Santa Clara, Calif. — September 19, 2002 - Sanctum, Inc., the established leader in Web application security software, today announced it has joined Sun Microsystems, Inc. to provide Web application security to the Sun iForce [SM] Perimeter Security solution. As part of the seven-layer stack of best-in-class security components, Sanctum's AppShield 4.0� application firewall will provide application security technology, delivering comprehensive detection, prevention and response that enterprises need to protect their mission critical digital assets. By providing a single, integrated defense system, the iForce Perimeter Security solution helps companies quickly deploy multi-layered security to protect their vital business information and networks against malicious attacks and corruption.

Sanctum joins an elite list of iForce partners, including Check Point Software Technologies, Symantec, e-Security, Trend Micro and Tripwire, in providing technology for the iForce Perimeter Security solution. This solution complements existing encryption and authentication systems to form a resilient multi-layer barrier against unauthorized intrusions and attacks.

"With Sun's enhanced iForce Perimeter Security solution, corporations can now assess and stop threats at all levels, greatly reducing the time, cost and worry of maintaining disparate security systems," said Joe Akers, director, Industry Solutions at Sun. "We are pleased to have a leader like Sanctum join our solution to provide the web application security firewall technology."

Sanctum's AppShield stops application attacks by utilizing a positive security model to help ensure that application behavior is maintained as originally intended by the developer. AppShield identifies legitimate requests made of an e-business site and permits only those actions to take place. AppShield requires no patches, signatures or continual updates to provide 24/7 online defense against any type of application manipulation through the browser. Sanctum's technology helps customers increase the speed and ease of application deployment in a secure environment.

The solution has been integrated and tested in Sun's iForce Solution Center to verify that each component of the iForce Perimeter Security solution will operate seamlessly together, including a unified management console running on the Solaris� 8 Operating Environment. The solution's rack-optimized platform simplifies deployment, helping enterprises to immediately realize the benefits of reduced administration costs and increased protection of their digital assets.

"Deploying a comprehensive perimeter security solution is a complicated puzzle for enterprises of all sizes. Sun has recognized the enormous demand for a simple, integrated security solution comprised of the best technology tailored to meet a company's specific business needs," said Gili Raanan, founder and senior vice president of products at Sanctum. "A proven industry leader, Sun is taking some of the best-in-class components for each layer, integrating them into a certified, turnkey solution and providing a single point of management greatly simplifying installation and deployment to make security an easily attainable goal for all enterprises."

"As companies move more and more of their mission-critical applications to the Internet, they need to be able to have rock-solid protection of the assets behind these Web-based applications. We are truly excited to be working with Sanctum and Sun to deliver best-of-breed Web application security to our customers," said Richard Martini, president and CEO of Diamond Micro Solutions, a Sun iForce Regional Systems Provider.

Pricing and Availability
The iForce Perimeter Security solution is now available. For more information, contact Sun at www.sun.com/executives/iforce/solutions/sun_ps

About Sanctum, Inc. (www.SanctumInc.com)
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity—from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement—even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, Wachovia Strategic Ventures Group, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

For Immediate Release
Contact:

Tara Dugan or Dara Sklar
Schwartz Communications, Inc.
(415) 512-0770
[email protected]