SANTA CLARA, CALIF. — January 8, 2002 - Sanctum, Inc., the established leader in Web application security software, today announced a technology partnership with Netegrity, the leading provider of software solutions for securely managing e-business relationships. The combined strength of Netegrity's SiteMinder� platform and Sanctum's AppShield™ software provides corporations the benefit of controlling access to protected Web resources and controlling user behavior once they are granted access inside the site. The result is secure applications that can only be used in the fashion originally intended by the developer.

AppShield is a flexible and intelligent security solution that allows the user to define the appropriate level of security for the intended application behavior of his site. AppShield automatically protects against all types of Web application attacks, by monitoring for correct use of the application, blocking unauthorized actions, logging the attacker's IP information and alerting the site administrator to all attack attempts. SiteMinder protects online resources through a comprehensive, policy-based infrastructure that ensures only properly authenticated and authorized users get access to critical online resources. Used in conjunction, these complementary security products enable organizations to manage and control end-user privileges and behavior, as well as protect corporate assets from both external Web-based attacks and unauthorized internal use.

"Again and again we've seen the significant cost in dollars and loss of customer confidence when companies experience a security breach, and the problem is escalating. Over the next four years, International Data Corporation predicts the fear of hacker attacks and security breaches will lead to at least a 300 percent jump in corporate and government IT spending," said Peggy Weigle, CEO of Sanctum. "In an environment where information assets are a company's competitive advantage, protecting your critical corporate data with a comprehensive security solution is the only way of ensuring business viability. By offering Sanctum's solutions jointly with Netegrity, we continue to provide customers with the most comprehensive levels of Internet security, from protecting the Web applications to ensuring complete access control."

"The very nature of e-business requires that companies provide their employees, partners, and customers with access to critical corporate resources," said Tim Dempsey, vice president of marketing at Netegrity. "SiteMinder and AppShield limit a company's vulnerability by ensuring that only authorized individuals access appropriate information, thereby protecting the integrity of those resources. Together, these products provide an outstanding infrastructure to protect applications across multiple levels."

About Sanctum, Inc. (www.SanctumInc.com)
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity-from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement-even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, Wachovia eVentures, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

For Immediate Release
Contact:

Dara Sklar or Tara Dugan
Schwartz Communications, Inc.
(415) 512-0770
[email protected]