Press Releases

SAN JOSE, CA and NEW YORK, NY – July 25, 2006 – Skybox® Security, Inc., the leader in Security Risk Management (SRM), and Application Security, Inc. (AppSecInc ®), leader in database security, today announced the formation of a partnership to add application and database vulnerability scanning results to Skybox View’s unique virtual modeling and simulation technology. The solution is delivered as a new capability in the third-generation release of the award-winning Skybox View® Suite (see today’s related announcement at www.skyboxsecurity.com) For the first time, organizations can have a centralized and normalized view of application, database and network risk-related data for the purpose of performing detailed business and technical impact analysis in order to reduce risk, reduce IT workload, streamline policy compliance and automate audit processes.

Application- and database-related security incidents are one of the toughest challenges facing organizations tasked with protecting sensitive business and personal data. In fact, market research firm Gartner estimates that 75 percent of attacks that take place occur at the application layer. Through exploitation of application vulnerabilities, attackers can often access stores of sensitive corporate data and cause irreparable damage. This partnership seeks to address enterprise needs for improved application layer security. Driven by customer demand, the Skybox and Application Security, Inc.. agreement encompasses three distinct components: product integration between the Skybox View™ suite and AppDetective™; sales referrals; and joint marketing cooperation.

“Skybox View's unique virtual modeling and simulation capability, when used in combination with AppDetective, provides customers visibility into application-level vulnerabilities in context of their larger risk management process,” said Ted Julian, vice president of marketing and strategy for Application Security, Inc.
Skybox View 3.0 models vulnerabilities found by application and database scanners and enables organizations to run attack simulations in order to understand attack paths to critical applications; prioritize application vulnerabilities in context of their impact on business assets and policies; generate application-related risk metrics and enable more efficient remediation planning taking application and network configurations into consideration.

AppDetective, Application Security, Inc’s flagship product, is a network-based, vulnerability assessment scanner that discovers database applications and vulnerabilities within the enterprise. AppDetective is part of the company’s comprehensive vulnerability management solution, recognized throughout the industry as the most complete and widely-deployed of its kind. In addition to AppDetective, the suite comprises AppRadar™ for real-time database activity monitoring, and DbEncrypt™ for column-level encryption.

“With Application Security, Inc.’s support, the Skybox View vulnerability dictionary becomes the most comprehensive in the industry, representing a superset of CVE and vulnerabilities that result from network scanning, application scanning and database scanning results. Duplication is eliminated and results are normalized across multiple vendors,” said Gidi Cohen, chief strategy officer for Skybox Security.

The partnership includes three joint business efforts to develop and promote the value proposition of the combined product offering:

• Product Integration: AppDetective scanning results are incorporated into the Skybox View model.
  
• Sales Referrals: Skybox and Application Security, Inc. sales representatives will conduct joint sales calls to mutual customers who benefit from either an integrated product offering or the addition of one of the company’s respective solutions.
  
• Joint Marketing: Skybox and Application Security, Inc. have agreed to conduct joint marketing programs including joint collateral and presentations, joint website exposure and promotion, and educational webcasts that promote the value proposition of the combined product offering.
  

Availability

The application and database scanner support is available immediately for all existing and new Skybox Secure customers at no additional cost.

About Application Security, Inc. (AppSecInc)

AppSecInc is the leading provider of application security solutions for the enterprise. AppSecInc's products -- the industry's only complete vulnerability management solution for the application tier -- proactively secure database applications at more than 500 organizations around the world. By securing data at its source, our customers can more confidently extend their business with customers, partners and suppliers while meeting regulatory compliance requirements. Our security experts, combined with our strong support team, deliver up-to-date application safeguards that minimize risk and eliminate its impact on business.

Please contact us at 1-866-927-7732 to learn more, or visit us on the web at www.appsecinc.com.

About Skybox Security

Skybox® Security, the leader in the Security Risk Management (SRM) market, pioneered the science of security risk and network policy compliance analytics. The company’s award-winning software product suite, Skybox View®, is the first decision support solution that automates the manual and inefficient processes of risk assessment, policy compliance, remediation planning as well as change assurance. With Skybox View organizations can proactively and continuously predict and protect their confidential information, ensure high availability and integrity of critical IT assets, measure progress and reduce IT workload.

The Skybox View Suite consists of two major applications - Skybox Secure™ and Skybox Assure™ - based on a common foundation for virtual modeling and simulation. For the first time organizations can visualize, track over time and audit their security and policy profile. Skybox View’s unique virtual model can be safely attacked, analyzed and changed for the purpose of making better decisions and generating actionable information, in most cases within minutes.

Founded in 2002, Skybox is headquartered in San Jose, California and is privately held. Skybox View is a proven solution successfully deployed at highly respected Global 2000 companies worldwide. For more information contact (408) 441-8060 or www.skyboxsecurity.com.

###

AppSecInc is a trademark of Application Security, Inc. All other company and product names are trademarks of their respective companies.

Contact:
For Skybox Security, Inc.:
Leslie Kesselring
503-656-2847
Kesselring Communications, LLC
leslie@kesselring.net

For AppSecInc:
Kevin Kosh
CHEN PR, Inc.
kkosh@chenpr.com
781-672-3111