Santa Clara, Calif. - February 5, 2001 - Sanctum, Inc., the established leader in automated Web application control and security software, today announced it has entered into a strategic alliance with PricewaterhouseCoopers, which has adopted Sanctum's AppScan 2.0 as an integral tool within its global information security practice. AppScan 2.0 is the first and only security software to automate the complex, manual task of auditing Web applications.

"Networks are becoming more resilient and operating systems are becoming more tolerant. At the same time, Web applications are becoming more complex," said Fred Rica, partner, PricewaterhouseCoopers. "In addition, many Web applications are not developed using stringent application development processes. This combination of complexity and vulnerability makes Web applications particularly susceptible to hackers. Web application vulnerabilities can be exploited in order to gain access to a company's valuable digital assets. We will use Sanctum's AppScan product to help clients proactively identify and manage Web application security risks. AppScan 2.0 provides a high level of risk assessment and analysis-delivering results and recommendations in a short period of time."

Currently, the manual process of performing a Web application security review is expensive and time-consuming. With AppScan 2.0, security consultants can detect, assess and assign severity and success ratings to both known and unknown Web application vulnerabilities. AppScan 2.0 then allows a security consultant to provide the end user with customized reports recommending fixes for the vulnerabilities it finds. This increases productivity by allowing more assessments to be completed in less time, greatly improving efficiency and accelerating return on investment (ROI). AppScan 2.0 has been engineered to deliver the highest levels of automation and customization, extending the benefits of the review process to all phases of the application development lifecycle.

AppScan 2.0 allows consultants to add an additional layer of Web application-level vulnerability testing over network evaluation, providing a more comprehensive view of a corporation's security posture

"This alliance with PricewaterhouseCoopers represents an opportunity to extend our solutions into new markets on a global scale and help businesses protect the range of digital assets that can be accessed via application-level breaches," said Peggy Weigle, president and CEO of Sanctum, Inc. "PricewaterhouseCoopers is recognized as a leader in proactive risk management, with a high level of expertise in network, operating system and application-level security. AppScan 2.0 complements PricewaterhouseCoopers' security vulnerability and assessment services perfectly-allowing the most comprehensive analysis and recommendations on security risks to be generated in a fraction of time versus traditional manual analysis."

About PricewaterhouseCoopers
PricewaterhouseCoopers (www.pwcglobal.com) is the world's largest professional services organization. Drawing on the knowledge and skills of more than 150,000 people in 150 countries, the organization helps clients solve complex business problems and measurably enhance their ability to build value, manage risk and improve performance in an Internet-enabled world. PricewaterhouseCoopers refers to the member firms of the world-wide PricewaterhouseCoopers organization.

About Sanctum, Inc. (www.SanctumInc.com)
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. (formerly Perfecto Technologies) pioneered the market for Web application security and control software. Sanctum's software works autonomously and continuously to monitor how individuals interact with Web applications. By detecting and defending against any unauthorized behavior, Sanctum prevents Web application perversion, even if a site has unknown security holes or flaws. Sanctum's customers include industry leaders in banking, retailing, finance, government, and healthcare. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders, including Sequoia Capital, Walden and Intel Corporation. More information about Sanctum may be obtained by visiting the Company's Web site www.SanctumInc.com or by calling the Company directly at (408) 352-2000.

For Immediate Release
Contact:

Tara Dugan or Elizabeth Holwerda
Schwartz Communications, Inc.
(415) 512-0770
[email protected]

Kate Oliver
PricewaterhouseCoopers
(860) 241-7333
[email protected]