Santa Clara, Calif. — July 19, 2002 - In the July 2002 report "Web Intrusion Protection: Defending Web Servers and Applications," IDC recognizes Sanctum as an established market leader in the Web intrusion protection market, which is estimated to grow from $65 million in 2001 to $690 million by 2006, at a compound annual growth rate of 60.5 percent. According to IDC, Web sites, applications and servers remain largely unprotected, prompting increased IT security spending on the Web application layer. The report names Sanctum as the "de facto leader in the space" for its technology innovations and market mindshare. Credited with building the foundation of the Web intrusion protection market, Sanctum introduced the first ever application firewall, AppShield, in 1997. The company continues to pioneer the market, leveraging its patented technology in AppScan, the industry's leading Web application security assessment tool that drives Web application security throughout the application development lifecycle.

"The Web application layer remains the weakest link in corporate IT security despite increased awareness of the problem," said the author of the report Charles Kolodgy, Research Manager, Internet Security Software at IDC. "The Web intrusion protection market has matured rapidly in the last few years, attracting new players and pushing existing leaders to further innovation. IDC projects this market to be one of the fastest growing sectors of the IT security market in the coming years."

"As the market pioneer with more than 250 customers, Sanctum brings unparalleled experience and expertise to the business of securing the Web application layer," said Peggy Weigle, chief executive officer, Sanctum. "By sizing the Web application market, IDC continues to evangelize that it makes more economic sense to prevent hacker attacks rather than to clean up after inevitable break-ins. Working with 58 of the Fortune 100 companies, Sanctum has developed proven technology to address this top IT priority of securing the Web application layer."

AppShield is the industry's leading Web application firewall that provides comprehensive, automatic protection against all types of Web application attacks by monitoring for correct use of the application, blocking the attacker's unauthorized actions, logging IP information and alerting administrators to all attack attempts. A standalone application running on Windows 2000, AppScan is easily adapted into any auditor, Q/A or developer environment. The most powerful vulnerability assessment tool for Web applications, AppScan extends Internet security assessments through all phases of the application lifecycle with the most advanced validation tests for both common web vulnerabilities (CWVs) and application-specific vulnerabilities (ASVs).

To purchase the IDC report, contact:
IDC's volume sales hotline at 508-988-7988 or email [email protected]

About Sanctum, Inc. (www.SanctumInc.com)
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity—from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement—even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, Wachovia Strategic Ventures Group, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

For Immediate Release
Contact:

Tara Dugan or Annie Kim
Schwartz Communications, Inc.
(415) 512-0770
[email protected]