Application Security, Inc. Announces DbProtect 2008.2.

Industry's Most Comprehensive Database Security Suite Enhanced with Enterprise-Class Reporting Capabilities

NEW YORK & SAN FRANCISCO -- Application Security, Inc., the leading provider of database security solutions for the enterprise, today announced DbProtect[TM] 2008.2. The new version of the DbProtect database security suite will provide customers with integrated vulnerability assessment and database activity monitoring dashboards and reporting templates. Given today's increased regulatory initiatives involving enterprise data and data security, flexible and customizable reporting capabilities are especially critical.

In contrast to activity monitoring point products, which use proprietary reporting and are limited to network events, DbProtect now offers more than 100 different reports and combines vulnerability assessment and activity monitoring data. As a result, organizations gain a more complete understanding of the state of their database controls and how they relate to security and compliance requirements. Based on industry-leading Cognos infrastructure, DbProtect reports include trending, progress, privileged activity, patch-gap analysis and compliance templates.

"Aggregating and packaging information from multiple application vulnerability tools, services and sources into a consistent reporting format aligned with the organizational model is essential for enabling the achievement of remediation work tasks by multiple teams aligned with risk and capacity constraints," said James Routh, CISO, Depository Trust & Clearing Corporation. "DTCC seeks help from our important vendors to provide this capability, enabling us to focus on the completion of the remediation work as opposed to simply the discovery of new vulnerabilities."

In addition to enhanced reporting, dashboard and customization capabilities, DbProtect 2008.2 rounds out scanning and monitoring support to include both network and host-based deployments across most major platform and host operating system combinations. Also new to the suite are task automation capabilities, ranging from discovery to alert distribution, allowing database administrators to streamline their workflow.

"Customers typically don't want to merely monitor privileged activity or simply identify the vulnerabilities that are present on a given database," said Ted Julian, vice president, strategy and marketing, Application Security, Inc. "In order to address mounting security and compliance requirements, organizations need a comprehensive way to demonstrate the controls they have in place on their databases and intelligently identify potential violations. DbProtect 2008.2 allows them to do that in an integrated fashion."

Built on the industry's most extensive knowledge-base of database-specific vulnerabilities, DbProtect is acknowledged as the industry's most complete database security solution - combining database discovery, scanning, vulnerability assessment, real-time activity monitoring and auditing. The comprehensive, integrated solution allows organizations to secure their most sensitive data from internal and external threats, while also ensuring that those organizations meet or exceed regulatory compliance and audit requirements. DbProtect 2008.2 will be available in Q2 2008.

About Application Security, Inc.

Application Security, Inc. (www.appsecinc.com) is the leading global provider of database security solutions for the enterprise. Application Security, Inc.'s products - the industry's only complete database security solution - proactively secure databases in the most demanding environments around the world. Application Security, Inc. delivers up-to-date database protection that minimizes risk and allows organizations to confidently connect with customers, partners, and suppliers. The company was named to Inc. Magazine's 2007 list of America's Fastest Growing Private Companies (Inc. 500).

DbProtect is a trademark of Application Security, Inc. All other product names, service marks, and trademarks mentioned herein are trademarks of their respective owners.