Alert Logic Helps Customers to Comply with PCI DSS Requirements.

On Demand Network Security Solution Enables Retailers to Avoid Fines, Protect Customer Data

HOUSTON -- Alert Logic, provider of award-winning network security solutions, today announced that it has helped its customers more easily comply with the Payment Card Industry Data Security Standard (PCI DSS). Any company that accepts credit cards must meet the standard's requirements or face higher transaction fees or fines.

The PCI DSS, which was created by American Express, Discover Financial, JCB, MasterCard Worldwide and Visa International, aims to improve payment account security throughout the credit card transaction process. The PCI DSS has 12 security-related requirements that establish common processes and precautions for handling, processing, storing, and transmitting credit card data.

Recent data security breaches underscore the need for compliance with the PCI DSS. This is such an important issue that the Payment Card Industry Security Standards Council has expanded the number of companies that must comply to include many small and mid-sized businesses. Meeting PCI DSS requirements ensures that merchants are doing everything possible to protect cardholder data from being lost or stolen.

GSI Commerce is a leading provider of outsourced e-commerce solutions that enable retailers, branded manufacturers, entertainment companies and sports organizations to operate e-commerce businesses. Using Alert Logic's network security solution, GSI maintains compliance with the PCI DSS to protect cardholder data for its online business partners, which include many well-known U.S. brands and retailers.

"Compliance with the PCI DSS is an absolute must for our business. Part of our IT systems audit requires that we have security controls in place for our intrusion defense systems and that we monitor these systems around the clock," said Wyman Lewis, Director of Information Security for GSI Commerce. "Using Alert Logic's managed threat defense solution, in conjunction with our other security measures, helps us to demonstrate compliance with the PCI DSS."

Alert Logic's Threat Manager[TM] leverages a Software-as-a-Service (SaaS) delivery platform to combine intrusion protection, vulnerability management and IT compliance automation in a single on-demand product. Threat Manager includes capabilities that enable companies to meet key parts of the PCI DSS version 1.1 requirements, including:

* Requirement 6.2: Establish a process to identify newly discovered security vulnerabilities and update standards to address new vulnerability issues.

* Requirement 11.2: Run internal and external network vulnerability scans at least quarterly, which must be performed by an outside vendor qualified by PCI.

* Requirement 11.4: Use network intrusion detection systems, host-based intrusion detection systems, and intrusion prevention systems to monitor all network traffic and alert personnel to suspected compromises. Keep all intrusion detection and prevention engines up-to-date.

"Complying with the PCI DSS is critical because the ability of merchants to accept credit cards is a core component of business today. Meeting the PCI DSS requirements means that businesses are doing what is best for their customers by protecting cardholder data," said Michael Turner, CEO of Alert Logic. "With our on-demand network security solution, Alert Logic provides small and mid-sized merchants the easiest way to meet many of the PCI DSS requirements without becoming a PCI security expert."

Alert Logic is a PCI Security Standards Council Approved Scanning Vendor and has been certified to perform PCI assessments according to the PCI DSS. As an Approved Scanning Vendor, Alert Logic is certified to help merchants manage data security risks, evaluate the security of their systems that store payment account data, and assist them in achieving compliance with the PCI DSS.

About Alert Logic

Alert Logic provides on-demand intrusion protection, vulnerability management, and IT compliance automation solutions that enable its customers to detect and contain network threats, discover and correct vulnerabilities, and help ensure compliance with policies and regulations. Its software-as-a-service platform features rapid deployment, zero maintenance, and no hardware or software costs. As a result, Alert Logic customers benefit from the easiest solution for network protection. In April 2007, Alert Logic received the highest ranking - five stars - and the "best buy" rating from SC Magazine in a product review of security services. Headquartered in Houston, Texas, more information about Alert Logic is available at http://www.alertlogic.com.