Application Security Tools Vendor Product Description Price

APPLICATION SECURITY TOOLS VENDOR PRODUCT DESCRIPTION PRICE

APPLIMATION INC. Integra 2.0 An e-business suite that provides a comprehensive set Priced according New York of prevention, detection and monitoring controls to number of (212) 500-1200 designed to achieve and maintain an effective internal users and www.applimation.com control environment for Sarbanes-Oxley Act compli- modules included ance APPLICATION SECURITY INC. AppDetective 1.0 $900 per server New York A network-based vulnerability assessment tool that for standard (212) 912-4100 rates the security of applications within networks, databases www.appsecinc.com locates, examines, reports and fixes security holes and misconfigurations via user commands BARRACUDA NETWORKS INC. Spyware Firewall 1.0 $1,599 to $12,999 Mountain View, Calif. An integrated anti-spyware and content-filtering tool (408) 342-5400 that stops spyware and virus downloads, blocks www.barracudanetworks.com access to spyware Web sites, detects spyware access to the Internet and blocks offensive Web sites BREACH SECURITY INC. BreachView SSL 1.0 $5,000 up per Carlsbad, Calif. A software plug-in that performs SSL traffic decryption, server (760) 268-1924 converts HTTP Secure data into clear text and sends it www.breach.com to an intrusion-detection-system sensor without termi- nating the SSL session; Windows, Linux compatible BLUE COAT SYSTEMS INC. WinProxy 6.0 $60 for three Sunnyvale, Calif. SecureSuite An integrated security package that provides a full users to $4,999 (888) 949-7769 range of security functions; includes gateway anti- for 2,500 users www.winproxy.com spyware, client and network antivirus, network URL filtering and network anti-spam features BYTWARE INC. StandGuard Network Call vendor APPLICATION SECURITY TOOLS Reno, Nev. Security 3.0 A real-time security tool for IBM iSeries that helps (775) 851-2900 set enforceable security policies across a network, NETWORK GENERAL CORP. Sniffer Portable 4.8 A multitopology, software-only family of network fault $15,995 up www.bytware.com protects against data loss; provides rules-based and San Jose, Calif. and performance management solutions; suited for on- keyword-level security, monitoring and notification (408) 571-5000 site application and network troubleshooting, analysis of CA eTrust Vulnerability $11,500 up www.networkgeneral.com enterprise network links and network equipment Islandia, N.Y. Manager 8.3 A Web asset-vulnerability tool designed for standard (631) 342-6000 appliances with managed nodes; conducts sched- OUNCE LABS INC. Ounce 4.0 An enterprise-scale security assurance product that Prices range www.ca.com uled asset inventories, lists the organization's risks Waltham, Mass. uses Ounce's contextual analysis technology and the from $50K to and prioritizes them (781) 290-5353 industry's largest software security knowledge base; more than CHECK POINT SOFTWARE Integrity 2.0 $1,000 up www.ouncelabs.com delivers precise metrics and vulnerability data $500K TECHNOLOGIES INC. A modular family of products designed to provide trust- per seat Redwood City, Calif. ed endpoint security for internal and remote PCs; OVISGATE SOFTWARE OvisGate 2.0 An instant SSL VPN software solution that gives $100 to (650) 628-2000 comes with desktop, clientless security and secure- City of Industry, Calif. remote users a variety of secured data services $1,200 up www.checkpoint.com client modules for setting enterprise security policies, (626) 854-1805 network security development and access control www.ovisgate.com CONSUL RISK MANAGEMENT INC. InSight 7 $40,000 up for Herndon, Va. A suite of policy-based user-monitoring tools for enterprisewide PATRICK TOWNSEND Alliance FTP Manager An enterprise solution for AS/400 FTP that automates $8,050 up (703) 547-4100 tracking, reporting and investigating noncompliant versions & ASSOCIATES INC. with PGP 9.0 the tasks involved with sending/receiving database per server www.consul.com behaviors; collects and interprets the full audit trail Olympia, Wash. files and spools to remote systems; the PGP option from applications, databases, and operating systems (360) 357-8971 provides a full implementation of PGP encryption, COVIANT