SANTA CLARA, CALIF. — February 2, 2004 — Sanctum, Inc., the established leader in automated Web application security firewall and testing software, today announced the availability of AppShield 4.5�, the next generation of Sanctum's patented application security firewall. The most advanced application firewall available in the market, AppShield 4.5 offers bulletproof defense for large application deployments by addressing critical operational requirements, including application segregation with granular security settings for improved flexibility, and role-based administration and distributed management capabilities to drive security best practices throughout the organization. As pioneered by Sanctum in 1997, application firewalls are now a ubiquitous component of securing enterprises worldwide. The new version of AppShield meets the enterprise-class requirements of deploying comprehensive application security, while reducing corporate risk and aiding regulatory compliance.

Building on its proven technology, AppShield 4.5 supports critical operational requirements for large enterprises deploying application security in complex environments. AppShield 4.5 supports application segregation with granular security settings for each individual application, improving flexibility for enterprise users. For large organizations with multiple security administrators, the new role-based administration functionality allows each administrator to have specific, unique privileges. This separation of administrative duties allows organizations to better adhere to internal security best practices and increase overall enterprise security. The enhanced distributed management features in AppShield 4.5 enable teams of administrators to easily manage large AppShield farms and define differing security policies for multiple, complex applications.

"Since the introduction of AppShield in 1997, Sanctum has dominated the application firewall space by demonstrating how vital the protection of the application layer is to defending the entire network infrastructure of the enterprise. Our continued commitment to AppShield development and technology innovation have set it apart as a critical, ubiquitous component of an organization's overall security posture," said Steve Orrin, CTO of Sanctum, Inc. "With the enhanced flexibility and management capabilities of version 4.5, large enterprises can defend against threats to even the most complex application environments, ensuring internal and external compliance and reducing risk throughout the organization."

AppShield is the first and only application firewall built on behavioral learning that integrates quickly and easily into any Internet infrastructure, maintaining application behavior 24/7 without the need for signatures or rules. AppShield provides maximum security in minimal time by preventing, logging and alerting administrators to any type of application manipulation through the browser, including both known and unknown attacks by hackers, worms and other imminent security threats. Through its patented Dynamic Policy Recognition Engine (DPRE) technology, AppShield automatically and intelligently identifies the legitimate requests made of an e-business site and permits only those actions to take place, enforcing the Web and business logic of the site.

Enterprise Manageability:
AppShield 4.5 supports multiple administrators with distributed management support, increasing overall security by reducing risk of misuse or abuse of the system security.

• Role-based management supports multiple administrators being assigned different privileges, enforcing security best practices throughout the organization

Application Specific Security Settings:

• A single AppShield or AppShield farm can protect different Web applications/servers with differing security levels and differing modes of operation for flexible protection.

Enhanced Security and Flexibility:
New security settings added to AppShield 4.5 include:

• Support for standard Certificate Revocation Lists (CRLs)
• Enhanced SQL injection protection

Availability
AppShield 4.5 is available immediately for Windows 2000, Windows 2003 and Solaris platforms.

About Sanctum, Inc.
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity—from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement—even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, Wachovia Strategic Ventures Group, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

For Immediate Release

Contact:

Diane Fraiman
Sanctum, Inc.
(408) 352-2000
[email protected]

Sarah Thornton or Tara Dugan
Schwartz Communications, Inc.
(415) 512-0770
[email protected]