SANTA CLARA, CALIF. — January 7, 2002 - Sanctum, Inc., the recognized leader in Web application control and security software, today announced that the U.S. Patent and Trademark Office has issued the company U.S. Patent No. 6,311,278 for its Dynamic Policy Recognition Engine (DPRE). The core technology of Sanctum's AppScan and AppShield products, the DPRE automatically and continuously defines policy for Web sites without the use of signatures or rules, enforcing the intended business behavior of all Web applications, from the Web site interface to the back-end databases.

"Sanctum defined the market for Web application security four years ago and continues to lead the category with proven products and a solid commitment to innovation and intellectual property leadership," said Gil Raanan, founder, senior vice president and general manager at Sanctum. "The patent for our Dynamic Policy Recognition Engine further asserts Sanctum's leadership position by bringing a level of automation and accuracy to intrusion prevention systems never known before now. Our customers rely on us to provide unparalleled protection for their online assets and we are confident that Sanctum's AppShield and AppScan offer the most effective solution to detect and defend against all attempts to manipulate the Web application."

The DPRE technology provides automatic and comprehensive protection of core business information and data by defining a policy of authorized behavior allowed for each specific user, rather than relying on a set of rules or signatures defined for large groups of users. This takes behavioral security enforcement to a new level. As a result of this policy-based approach, Sanctum's DPRE effectively protects both known and unknown vulnerabilities without requiring IT managers to update new versions of vendor applications with patches.

"Web application security is an important component of any business' overall Internet security structure," said Pete Lindstrom at Hurwitz Group. "This patent is a significant step for Sanctum to further establish market leadership and focus on continued development of the products based on the core DPRE technology. Corporations must address application security with an around-the-clock, automatic solution, rather than with reactive fixes for security breaches. Sanctum's policy-based solution is a more effective approach than other rules-based Web application security technologies, since it offers users automatic, 24/7 protection against intruders exploiting Web applications."

Sanctum's AppScan and AppShield offer a complete security solution dedicated to automatically protecting application behavior regardless of changes or updates to any application on or behind the Web server. AppScan, the most powerful vulnerability assessment tool for Web applications, offers the efficiency, accuracy and flexibility needed today to extend Internet security audits through all phases of the application lifecycle. AppShield is the leading online security solution that provides comprehensive, automatic protection against all types of Web application attacks, allowing the user to preserve the intended application behavior of his site.

The rights granted under this patent are effective October 30, 2001.

About Sanctum, Inc. (www.SanctumInc.com)
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity-from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement-even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, Wachovia eVentures, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

For Immediate Release
Contact:

Tara Dugan or Dara Sklar
Schwartz Communications, Inc.
(415) 512-0770
[email protected]