MERCURY INTERACTIVE 2003 WORLDWIDE USER CONFERENCE — Orlando, FLA. — October 8, 2003 — Sanctum Inc., the leader in automated Web application security firewall and testing solutions, today announced it has joined the Mercury Interactive Business Technology Optimization Alliance Program. Mercury Interactive, the global leader in business technology optimization (BTO) provides the Technology Alliance Program to enable BTO technology and software vendors to develop integrations with Mercury� Optimization Center products for IT governance, application delivery and application management.

Sanctum will demonstrate a beta of an integration between its new version of AppScan� QA and Mercury TestDirector� at the Mercury Worldwide User Conference in Orlando this week, Booth #226. Mercury TestDirector, a global test management product in the new Mercury� Quality Center, streamlines the application testing process from requirements management through test planning, scheduling and running tests and defect tracking.

The beta demonstration will show users how to create security tests for their Web application test plans and execute them as part of the normal QA run. The integration will provide QA personnel with centralized control, easy deployment and low maintenance as critical factors that will help QA teams make security a priority as part of their normal testing process.

"Our alliance with Mercury is an important step in Sanctum's continued leadership in application security and our commitment to delivering comprehensive security testing for all enterprise users involved in application development," said Peggy Weigle, CEO of Sanctum, Inc. "As more c-level executives mandate the use of integrated solutions that help QA teams make security a priority, the industry will see an exponential improvement in the quality of software on the market."

About the Mercury Interactive BTO Alliance Program
The Mercury Interactive BTO Alliance Program is designed to enable BTO industry technology and software vendors to develop integrations with Mercury Optimization Center products for IT governance, application delivery and application management. Complementary products from companies in the BTO alliance program include: application servers, enterprise resource planning (ERP), customer relationship management (CRM), system and network management applications and many others.

About AppScan QA
AppScan QA Edition is the only available tool for security testing during the QA phase. With its patented intelligent validation engine, AppScan QA covers the widest array of attack variants to test both new and existing infrastructures, including emerging Web services technologies containing XML and SOAP vulnerabilities. AppScan QA delivers seamless integration into existing test systems, automation to deliver predictive, reproducible results and the ability to output detailed defect analysis results to all standard tracking and analysis systems. In compliance with the Capability Maturity Model (CMM) outlined by the Software Engineering Institute (SEI), AppScan supports software QA and quality management standards, a critical element of delivering quality software to the market.

About Sanctum, Inc.
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity—from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement—even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, Wachovia Strategic Ventures Group, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

AppScan is a trademark of Sanctum, Inc. Mercury and Mercury Interactive are trademarks or registered trademarks of Mercury Interactive Corporation or its subsidiaries in the United States and/or other countries. All other product names referenced are the property of their respective owners and are hereby acknowledged.

For Immediate Release

Contact:

Diane Fraiman
Sanctum, Inc.
(408) 352-2000
[email protected]

Smita Topolski or Tara Dugan
(415) 512-0770
Schwartz Communications, Inc.
[email protected]