Press Release

SignaCert Announces New Methods to Manage Enterprise IT Systems

Oct 9, 2007

SignaCert measures, validates, and maintains the state of software technologies from supporting vendors: Fujitsu Limited, IBM, Intel, Juniper Networks, Sun Microsystems, Symantec, Applied Identity, Authentium, SecureElements, Veracode, and XenSource.

Portland, Oregon — SignaCert, Inc., a leading provider of independent IT controls technology, today announced extended capabilities to provide independent verification of software from vendors such as, Fujitsu Limited (TSE: 6702), IBM(NYSE: IBM), Intel (NASDAQ: INTC), Juniper Networks (NASDAQ: JNPR), Sun Microsystems (NASDAQ: JAVA), Symantec(NASDAQ: SYMC), Applied Identity, Authentium, Secure Elements, Veracode, and XenSource. SignaCert offers enterprise class solutions that address industry demand for proactive IT controls to achieve more stable and compliant computing.

"We are very pleased by the continued momentum in the market adoption of this new approach to systems controls," said Wyatt Starnes, Founder and CEO of SignaCert, Inc. "We are witnessing a broad cross section of new applications for these methods among customers and partners."

Many IT departments assume that software originally deployed into production is the same that is loaded and executing today. In practice, this is often not the case and leaves an "IT blind spot." Before SignaCert, there was no definitive way to prove that customers' IT environments were deployed and configured as intended. SignaCert's patented solution, supported by these companies, provides partners and customers a completely new way to create a trusted reference - a baseline of independently verified, vendor authentic, signatures - for deploying such solutions.

As mentioned in SignaCert's product upgrade announcement last week, proactive systems monitoring using independent IT controls result in improved operational efficiency and financial benefit through increased availability of IT infrastructure, greater control and security, and increased fulfillment of essential compliance and audit requirements, including virtual machines.

"A core strategy for Intel vPro processor technology is to deliver a built-in manageability and proactive security environment on commercial business PCs,"said Robert Crooke, vice president and general manager of Intel's Business Client Group. "SignaCert's ability to embrace Intel Trusted Execution Technology(TxT) and Virtualization Technology (VT) is a commitment in providing trust."

Participation in the SignaCert Harvest Program - the mechanism by which signatures of partner software are captured, verified, and incorporated into SignaCert's Enterprise Trust Server, is open to all OS, application, and infrastructure vendors.

"Solaris 10 is the most digitally signed Operating System available today," said Marc Hamilton, Vice President, Solaris marketing, Sun Microsystems. "The integration of SignaCert Enterprise Trust Server with our upcoming Secure Execution capability will further address customer needs for robust, safe, and provably secure systems."

SignaCert independent IT controls technology is integrated into or complementing numerous technology companies and organizations:

Applied Identity: SignaCert and Applied Identity are complementary security and audit enablement technologies that give customers a higher level of trust through system integrity verification and identity-driven access management.

Juniper Networks: SignaCert's IT controls and system integrity capabilities complement Juniper's Unified Access Control (UAC) solution by providing a unique white list approach (a trusted reference) to endpoint health measurement; this enables improved granularity and flexibility of Juniper's UAC network access assessment based on system attestation.

Secure Elements: Secure Elements and SignaCert deliver the first complementary solution that provides positive attestation for SCAP configuration and binary/library validation for regulated and federal IT customers.

Symantec: SignaCert is using best-in-class antivirus technology from Symantec to help ensure that only 'clean code' submissions are made to the SignaCert Global Trust Repository. In partnership with Symantec, SignaCert performs a highly secure white list data extraction.

XenSource: SignaCert and XenSource are establishing standards and technologies for bringing measurement and controls to virtual environments. "Security in a virtualized environment is a growing concern for CIOs," said Simon Crosby, CTO, XenSource. "XenSource believes that measurement and trust go hand in hand with a secure virtualized platform. SignaCert's technology is an important component of the trusted computing base and can help ease customer concerns about the security of virtual infrastructure, accelerating the adoption of virtualization."

About SignaCert

SignaCert is the leading provider of end-to-end and partner-based IT compliance solutions based on known-provenance whitelist technology. These methods allow SignaCert's direct customers to rapidly achieve and prove continuous compliance for the systems that deliver critical business services. The SignaCert architecture is designed to seamlessly integrate with existing change processes and continuously monitor critical business services without disruption.

Additionally, SignaCert's OEM and ISV Partners can supply to, or license content from, the SignaCert Global Trust Repository (GTR), adding new and important capabilities to their product offerings. All use cases are supported by a rich repository of vendor-independent software measurements. These "white" or "allow" list methods enable SignaCert's patented technology to be quickly deployed and provide immediate visibility into the actual state of IT infrastructure.

Founded in 2004 by 34-year IT security and compliance industry veteran Wyatt Starnes, SignaCert has assembled a world class team of industry leaders with hands-on IT experience for its executive team, board of directors, and advisory board.

SignaCert's end-customers span a wide variety of industries, including financial services, government, and healthcare.