Foundstone Security Software Named Network Computing Magazine's Editor's Choice.

To download high-resolution, print-ready JPEG images, click on the thumbnail image above.

WARNING: these images are

very large (800K+)

Click here for caption

Business Editors/High-Tech Writers

NOTE TO MEDIA: Multimedia assets available

A graphic is available at URL:

http://www.businesswire.com/cgi-bin/photo.cgi?pw.062403/bb12

MISSION VIEJO, Calif.--(BUSINESS WIRE)--June 24, 2003

Foundstone FoundScan Engine 2.6 Receives Highest Marks of Eleven

Vulnerability Assessment Scanners; Cited as "Best Bang for the Buck"

Foundstone, experts in strategic security, announced today that its Foundstone FoundScan Engine 2.6 for vulnerability assessment has been named Editor's Choice in an extensive product review conducted by CMP Media LLC's Network Computing. Ten other products from companies including Qualys, eEye, Vigilante, BindView Corp. and nCircle were evaluated.

According to Network Computing, the heart of any security solution is becoming less vulnerable through a combination of technology, tactics and strategy. When enterprises calculate asset classification with vulnerability severity, they can concentrate their resources to protect the most critical assets, so the Network Computing reviewers tested the 11 scanners in the middle of one of the most insecure networks they could create. Each scanner was evaluated on its ability to accurately identify critical vulnerabilities, clearly and concisely report on those vulnerabilities, and perform these tasks in an efficient and non-crippling manner. Interface design and control features also factored into the grades.

In the rigorous evaluation performed by Network Computing's Real-World Labs team, the FoundScan Engine 2.6 was one of the most polished vulnerability scanners tested. In the review, FoundScan Engine 2.6 edged out the competition primarily due to its detailed reporting of vulnerabilities and its scalable design to handle the largest and most complex networks.

The reviewers also gave the product high marks for the following features:

    --  clean and understandable management interface;
    --  ability to allow multiple levels of administrative control;
    --  ticketing system for remediation of identified
        vulnerabilities;
    --  the ability to write directly to a Microsoft SQL Server so
        organizations can build their own reports by directly
        accessing the system's databases;
    --  easy-to-understand reporting that can be sorted in a variety
        of ways, letting administrators efficiently view reports;
    --  a great deal of flexibility for tuning performance with
        FoundScan's RFC-friendly approach to OS fingerprinting

"Network Computing's Real-World Labs team selecting Foundstone's FoundScan Engine 2.6 as 'Editor's Choice' is a remarkable testament to the level of quality and functionality of our vulnerability assessment software. Because FoundScan is a recent entrant in the vulnerability assessment market, this win is of particular significance," said Stuart McClure, president and CTO, Foundstone. "We anticipate the market will appreciate Foundstone's future software releases, including Foundstone Enterprise that offers new and enhanced features."

The FoundScan Engine 2.6 was launched in April 2002 and is now the engine in Foundstone Enterprise(TM), a true enterprise-class security system for vulnerability management that will be released in upcoming weeks. Foundstone Enterprise manages the entire vulnerability lifecycle from discovery to remediation, and includes new features such as an Executive Dashboard, asset criticality and labeling, improved management of distributed FoundScan Engines, new scan configuration options, a new Windows Assessment Module, an expanded Web Application Assessment Module, and enhanced remediation capabilities.

Enterprise security professionals often use security product reviews from CMP Media LLC's Network Computing as a benchmark for assessing a wide range of technology products and services. For the 2003 Network Computing vulnerability assessment review: "VA Scanners pinpoint Your Weak Spots," visit: www.networkcomputing.com/1412/1412f2.html.

For more information about Foundstone security software, visit www.foundstone.com, or call 877.91.FOUND within the U.S, and 949.297.5600 outside the U.S.

About Foundstone(R)

Foundstone, Inc., experts in strategic security, offers a unique combination of software, services, and education to help organizations continuously and measurably protect the most important assets from the most critical threats. Through a strategic approach to security, Foundstone identifies and implements the right balance of technology, people, and process to manage digital risk and leverage security investments more effectively. The company has one of the most dominant security talent pools ever assembled, and has authored ten books, including the best-seller Hacking Exposed. Foundstone is headquartered in Orange County, CA, and has offices in New York, Washington, D.C., and Seattle.

Note: A graphic is available at URL: http://www.businesswire.com/cgi-bin/photo.cgi?pw.062403/bb12