknown security weaknesses in Web applications.

"We are very excited to incorporate Sanctum's AppScan into our TruSecure Advanced Application program," said Adam Joseph, president and CEO TruSecure Corporation. "There is a large and rapidly growing demand for the services we will be able to provide with the help of Sanctum's AppScan. By leveraging AppScan, we will be able to help our customers close the gap between two competing business goals: the necessity of comprehensive application security and the desire to shorten time to market."

"As the media keeps reminding us with daily hacking stories, the Web application is the most vulnerable part of any eBusiness. Security that stops at the network level simply is not enough," said Peggy Weigle, president and CEO of Sanctum. "Sanctum's alliance with TruSecure provides service providers and eBusinesses with world-class technology to identify, analyze and recommend a solution to their Web application security requirements. We are proud that AppScan has been added to TruSecure's Application Review program."

AppScan dramatically reduces the time and effort required to build security into eBusiness applications during development, deployment and maintenance. Leveraging the advanced capabilities of Sanctum's Policy Recognition Engine as well as the company's "RoboHacker" and "RoboAdvisor" technology, AppScan autonomously finds exploitable weaknesses and provides recommendations for repairing them. Unlike other audit tools that rely on a database of known vulnerabilities, AppScan can identify previously unidentified weaknesses, making the product useful for analyzing custom applications.

Featuring embedded proprietary technology to prevent misuse, AppScan is ideal for security consultants and auditors who would like to integrate an application-level audit into their overall network evaluation services. With a web-based client and a Linux server, AppScan also features multi-user capabilities. AppScan supports SSL and works with applications running on Microsoft IIS or server products from Netscape and Apache.

About TruSecure Corporation
TruSecure Corporation is a worldwide leader in Internet security assurance. The company works to ensure a secure Internet economy through its three integrated businesses: TruSecure Information Security Solutions, ICSA Labs and the TruSecure Media Group.

TruSecure Solutions help hundreds of private and public organizations safely pursue their Internet initiatives by securing their mission-critical information and systems. ICSA Labs is the security industry's central authority for intelligence, research, and product testing, certifying more than 95 percent of the market's anti-virus software, network firewalls, intrusion detection, cryptography and IPSec products. The TruSecure Media Group consists of Information Security Magazine, the leading industry publication with more than 45,000 readers; NTBugtraq, the leading online source of Microsoft-related security intelligence; and TruSecure.com, a leading security destination Web site. For more information about TruSecure Corporation and its capabilities, visit www.trusecure.com.

About Sanctum, Inc. (www.SanctumInc.com)
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. (formerly Perfecto Technologies) pioneered the market for web application security and control software. Sanctum's software works autonomously and continuously to monitor how individuals interact with web applications. By detecting and defending against any unauthorized behavior, Sanctum prevents web application perversion, even if a site has unknown security holes or flaws. Sanctum's customers include industry leaders in banking, retailing, finance, government, and healthcare. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders, including Sequoia Capital, Walden and Intel Corporation. More information about Sanctum may be obtained by visiting the Company's web site www.SanctumInc.com or by calling the Company directly at (408) 855-9500.

For Immediate Release
Contact:

Kevin Pedraja
Sterling Communications
(415) 749-6550
[email protected]