Authentica Expands Product Suite With Authentica Content Security Server.

Business Editors/Technology Writers

WALTHAM, Mass.--(BUSINESS WIRE)--June 17, 2002

    Industry's First Information Security Solution That Offers Two
  Protection Levels For Securing Valuable E-Mail and Documents Both
                      During and After Delivery

   Flexible and Easy-To-Deploy Application Meets Diverse Enterprise
                        Content Security Needs

Authentica, Inc., the premier provider of information security software for protecting valuable intellectual property and confidential business information, today expanded its product line with the introduction of the Authentica(R) Content Security Server. This new product is an easy-to-use and easy-to-deploy enterprise application for securely delivering or persistently protecting e-mail and documents whether they are shared internally or between companies. The Authentica Content Security Server is the only solution that enables enterprises to apply the appropriate level of content security using two protection levels on a case-by-case basis: Secure Delivery for point-to-point information security, and Secure Content for continuous protection and lifecycle control of content after delivery.

"Enterprises have many different information security requirements that, to date, they have tried to address with customized solutions or third-party hosted services," said Lance Urbas, president and CEO of Authentica. "Authentica Content Security Server is the first out-of-the-box solution that surpasses the capabilities of these disparate solutions and services, and that is easily deployed and managed across an enterprise. We anticipate that this will not only expand our footprint in our current markets but will also open a broad set of new markets for us. Indeed, we're already experiencing increased demand in the healthcare and financial services industries where federal privacy and security regulations are looming large."

Secure Delivery: An Electronic "Certified Courier" for E-Mail and

Documents

Authentica Content Security Server's Secure Delivery protection offers point-to-point encryption and security, ensuring that e-mail and attachments are delivered to intended recipients safely and securely - with proof of delivery. This protection method, like an "electronic FedEx or certified courier service," is beneficial in situations where messages or documents require strong security but the ownership of the information changes upon delivery (e.g., healthcare providers delivering a patient's medical information to him or a financial firm delivering secure statements to a client). Secure Delivery supports encryption of on any platform with the use of a standard Web browser.

Secure Content: An "Electronic Guardian" for E-Mail and Documents

Authentica Content Security Server's Secure Content option works like an "electronic guardian" for messages and documents by providing continuous encryption and control both during and after delivery. This protection method is useful in environments where the confidential or proprietary nature of information requires that the sender maintain control over who accesses the content and how they can use it throughout the content's lifecycle (e.g., manufacturers who must share proprietary product design specifications with supply chain partners or investment banks collaborating on confidential M&A documents with attorneys and investment partners).

Secure Content incorporates Authentica's patented Active Rights Management(TM) technology for after delivery security and lifecycle control of messages and documents. The sender always retains control over the recipient's ability to forward, print and copy, and can recall or expire that information at anytime after delivery.

Whether using Secure Delivery or Secure Content protection, the Authentica Content Security Server features:

-- A Web Interface: Individual senders may log in to an organization-branded
Web page to access the Authentica Content Security Server. From this Web page,
they can compose new messages, upload attachments and manage existing messages
and document activity.

-- An Existing Business Application: Using Authentica Content Security Server's
Simple Object Access Protocol (SOAP) API, organizations can automatically
protect critical content from their existing business applications and deliver
it to recipients.

-- Any E-Mail Client: Users compose e-mail and attach documents using their
existing e-mail client. The e-mail and attachment is automatically scanned by
Authentica's secure messaging gateway and, based on established corporate
security and business policies, is then directed to the Authentica Content
Security Server where it is protected and sent.

"There are many security challenges facing organizations today - especially for those grappling with security and privacy regulations under HIPAA and Gramm-Leach-Bliley," said Ray Wagner, Ph.D., research director, information security strategies at Gartner. "In order to effectively implement a secure messaging solution, it must be easy to deploy and integrate within an existing enterprise infrastructure. Additionally, it must be equally capable of handling content security needs both within and beyond corporate boundaries."

Citizens Business Bank in Ontario, California has assets of more than $2.6 billion and offers a full complement of all business banking products and services. One of the challenges it faces is using e-mail and the Internet to communicate securely with its corporate and private clients. Citizens will use the Authentica Content Security Server to advise its clients of wire transfer confirmations.

"Our customers demand that we speed up our services and correspondence with them - the Internet is the only answer. However, we want to be sure that our correspondence is secure. The Authentica Content Security Server gives us an easy way to deliver wire transfer confirmations securely and to have proof of delivery. Just as important, it gives us an easy way to get our customers enrolled and receiving information securely with a minimum of help desk calls." said Steve Borba, vice president, Network Services, of Citizens Business Bank.

Flexible Deployment Options

Authentica Content Security Server offers three deployment options. This gives enterprises the flexibility to automatically secure business information without any user involvement or to provide individual users with the ability to protect and manage their own messages and documents. The solution can be deployed through:

-- A Web Interface: Individual senders may log in to an organization-branded
Web page to access the Authentica Content Security Server. From this Web page,
they can compose new messages, upload attachments and manage existing messages
and document activity.

-- An Existing Business Application: Using Authentica Content Security Server's
Simple Object Access Protocol (SOAP) API, organizations can automatically
protect critical content from their existing business applications and deliver
it to recipients.

-- Any E-Mail Client: Users compose e-mail and attach documents using their
existing e-mail client. The e-mail and attachment is automatically scanned by
Authentica's secure messaging gateway and, based on established corporate
security and business policies, is then directed to the Authentica Content
Security Server where it is protected and sent.

Wide Range of Applications

Authentica Content Security Server is ideal for a wide range of business applications including healthcare (HIPAA compliance), finance (Gramm-Leach-Bliley compliance), manufacturing supply chains, and government intelligence communications.

Authentica Content Security Server is an extension of Authentica's information security suite that includes MailRecall(TM) and MailRecall Gateway for e-mail, PageRecall(TM) for electronic documents, and NetRecall(TM) for Web content. As an integrated solution, Authentica's family is scalable, easy-to-use and simple for IT to deploy and administer across the enterprise.

Pricing and Availability

Authentica Content Security Server is available immediately. Pricing is based on concurrent users and server configuration and starts at $32,500 (USD).

About Authentica

Headquartered in Waltham, MA, Authentica, Inc. is a leading provider of content security software for protecting valuable and confidential information shared within and beyond corporate boundaries. The company's suite of enterprise-ready products combines patented dynamic rights management capabilities with industry standard encryption, authentication and access controls. Designed for a wide range of applications, Authentica's products ensure the most secure delivery of information and provide continuous control over content even after it's delivered to recipients. Authentica provides its product suite to the manufacturing, technology, healthcare, financial and legal industries as well as government intelligence agencies. Authentica investors include 3i Technology, AXENT/Symantec, Canaan Partners, Greylock, Intel 64 Fund, North Bridge, Norwest Venture Partners, JP Morgan, and Venrock. For additional information, please visit www.authentica.com or contact us at [phone].

Authentica is a registered trademark, and Active Rights Management, MailRecall, PageRecall, and NetRecall are trademarks of Authentica, Inc. All other brand or product names are or may be trademarks of, and are used to identify products or services of, their respective owners.