SOFTWARE CORP. Diplomat Transaction Priced according www.patownsend.com decryption, signing and key management functions Concord, Mass. Manager 3.3 A suite for managing secure file transfers; basic edi- to number of (781) 347-4700 tion provides turnkey administration of secure file file transfers PORTWISE INC. PortWise 4.5 A comprehensive platform for identity and access $70 up per user www.coviantsoftware.com transfers; the standard and enterprise editions offer per week Mountain View, Calif. management; creates secure connections to remote (650) 472-3582 employees, business partners and customers www.portwise.com APPLICATION SECURITY TOOLS Chart continued on Page 21 POWERTECH GROUP INC. PowerLock Network A suite of products that extends IBM iSeries security $1,000 to Kent, Wash. Security 6.0 via protections for high-volume transaction processing, $20,000 VENDOR PRODUCT DESCRIPTION (253) 872-7788 robust IP security, automated high-availability meas- per server www.powertech.com ures and dynamic rule configuration CREDANT TECHNOLOGIES Credant Mobile A scalable mobile security and management software Addison, Texas Guardian Enterprise platform that manages mobile and wireless devices QUALYS INC. QualysGuard A Web-based system that offers proactive network $1,495 to (866) 273-3268 Edition 5.1 from a single console; also provides strong authenti- Redwood Shores, Calif. Express 4.5 protection through lifecycle vulnerability manage- $2,995 up www.credant.com cation, intelligent encryption and usage controls (650) 801-6100 ment, including asset discovery and prioritization, www.qualys.com and vulnerability assessment and analysis EXTRACOMM INC. SecureTrac 2.2.3 A Domino native add-on module that enhances the Richmond Hill, Ont. security of Domino applications and e-mail systems; RSA SECURITY INC. RSA ClearTrust 5.53 A Web access-management that lets organizations man- $24 per user up (905) 709-8602 includes detailed audit tracking throughout the lifecy- Bedford, Mass. age large numbers of users while enforcing a centralized to 1,000 users www.extracomm.com cle of electronic documents or e-mail (781) 555-5000 security policy, ensuring compliance and protecting www.rsasecurity.com enterprise resources against unauthorized access FARONICS TECHNOLOGIES USA Anti Executable 2.0 A whitelist security program that standardizes any San Ramon, Calif. environment by preventing all unauthorized or STRATEGIC BUSINESS Resource Monitor A suite of employee monitoring, software licensing $375 to $1,500 (800) 943-6422 unwanted programs from being installed; executable SOLUTIONS INC. 6.64 and administrative tools in an integrated package up per seat www.faronics.com viruses and spyware are permanently blocked Sudbury, Mass. (877) 727-9100 FIDELIS SECURITY SYSTEMS DataSafe 3.9 A network security system designed to detect and www.resourcemonitor.com Bethesda, Md. prevent the unauthorized network transfer of critical (301) 652-7190 information at gigabit speeds; enables digital assets STILLSECURE StillSecure VAM 5.3 An enterprise-level system that scans for network $53 per IP www.fidelissecurity.com to move freely as policy allows Superior, Colo. security vulnerabilities, tracks and repairs them, and address (303) 381-3830 delivers detailed reports to auditors, managers and IT FORUM SYSTEMS Forum XWall 1.0 A Web Services firewall equipped with data authenti- www.stillsecure.com staff Waltham, Mass. cation as well as XML intrusion prevention to active- (781) 788-4200 ly protect against XML viruses, data corruption and SANA SECURITY Primary Response A standalone program that uses a multibehavioral $1,622 per www.forumsys.com denial of services attacks San Mateo, Calif. SafeConnect 2.0 approach to detect and remove malicious code; 100-user pack (650) 292-7100 monitors PC behavior to examine how code acts and GEOTRUST INC. Enterprise SSL 1.0 Allows secure deployment, control and management www.sanasecurity.com analyzes known bad behaviors to determine if a pro- Needham, Mass. of trusted SSL certificates to any server controlled gram is malicious (781) 292-4100 by an enterprise www.geotrust.com SYMANTEC CORP. On-Demand 2.5 A Web program that prevents compromise of enter- $45,500 per Cupertino, Calif. prise assets such as financials, customer informa- 1,000 users GUARDIUM INC. SQL Guard 5.0 An enterprise-class, nonintrusive security and compli- (408) 517-8000 tion and intellectual property; provides endpoint Waltham, Mass. ance tool that monitors, reports and manages data- www.symantec.com security technologies to help ensure compliance (781) 487-9400 base access activities; includes SQL RemoteGuard, with security policies, prevent unauthorized data www.guardium.com which monitors departmental and distributed sites transfer and protect confidential information

