SANTA CLARA, CALIF. — October 15, 2001 - Sanctum, Inc., the recognized leader in Web application control and security software, today announced WORMShield, the only solution available that provides users with automatic, ongoing protection against both known or unknown server-based worm attacks, including recent threats like Code Red and Nimda. A new program within Sanctum's flagship product line AppShield, WORMShield runs autonomously and continuously to ensure the protection of Web applications, defending against the manipulation of core business data without the need for updating patches or installing new rules.

"The threat of malicious worms is only getting worse, making it more difficult than ever for IT and security staff to stay on top of new application attacks, such as Nimda and Code Red," said Jason Painter, Web Master at Coherent Inc. "WORMShield is a one-time fix whose long-term benefits far outweigh the initial investment. Even when I'm away from the office, I know WORMShield is always working to defend our site, providing ongoing, sustained protection. WORMShield eliminates the threat of corrupted files and unnecessary downtime by protecting Coherent from attacks that could put a halt to business."

WORMShield proactively blocks and monitors all unusual or unauthorized behavior anywhere within a Web site, thereby preventing any type of application manipulation via the Web. A one-time fix for all server-based worm attacks, the program eliminates the need for IT and security administrators to apply new patches on every individual server each time a new worm attacks. Additionally, WORMShield attack logs provide users with information about the source of the attack to help end-users and officials immediately stop the epidemic.

"The recent Nimda attacks raised a lot of red flags regarding the security of U.S. business and government core data residing at the application level," said Peggy Weigle, CEO of Sanctum. "As we know, the potential financial loss associated with worms is significant. It is estimated, in fact, that U.S. losses from rampant Internet worms and viruses in 2000 reached $266 billion. With our new program WORMShield, Sanctum continues to prove its commitment to helping organizations protect their core data with an easy to implement, cost-effective solution."

Pricing and Availability
WORMShield is available immediately.

About Sanctum, Inc. (www.SanctumInc.com)
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity—from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement—even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance, and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, First Union eVentures Group, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

For Immediate Release
Contact:

Drea Garrison or Tara Dugan
Schwartz Communications, Inc.
(415) 512-0770
[email protected]