AppSecInc Debuts DbProtect(TM), the Industry's Most Comprehensive Database Security Solution.

Global Leader in Database Security Delivers Industry-First, Integrated, Cost-Effective Suite, Removing Barriers to Widespread Deployment of Complete Database Security

NEW YORK and SAN FRANCISCO -- Application Security, Inc. (AppSecInc) (www.appsecinc.com) today unveiled DbProtect(TM), the industry's most comprehensive database security solution. This integrated suite builds on the market-leading AppDetective[TM] and AppRadar[TM] products which are already in use at more than 700 enterprises around the globe.

Delivering best-in-class database security, DbProtect enables organizations to ground security and compliance efforts where most sensitive data lives - in databases. The offering's compelling pricing and packaging options make it simple to deploy security purpose-built for the database.

DbProtect combines discovery, vulnerability scanning, real-time activity monitoring, auditing, and optional encryption enabling customers to dramatically reduce risk, eliminate known vulnerabilities and threats, monitor database access in real-time and demonstrate compliance. All-inclusive, integrated and priced per database, it allows customers to easily deploy what they need, when they need it, and at a price point substantially below that of competitive solutions providing only a subset of the protection and management capabilities.

"Data at rest is data at risk," said Ted Julian, Vice President of Marketing and Strategy for AppSecInc. "Although databases represent the greatest point of exposure for most organizations, they struggle with the complexity and expense associated with wrapping the database in total protection. With DbProtect, AppSecInc is building on what's already considered the industry's best product set by adding industry-first features along with packaging and pricing that makes it easy to get started."

In a survey to be released later this month from the Ponemon Institute, conducted on behalf of AppSecInc, preliminary results highlighted the challenges of scale and complexity facing IT in securing critical databases. Early results indicate that within large organizations:

* More than 88 percent have 100 or more databases in their IT environment, with more than 50 percent managing more than 500 databases.

* More than 73 percent support multiple database types and technologies.

In reflecting upon the findings, Dr. Larry Ponemon, Chairman and Founder of the Ponemon Institute said, "When it comes to securing databases that the majority of respondents classified as 'critical' to their business, complexity is the enemy. With continuous patching and the threat of sensitive data finding its way outside an organization from any number of internal or external sources, automation and driving operational efficiency are of paramount importance."

"Database security is clearly an enterprise priority in 2007," said Scott Crawford, Senior Analyst for Enterprise Management Associates. "Since sensitive data spends the vast majority of its existence in a database, it must be a critical focus and foundation for security and compliance controls. AppSecInc played a pioneering role in this space, and the solutions and pricing announced today address the pressing requirements facing the market."

Database Security, Redefined: Price, Performance, and Peace of Mind

More than a collection of point products, DbProtect spans database discovery, vulnerability assessment, activity monitoring, and optional encryption. With AppSecInc's integrated suite, enterprises benefit from the ability to streamline the process of identifying database vulnerabilities and monitoring them in real-time for misuse and abuse from internal and external sources.

DbProtect's new features fall into three categories:

* Tamper-Evident Privileged Activity Monitoring helps defend against misuse, fraud, and abuse from internal and external users. DbProtect's system security provides these features in a way that will stand-up to auditor scrutiny. For example, even DbProtect administrators can't turn off or otherwise defeat the system.

* Patch Gap Management assists organizations with the prioritization of database vulnerability patches and provides real-time activity monitoring to identify and defend against attack. Improved integration and functionality in this area also makes it easy for organizations to document their efforts and report on progress whether to IT management, executive management, auditors, or regulators.

* Application Awareness allows organizations to more effectively secure their databases and bolster compliance by leveraging business knowledge of these critical assets.

Supporting the most widely used databases (including Oracle Database, Microsoft SQL Server, IBM DB2, and Sybase ASE), DbProtect will be available in the second quarter priced at $3,000 per database, per year.

DbProtect will debut at the RSA Conference 2007 in San Francisco this week in Booth # 536. AppSecInc executives are available to meet with members of the media and market research communities during the conference. To schedule an appointment, please contact Christine Meyers at AppSecInc ([e-mail], 978-491-7156) or Kevin Kosh at CHEN PR ([e-mail], 781-672-3111).

About Application Security, Inc. (AppSecInc)

AppSecInc is the leading global provider of database security solutions for the enterprise with offices in North America and the UK, and a robust partner-reseller network in EMEA, Asia-Pacific, Latin America, and other key markets. AppSecInc's products - the industry's only complete database security solution - proactively secure database applications at more than 700 organizations around the world. Our security experts, combined with our strong support team, deliver up-to-date database protection that minimizes risk and eliminates its impact on business.

Please contact us at 1-866-927-7732 to learn more, or visit us on the web at www.appsecinc.com.

AppSecInc, DbProtect, AppDetective, and AppRadar are trademarks of Application Security, Inc. All other company and product names are trademarks of their respective companies.