Santa Clara, Calif. — September 27, 2002 - Sanctum, Inc., the established leader in Web application security software, today announced new interoperability between Sanctum's Web application firewall AppShield 4.0™ and IBM Tivoli Risk Manager [NYSE: IBM]. AppShield adds application-level security and intelligence to Tivoli Risk Manager to provide a detailed view of all incoming and outbound HTTP traffic, protecting against both known and unknown Web application intrusions. IBM Tivoli Risk Manager simplifies and correlates the events generated by AppShield and other integrated security products, enabling Global 2000 enterprises to assess the extent and severity of attacks quickly and effectively.

"IBM customers are increasingly demanding protection for their Web application layer. AppShield's positive security model allows IBM Tivoli Risk Manager to automatically be aware of and thwart any potential Web application-level threat that may compromise our customers' Web environment," said Arvind Krishna, vice president of security products, Tivoli Software, IBM. "With the new interoperability between Sanctum and Tivoli software, enterprises can extend the self-protecting features of Tivoli Risk Manager to the Web application level."

Sanctum's AppShield 4.0 is the most advanced Web application firewall available in the market, providing a failsafe defense against application-level breaches. Through its patented Dynamic Policy Recognition Engine (DPRE) technology, AppShield automatically and intelligently understands the application behavior, anticipates the legitimate requests made of an e-business site and permits only those actions to take place, thereby enforcing the Web and business logic of the site. AppShield blocks even the most advanced attacks including those that are yet to be discovered or published. AppShield integrates quickly and easily into any Internet infrastructure, maintaining application behavior 24/7 without the need for signatures or rule updates. AppShield delivers measurable ROI to enterprises by reducing the time and the cost associated with installing reactive fixes for new, imminent Web security threats.

"Sanctum is pleased to announce IBM Tivoli Risk Manager integration in its ongoing commitment to bring application-level security across the entire IBM Web enabled environment," said Gili Raanan, founder and senior vice president of products at Sanctum. "Combined with our integration with IBM WebSphere infrastructure software and IBM Tivoli Access Manager, IBM customers will have an environment that provides comprehensive application security, with ease of integration and management."

IBM Tivoli Risk Manager enables organizations to centrally manage attacks, threats and exposures by correlating security information from intrusion detection systems, firewalls, anti-virus applications and other products that affect security, then provides self-protecting, self-healing countermeasures to protect an enterprise proactively. The integrated security management capability of IBM Tivoli Risk Manager allows system administrators to easily monitor and assess security risks in real-time across an enterprise's multiple security checkpoints. Additionally, AppShield's extensive forensic capabilities can be used to tailor automated countermeasures as well as support legal action against would be hackers.

Availability
IBM Tivoli Risk Manager and Sanctum AppShield 4.0 are currently available worldwide.

About Sanctum, Inc. (www.SanctumInc.com)
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity—from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement—even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, Wachovia Strategic Ventures Group, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

For Immediate Release
Contact:

Tara Dugan or Annie Kim
Schwartz Communications, Inc.
(415) 512-0770
[email protected]