AlterPoint and Skybox Security Announce Partnership to Converge IT Security Risk Management with Network Configuration Management.

AUSTIN, Texas & SAN JOSE, Calif. -- AlterPoint, Inc.

E[acute accent]--Creates First End-to-End Risk Management Solution to Model, Analyze, and Mitigate Risk Exposures and Enforce Policy Compliance

E[acute accent]AlterPoint(TM), Inc., the leader in intelligent Network Change and Configuration Management (NCCM) solutions, and Skybox(R) Security, Inc., the leader in Security Risk Management (SRM), today announced a partnership that delivers the first end-to-end risk management solution. Driven by the need to enable business-oriented risk reporting and analysis of vulnerabilities as well as to satisfy audit and regulatory requirements, AlterPoint and Skybox have integrated the workflow and data exchange of their respective solutions. By combining AlterPoint DeviceAuthority(R) with Skybox View(TM), security management and network operations organizations can work as a unit to model and analyze device configurations and security controls and dramatically reduce the time to mitigate vulnerabilities. The overall goal of this convergence is to transform security information into business-oriented risk, audit and compliance intelligence and ultimately reduce the IT workload required to manage risk. E[acute accent]"The pressing need to increase the speed of vulnerability mitigation, coupled with pressure to meet new regulatory requirements, is driving the convergence of vulnerability management and IT security management functions," reports Gartner in a recent article written for CSO entitled, "Vulnerability and IT Security Management are Converging." E[acute accent]The integration of Skybox View's unique virtual modeling and simulation capability with DeviceAuthority's network configuration and release management functions enables organizations to deploy a predictive, closed-looped security risk assessment and change management process. Network configurations can be deployed with confidence that they are effective from an access, policy compliance, and risk perspective. With this integrated offering, organizations can achieve the right balance between the connectivity needs of the business while minimizing risk exposure through a virtual analysis and staging environment. The two technologies complement each other by offering a unique and comprehensive set of capabilities to:

E[acute accent]--Classify business assets

E[acute accent]--Discover configurations, vulnerabilities, controls and rules

E[acute accent]--Visualize threats, configurations and rules

E[acute accent]--Analyze configuration effectiveness and quantify risk exposures

E[acute accent]--Validate configuration and mitigation changes

E[acute accent]--Deploy, enforce, and manage standard network configurations

E[acute accent]--Monitor for continuous compliance and improvement

E[acute accent]"Offering our Security Risk Management software as part of a comprehensive change management solution is a natural evolution of our go-to-market strategy. We partnered with AlterPoint because a significant number of organizations want our software as the backbone of a comprehensive end-to-end offering that effectively combines risk assessment with network change and configuration management," said Gidi Cohen, chief strategy officer and founder for Skybox. E[acute accent]"To reduce risk and meet service levels, enterprises are demanding a consolidated approach for security, configuration and change across applications, servers and networks," said Dave Barry, vice president for business development for AlterPoint. "By partnering with Skybox we can deliver to our customers deeper visibility into their security risk profile and close the loop with the capabilities to remediate problems." E[acute accent]The integrated solution will be co-marketed by the two companies through joint sales and marketing initiatives. Mutual customers will be supported independently by each of the company's respective support organizations.

E[acute accent]About AlterPoint

E[acute accent]AlterPoint develops intelligent NCCM solutions that have pioneered the evolution of network management. Enterprises worldwide rely on the visibility, automation and governance provided by AlterPoint's award-winning product, DeviceAuthority, to proactively manage compliance, security, change and inventory across their multi-vendor network to maximize the performance and availability of their IT infrastructure. DeviceAuthority scales to support the largest enterprise networks and integrates with the leading network and systems management technologies. Founded in 2001, AlterPoint is headquartered in Austin, Texas, with offices in Europe and Asia. For more information, please visit www.alterpoint.com

E[acute accent]About Skybox Security

E[acute accent]Skybox(R) Security pioneered the science of quantifiable security risk analysis and is driving the advancement of the Security Risk Management (SRM) market. The company's award-winning product suite, Skybox View(TM), is the first software solution to create a virtual model of an organization's network security and access profile. E[acute accent]This virtual model can be safely attacked, changed and analyzed for the purpose of improving the security profile of the network as well as validating the impact of proposed security and access controls within defined network policies. The result is a more secure network, operational efficiency and reduced IT workload. Skybox View Suite supports two major applications -- Skybox Secure(TM) and Skybox Assure(TM) -- through a modular, scalable suite. Additional news and information about the company is available at www.skyboxsecurity.com.

E[acute accent](C) 2001-2006 AlterPoint, Incorporated. All Rights Reserved. AlterPoint, DeviceAuthority, and their respective logos are trademarks of AlterPoint, Inc. in the United States and other jurisdictions. Skybox View(TM), Skybox Secure(TM) and Skybox Assure(TM) are trademarks of Skybox(R) Security, Inc. All other products are trademarks or registered trademarks of their respective companies.