SANTA CLARA, CALIF. — December 8, 2003 — Sanctum, Inc., the leader in automated Web application security firewall and testing solutions, today announced that the integration between Sanctum's AppScan� QA 4.0 and Mercury TestDirector 8.0 has been validated by Mercury Interactive, the global leader in business technology optimization (BTO).

The pioneer of Web application security solutions across the application lifecycle, Sanctum delivers comprehensive integrated security testing within familiar application development and testing environments. Mercury Interactive provides comprehensive BTO offerings for IT governance, application delivery and application management. With this integration, customers of Sanctum and Mercury can make security a priority for QA teams while reducing the cost and time to fix security-related defects.

The integration of AppScan QA with Mercury TestDirector will allow customers to easily test for security defects as a part of the daily QA process, enabling organizations to centrally manage and run all aspects of Web application testing-functionality, load and security-from a single environment, providing them with a lower total cost of operation, reduced business risk and accelerated delivery of secure applications.

"Integrating with Mercury is an important step in Sanctum's continued leadership in application security and our commitment to delivering comprehensive security testing for all enterprise users involved in application development," said Peggy Weigle, CEO of Sanctum, Inc. "Providing QA teams with integrated solutions that enable them to make security a priority, will exponentially improve the quality of software on the market."

"Mercury partners with companies who have complimentary products and technologies that accelerate our customer's ability to optimize business value from IT," said Jim Hare, director of technology alliances at Mercury Interactive. "This integration provides customers with an easy-to-use, integrated security testing product that helps improve the quality and performance of mission-critical security applications."

About the Mercury Interactive BTO Alliance Program
The Mercury Interactive BTO Alliance Program is designed to enable BTO industry technology and software vendors to develop integrations with Mercury Optimization Center products for IT governance, application delivery and application management. Complementary products from companies in the BTO Alliance Program include: application servers, enterprise resource planning (ERP), customer relationship management (CRM), system and network management applications and many others.

About AppScan QA
AppScan QA Edition is the only available tool for security testing during the QA phase. With its patented intelligent validation engine, AppScan QA covers the widest array of attack variants to test both new and existing infrastructures, including emerging Web services technologies containing XML and SOAP vulnerabilities. AppScan QA delivers seamless integration into existing test systems, automation to deliver predictive, reproducible results and the ability to output detailed defect analysis results to all standard tracking and analysis systems. In compliance with the Capability Maturity Model (CMM) outlined by the Software Engineering Institute (SEI), AppScan supports software QA and quality management standards, a critical element of delivering quality software to the market.

About Sanctum, Inc.
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity—from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement—even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, Wachovia Strategic Ventures Group, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

AppScan is a trademark of Sanctum, Inc. Mercury and Mercury Interactive are trademarks or registered trademarks of Mercury Interactive Corporation or its subsidiaries in the United States and/or other countries. All other product names referenced are the property of their respective owners and are hereby acknowledged.

For Immediate Release

Contact:

Diane Fraiman
Sanctum, Inc.
(408) 352-2000
[email protected]

Schwartz Communications, Inc.
Sarah Thornton or Tara Dugan
(415) 512-0770
[email protected]