GUIDANCE SOFTWARE INC. EnCase Enterprise A network-enabled, multiplatform enterprise-investi- TUMBLEWEED SecureTransport An enterprise-class secure file transfer tool for mov- $300 per Pasadena, Calif. 5.0 gation tool designed to help reduce costs and improve COMMUNICATIONS CORP. 4.1.4 ing financial transactions, critical business files, client platform (626) 229-9191 the effectiveness of information security profession- Redwood City, Calif. large documents, and XML and EDI transactions www.guidancesoftware.com als and computer incident report teams (650) 216-2000 over the Internet and private IP networks www.tumbleweed.com IBM CORP. IBM Tivoli Access A comprehensive software package that upgrades the Armonk, N.Y. Manager for Business security services of IBM WebSphere MQ, provides appli- WATCHFIRE INC. AppScan 6.0.206 A security-testing suite that scans Web applications $20 per (800) 426-4968 Integration 5.1 cation-level data protection for WebSphere MQ applica- Waltham, Mass. within the infrastructure, tests for security issues and download www.ibm.com tions and supports WebSphere MQ server and client (781) 810-1450 provides actionable reports and recommendations www.watchfire.com INFORMATION SHIELD INC. Information Security A resource for information-security policies; Houston Policies Made Easy includes a collection of more than 1,300 security WINTERNALS SOFTWARE LP A desktop program that melds application-execution $25 per (888) 641-0500 10.0 policies and templates covering virtually every Software Protection Austin, Texas Manager 1.0 protection with least-privilege-user controls; lets managed www.informationshield.com aspect of organizational security (512) 330-9130 administrators create approved application desktop INNERWALL INC. Secure Enclave A secure technology platform intended to extend www.winternals.com whitelists and delegate local permission as needed Colorado Springs, Colo. Government Edition from command centers to remote locations or to get legacy applications working (719) 264-2700 2.0 devices; enables the use of sensor technology www.innerwall.com through self-organizing, peer-to-peer networks IPLOCKS INC. IPLocks Vulnerability A standalone package that offers an expert-level San Jose, Calif. Assessment review of a given configuration from security and (408) 383-1500 Software 5.0 regulatory-compliance viewpoints www.iplocks.com LYRIS TECHNOLOGIES INC. MailShield A gateway-level anti-spam and e-mail content filter; Berkeley, Calif. Server 4.0 manages and blocks unauthorized e-mail, stops spam, (800) 768-2929 prohibits mail relay and averts mailbomb attacks www.lyris.com MOMENTUM SYSTEMS INC. Secure Network An automated tool for managing high-volume secure Moorestown, N.J. Gateway 3.0 file transfer over the Internet or intranets; includes a (856) 727-0777 communication-workflow manager plus other com- www.momsys.com ponents MORROW INTERNATIONAL INC. SpamAgent 3.0 An advanced anti-spam and junk e-mail solution Canton, Ohio with over 1,500 filters; provides the ability to create E-mail contact only an unlimited number of custom filters www.mi-inc.com M-TECH INFORMATION P-Synch 6.3 A standalone password-management program closely TECHNOLOGY INC. integrated with other M-Tech products; offers simpli- Calgary, Alb. fied support for clearing intruder lockout and enables (403) 233-0740 multiple inconsistent password policies www.psynch.com NETLIB Encryptionizer A desktop tool that delivers client-side file and field Stamford, Conn. DE 2.0 encryption for Win32 applications and desktop databas- (203) 321-1278 es; acts as an additional security layer atop Windows www.netlib.com security and other application security products