SecureInfo, BigFix Join Forces to Provide Complete Security Vulnerability Remediation Solutions for Government Market.

Business Editors/High-Tech/Government Writers

SAN ANTONIO--(BUSINESS WIRE)--May 28, 2003

Integrated solution enables customers to proactively address security

risks, meet mandated security guidelines, and solve manual,

time-consuming patch process

SecureInfo Corporation, a global leader in providing comprehensive enterprise information security management solutions, and BigFix Inc., a leading provider of automated patch management solutions, announced today that they are combining their technologies to deliver the most powerful automated asset discovery and vulnerability remediation solution available.

The product will integrate SecureInfo's EVM(sm) (Enterprise Vulnerability Management) solution with the centralized remediation capabilities of BigFix, to provide a comprehensive antidote to enterprise security vulnerabilities.

"SecureInfo delivers a broad portfolio of security currency solutions that assist government agencies in complying with IT security mandates," said Eric Hemmendinger, research director for security and privacy at Aberdeen Group. "With the addition of the BigFix vulnerability remediation platform, SecureInfo will add flexible and sophisticated automation capabilities to its portfolio, reducing operational expenses for government agencies as well as commercial enterprises."

Government agencies today must reduce the number of security risks to their systems, and are increasingly unable to keep up with the growing number of vulnerabilities. The current approach to vulnerability remediation does not effectively address the rapidly increasing number of risks. EVM is the first enterprise vulnerability management system designed to proactively manage vulnerabilities down to the asset level, while integrating dynamic enterprise management and reporting capabilities. SecureInfo's technology currently assists the U.S. Department of Homeland Security's patch authentication and dissemination initiatives available to all Federal Civilian Agencies under the PADC program (https://padc.fedcirc.gov).

John M. Linton, SecureInfo's Executive Vice President of Business Development, stated, "We secure some of the largest networks in the world, and it is critical that our information security solutions include the best technologies available. Based on our extensive evaluation of the leading commercial applications, we believe BigFix has the most powerful discovery and patch management technology on the market today. The result of this partnership is a comprehensive automated discovery and remediation solution that provides our government clients with a clear advantage in mitigating the exploitation of valuable assets across their enterprises."

By integrating BigFix's Patch Management technology, EVM's added features will empower users with an automated process for patch intelligence that accurately determines patch relevance, prioritizes the deployment process, monitors the patching process and produces comprehensive audit trails and patch history reports. Additionally, EVM contains one of the largest and most comprehensive databases of security vulnerabilities. EVM's database empowers security administrators to proactively identify vulnerabilities threatening their network, assess the risks and then take action to mitigate those risks.

Steve Larsen, Chief Executive Officer of BigFix, commented, "The combination of BigFix and SecureInfo technology yields a powerful automated solution that both remediates vulnerabilities and meets the internal security and administrative policies demanded in federal government installations. Additionally, by leveraging SecureInfo's established relationships and leadership position in the government arena, we become the de facto standard for automated patch management within the federal government."

About SecureInfo Corporation

SecureInfo Corporation is a leader in providing comprehensive enterprise information security management solutions to Government and commercial organizations. SecureInfo's software simplifies the reporting and management of vulnerabilities across enterprise networks on an asset-by-asset basis while automating the network Certification and Accreditation process to provide a complete risk management solution. SecureInfo currently maintains its leadership position in Digital Homeland Defense by winning some of the most critical and information sensitive cyber security contracts awarded by the Federal Government. These contracts include enterprise protection, detection and response for the Department of Veteran's Affairs (VACIRC), cyber security management solutions for the Air Force Computer Emergency Response Team (AFCERT), and enterprise vulnerability management for every Federal Civilian Agency in the United States (FedCIRC). Additional information is available at http://www.secureinfo.com/.

About BigFix Inc.

BigFix software solutions help large organizations maintain the health, performance and security of their systems. The foundation for all BigFix solutions is a fully extensible agent-based platform, which gives IT managers complete visibility into every computer running on a corporate network. The company's flagship product, Patch Manager, automates the complex process of assessing and remediating vulnerabilities across enterprise networks. BigFix also provides modules that harness the power of its platform to solve specific systems management issues, such as ensuring that SMS clients and servers are installed, up to date and operating at peak performance 100% of the time. BigFix customers include large organizations in a range of markets including financial services, government and technology. For more information, visit www.bigfix.com.