Cyber-Ark Delivers PCI Data Security Standard Compliance; Vaulting Solutions Uniquely Secure Confidential Files Both in Transit and at Rest and Deliver the Network Security Required without Painful Redesign of Legacy Applications.

DEDHAM, Mass. -- Cyber-Ark(R) Software, Inc. today announced that companies struggling to meet the requirements of the Payment Card Information (PCI) Data Security Standard can leverage the Company's Vaulting solutions to protect the privacy of cardholder data--without re-designing or re-writing existing applications.

Cyber-Ark's Vaulting solutions uniquely secure information both while at rest and as it is transferred across networks--meeting a key element of the PCI standard that requires merchants and service providers to protect stored data and encrypt transmissions of sensitive information across networks. Information is automatically encrypted when stored inside the Vault as well as when transmitted, making encryption completely transparent to end users.

"In the wake of a series of privacy disasters in the credit industry, organizations are scrambling to protect vital consumer information and comply with the PCI standard," said Tom Crawford, president and CEO of Cyber-Ark. "Cyber-Ark's Vaulting technology is powerful, yet easily slides into the existing enterprise infrastructure to deliver a wide range of security features that protect confidential information--at a fraction of the cost of redesigning applications and legacy systems to include the security needed to meet key elements of the PCI standard. Also in contrast to point solutions, Cyber-Ark's Vaulting solutions provide organizations a compliance infrastructure to address the full range of regulations and guidelines such as Sarbanes-Oxley, GLBA, California Breach Act, HIPAA, etc, that focus on the security of electronic data both at rest and in motion."

Avoids Application Redesign; Delivers Key Password Protection and Auditing

In recent research(1), Gartner writes that, "companies should use the (PCI) standard as a reason to put their security programs in order," and that, "PCI requires card data encryption, but most companies cannot afford to comply without spending excessive sums of money on application redesign." Vault Connectors help organizations overcome the need to redesign applications with an unmatched spectrum of interfaces that deliver near-instant integration with existing information systems and business processes. In addition, open APIs and CLIs enable organizations to integrate into a diverse landscape of enterprise systems, including custom and home-grown applications, and allowing robust and flexible customization of the data exchange process.

Another key section of the PCI standard on building and maintaining secure networks requires that organizations not use vendor-supplied defaults for system passwords and other security parameters. Cyber-Ark's Network Vault for Passwords (Password Vault) delivers an end-to-end solution that protects passwords during transmission and at rest with multiple layers of integrated security, granular access control mechanisms and graphical auditing solutions to thoroughly track every password's whereabouts. It also includes a Central Password Manager that enables organizations to change passwords automatically on remote machines and then store these new passwords in the Vault, without any human intervention and all according to predefined organizational policy.

Finally, Cyber-Ark's Vaulting solutions deliver the fine-grained access control and auditing required by the standard, which restricts access to data on a "need-to-know" basis and requires unique IDs for each person with computer access. The Vault's Granular Access Control creates an environment where users are only aware of the safes and data they are allowed to access, ensuring information gets only to the right recipients. In addition, the solution delivers powerful auditing and notifications features, enabling a vital audit trail to be created for each transfer and data access.

About Cyber-Ark Software

Cyber-Ark Software is the leader in Vaulting solutions for securely connecting enterprises. The Company's Inter-Business Vault enables the creation of secure instant wide area networks (WANs) for connecting enterprises with partners, customers and sub-contractors over the Internet - enabling them to exchange information as if they have deployed a shared WAN, but without actually doing so. Cyber-Ark's leading Inter-Business Vault applications include solutions for Treasury Management files, Product Design files and Source Code. In addition to its business-to-business solutions, Cyber-Ark's Network Vault provides solutions for securely managing critical information, such as administrative passwords and critical documents, within the enterprise. Today Cyber-Ark enjoys strong customer relationships with more than 150 Global 1000 companies around the world.

Founded by a group of leading military security experts and computer engineers, Cyber-Ark Software is privately held and backed by some of the world's most successful venture capitalists, including Jerusalem Venture Partners, Seed Capital Partners (a SOFTBANK Affiliate), JP Morgan/Chase Partners and Vertex Management.

The Company is located in Dedham, Mass. and on the World Wide Web at www.cyber-ark.com.

Cyber-Ark, Network Vault, Inter-Business Vault and Vaulting Technology are trademarks of Cyber-Ark Software Ltd. in the U.S. and/or other countries.

All rights reserved.

(1)"Congressional Hearings on CardSystems Exposes PCI Shortcomings" by Avivah Litan, Gartner, August 3, 2005.