Foundstone Sets New Standard for World-Class Vulnerability Management.

MISSION VIEJO, Calif. -- New Version of Foundstone Enterprise(TM) Expected to Accelerate VM Adoption with Unparalleled Ease-of-Use and Manageability

Foundstone Inc., experts in strategic security, today announced the availability of Foundstone Enterprise(TM) version 4.0, setting a new standard for vulnerability management systems. The latest version of the award-winning security solution from Foundstone is appliance-based, making it one of the easiest-to-deploy security solutions on the market. With unparalleled manageability, Foundstone Enterprise v4.0 makes it even simpler for Global 2000 companies to protect their infrastructure against the rapidly accelerating and damaging exploits of hackers, worms and viruses.

"IT security organizations should stop counting virus and malicious-code attacks, and start reducing vulnerabilities," asserted Mark Nicolett, vice president and research area leader for Security and Privacy at Gartner. "Mitigating attackable weaknesses should be the primary goal of every IT security program."

Foundstone Enterprise v4.0 is a true enterprise-class solution that includes dramatic new features and improvements based on the requirements of Foundstone's market-leading customers including AT&T, McKesson, the Department of Transportation and others. It offers enhanced interoperability via Foundstone Link(TM), the cornerstone of Foundstone's open architecture, allowing users to better leverage their existing security investments through seamless integration with third-party products and custom applications. It provides intuitive management tools to measure compliance performance over time, by platform and by business unit or region. And for government users, Foundstone Enterprise is IAVA- (Information Assurance Vulnerability Alerts) ready and in evaluation for Common Criteria Certification, enabling Department of Defense (DoD) agencies to easily comply with policy. This new release is unique in its ability to help real-world organizations mitigate risk by proactively discovering vulnerabilities, responding to critical threats, and fixing important assets with less effort than ever before.

"A robust and secure worldwide network is a critical foundation to Motorola's success," said William Boni, vice president and chief information security officer for Motorola. "It's a fallacy to believe that any network is without vulnerabilities. The key is understanding the business risk and finding and fixing the critical vulnerabilities before they can be exploited. Foundstone Enterprise v4.0 is a true enterprise-class solution that is scalable and powerful enough to comprehensively assess our large network for vulnerabilities."

Foundstone Enterprise v4.0 includes major developments in the following areas:

--Policy Compliance and Threat Management

The new Threat Compliance View in Foundstone Enterprise's Threat Correlation Module allows customers to track progress against specific threats over time to ensure they are meeting internal and regulatory compliance policies.

--Enhanced Remediation

Although many tools identify security flaws and weaknesses, the real challenge lies in resolving severe vulnerabilities before attackers exploit them. Foundstone Enterprise includes a fully automated and tightly integrated Remediation Module that auto-assigns tickets based on discovered vulnerabilities and asset criticality. The system then auto-closes these tickets once the vulnerabilities have been fixed, saving time and resources.

--Intelligent Asset Classification

Strengthening Foundstone's leadership position in asset-based vulnerability management, v4.0 allows customers to flexibly group assets based on detailed criteria and assign group attributes such as an owner or criticality level. Asset groups can then be used to drive scanning, remediation and other activities throughout the system.

--Metrics and Reporting

Foundstone Enterprise embeds easy-to-understand metrics to provide customers with an effective means of measuring and monitoring security risk to digital resources. Through FoundScore, MyFoundScore, and Risk Score, organizations can quickly assess their security posture, benchmark business units or regions, and track the progress of implemented security policies and programs.

"Foundstone Enterprise 4.0 represents a major leap forward in bringing vulnerability management to the masses," said George Kurtz, CEO of Foundstone. "Because the product was built in cooperation with leading experts from our global customer base, it hits the bull's-eye in terms of delivering on the real-world security needs of businesses and government agencies worldwide."

"In order for Pitney Bowes to continually improve the security and integrity of our critical assets, our vulnerability management solution must be easy to use and deliver fast and accurate results," said Mark Ramsey, manager of data security for Pitney Bowes. "I'm impressed by the significant ease-of-use advancements in Foundstone Enterprise v4.0. Efficiency improvements are extremely advantageous to complex enterprises like Pitney Bowes."

Foundstone will host a complimentary webcast to demonstrate key features of Foundstone Enterprise 4.0 on Thursday, Aug. 5 from 11 a.m. to noon Eastern. Registration can be found at https://www.foundstone.com/registration/event-ent4.htm.

The Vulnerability Management Market

According to market research firm IDC, the vulnerability assessment and management (VA&M) and intrusion detection market is expected to experience increasing growth over the next few years, reaching $1.8 billion in 2008. The most significant growth is expected during the next three years. In its April 2004 report, "Worldwide Security Software 2004-2008 Forecast," IDC identified Foundstone as a leader who is advancing the concepts of risk management, policy compliance and other trends. Foundstone was also noted as one of the fastest growing VA&M solution providers at 100%+ growth per year.

About Foundstone

Foundstone(R) Inc., experts in strategic security, offers a unique combination of software, services, and education to help organizations continuously and measurably protect the most important assets from the most critical threats. Through a strategic approach to security, Foundstone identifies and implements the right balance of technology, people, and process to manage digital risk and leverage security investments more effectively. The company has one of the most dominant security talent pools ever assembled, and has authored 20 books, including the best-seller, "Hacking Exposed." Foundstone customers include six of the top 11 Fortune companies and many U.S. government agencies. The company has headquarters in Orange County, Calif., and has offices in San Antonio, New York, Washington, D.C., and Singapore. For more information about Foundstone, visit www.foundstone.com, or call 877-91-FOUND within the United States, and 949-297-5600 outside the United States.

Note to Editors: Foundstone and Foundstone Enterprise are registered trademarks of Foundstone Inc. All other companies, brand names or products are trademarks or registered trademarks of their respective companies.