Tizor Launches Industry's First Comprehensive Data Server Auditing Solution.

MAYNARD, Mass. -- - TZX 1000 Addresses Growing Data Center Challenges of Compliance Auditing and Information and Identity Theft -

Tizor(TM) today announces the availability of TZX(TM) 1000, the industry's first comprehensive data server auditing product. The patent pending TZX 1000 offers the first common auditing platform across databases, file servers and application servers, providing enterprises with a cost-effective data center security solution for compliance auditing and information and identity theft protection.

"Compliance is pushing the need to monitor across the data center -- from databases to file servers and application servers," said Trent Henry, Analyst, Burton Group. "Until now, that has been a big hole in compliance auditing. Fortunately, the market is maturing to fill this void."

In a world driven by compliance, outsourcing and growing information risks, organizations are facing unprecedented challenges. Compliance regulations are imposing high costs and overhead on lean IT staff. With the advent of outsourced business processes, data managers' concern for privacy and security of critical information assets is growing. Large information breaches and identity theft are now targeting core data center servers, shaking the very brand that institutions have carefully built up over the years. In the face of these challenges, organizations are looking for new approaches to auditing core data servers.

Auditing databases and key applications, using a proactive audit tool with alerting was recently noted as one of the top five recommendations for protecting critical data by Gartner Research Director, Rich Mogull. According to Mogull's Symposium 2004 presentation titled Data Security: Keeping Bad People from Good Data, "Today's enterprise manages a wealth of data with real dollar value to a criminal or competitor. There's also been a recent onslaught of regulations with data protection requirements, including GLBA, HIPAA, Sarbanes-Oxley, the EU Data Protection Directives and California 1798 (formerly State Bill 1386). None of these regulations specify specific security precautions, but all require the protection of enterprise data, which can't be managed with perimeter security alone. Now is the time to protect our assets as well as we protect our walls and doors."

To respond to the needs of the evolving threat landscape, TZX solutions are based on a patent-pending data center security platform that can monitor, audit and assure critical information activities in data servers. The TZX platform offers the first scalable approach to audit critical information access and activities across a family of data servers, without requiring logging or performance degradation.

Generally available in April 2005, TZX 1000 offers an industry-first set of capabilities including:

--First network-level filtering and decoding approach to achieve "activity monitoring," which provides a holistic view of user's activities on critical information assets and provides more granular information for compliance than has previously been available in the market.

--New English-like compliance policy language that can consolidate auditing and assurance for a range of compliance regulations including: HIPAA, SB 1386, CISP/PCI, Sarbanes-Oxley and data server auditing.

--First real-time analytics capability to offer automated activity review and robust detection of information and identity theft from data servers. Theft by authorized users has been an open problem in the security industry until now. To address this, TZX provides an industry-first capability called "Behavioral Fingerprinting(TM)," which includes the industry's first information theft policies.

"Tizor is focused on alleviating the data server auditing and security burden that challenges organizations today," said Prat Moghe, founder and CEO of Tizor Systems. "Delivering the capability and performance that enterprises need to audit and protect critical information assets and activities in the vulnerable data center, TZX 1000 fills an unmet need in the security industry. With a non-intrusive, network-based approach, TZX does not impact data servers or applications and will complement existing identity and access management and perimeter solutions to maximize an organizations security investment."

About Tizor

In a world driven by compliance, outsourcing and growing information risks, organizations require a higher level of business and trust assurance. Founded by former Bell Labs researchers, Tizor is bringing to market TZX 1000, the industry's first comprehensive Data Server Auditing solution. Offering cost-effective compliance auditing and Information/identity theft protection, this new category of data center security products offers the first scalable approach to monitor, audit and assure critical information activities across data servers, including databases, file servers and application servers, without requiring logging or causing performance degradation. Headquartered outside Boston, Massachusetts, the Company is venture financed and led by industry veterans in networking, security, software and systems management. More information on Tizor can be found at www.tizor.com.