Guardium – Real-Time Database Protection and Compliance

Guardium Receives RSA Secured® Certification From RSA

Guardium Joins RSA Secured® Partner Program to Enhance Data-Centric Security

WALTHAM, Mass. (July 25, 2007) ─ Guardium, the database security company, today announced that its real-time database security and monitoring solution has been awarded RSA Secured® certification with the RSA SecurID® solution, signaling its interoperability with industry-leading two-factor authentication technology from RSA, The Security Division of EMC (NYSE: EMC). Additionally, Guardium joined the RSA Secured Partner Program.

As a result of the technology partnership between Guardium and RSA, IT security personnel will now be able to use RSA SecurID two-factor authentication technology to establish the trusted identity of users accessing critical security assets managed by the Guardium system, including:

Security policies for controlling access to sensitive data in corporate databases.
Confidential information about database security assessments, alerts and incidents.
Information about where sensitive data is located, obtained via Guardium’s data classification capabilities.
Complete audit trails of all database transactions (who, what, when, where, how).
Compliance reports for key mandates such as Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standard (PCI DSS), and data privacy laws.

“An effective strategy to protect identities and digital assets helps enable businesses to build the confidence that corporate data is being accessed securely by customers, partners and employees and applications remain secure, both inside and outside their operations,” said Stuart Cohen, Director, RSA Alliances, The Security Division of EMC. “The RSA Secured technology partnership between Guardium and RSA helps IT security organizations efficiently and cost-effectively manage the digital identities of their user bases - including security personnel, auditors, and compliance officers.”

Guardium delivers the most widely-deployed solution for preventing information leaks from the data center and ensuring the integrity of corporate information. The company’s appliance-based solution uses real-time policies and continuous comparisons to baselines of normal activity to immediately identify both external attacks and insider threats. Unlike traditional database logging solutions, Guardium’s solution creates a granular audit trail of all database activities - including privileged insider activities - without impacting performance or requiring changes to databases or applications.

“Our RSA Secured certification helps enable Guardium customers to achieve an added level of network security when deploying our solution to protect business-critical data in enterprise systems from Oracle, PeopleSoft, Siebel, SAP and custom Web-facing applications,” said Phil Neray, vice president of marketing at Guardium. “This technology partnership presents compelling value to our joint customers who can be reassured that the Guardium solution closely interoperates - out of the box - with technology from a security industry leader that has more than 25,000 customers worldwide.”

About Guardium’s Technology
Guardium’s appliance-based system helps enterprises rapidly secure enterprise data and pass their audits by providing independent controls around critical data and systems, while reducing operational costs via automated compliance reporting, escalation and oversight mechanisms.

By continuously monitoring and contextually analyzing all DBMS traffic at the network layer and on the database server itself, in real-time, Guardium’s solution immediately identifies unusual or suspicious activities as well as unauthorized changes to critical database structures and data values. In addition, the system monitors database servers for any changes to configuration files, environment variables and executables that can also impact the security posture of database infrastructures.

Guardium simplifies security and compliance by providing a single unified solution for all major DBMS platforms (Oracle, Microsoft, IBM DB2 and Informix, Sybase) on all major OS platforms (UNIX, Linux, Windows, z/OS). The company’s scalable, multi-tier architecture has been field-proven to support the most demanding database environments in Global 1000 organizations worldwide.

About Guardium
Guardium, the database security company, develops the most widely-used solution for database activity monitoring, security and auditing, with a blue-chip customer base that includes organizations in all major geographies and industries. Founded in 2002, Guardium was the first company to address the core data security gap by delivering a practical, appliance-based platform that both protects databases in real-time and automates the entire compliance auditing process.

Guardium’s investors include Cisco Systems and leading venture capital firms. The company has partnerships with IBM, EMC, HP, Microsoft, Oracle and Sybase and is a member of IBM’s prestigious Data Governance Council.

About RSA SecurID
The RSA SecurID system is as simple to use as entering a password, but significantly more secure. Used in conjunction with RSA® Authentication Manager software, an RSA SecurID authenticator functions like an ATM card for a company network, requiring users to identify themselves with two unique factors - something they know (a password or PIN), and something they have (such as an RSA SecurID key fob token) - before they are granted access to secure business information.

About the RSA Secured Partner Program
The RSA Secured Partner Program is one of the oldest and largest alliance programs of its type, bringing over twelve years of experience and hundreds of complementary solutions together. RSA SecurID®, RSA® Access Manager, RSA® Digital Certificate Manager RSA® Federated Identity Manager, and RSA® Key Manager certification programs bring added assurance to customers that the solutions they are deploying are certified as interoperable with industry leading products, helping them achieve faster time to deployment and lower overall cost of ownership. The RSA Secured Partner Program reflects RSA’s commitment to providing standards-based interoperability and mutual vendor support to customers using its identity assurance and access management solutions. For more information, please visit http://www.rsa.com.

Media Contacts:

Aline Kaplan
Guardium
781.314.0216

Corinne Sheehan and Adam Parken
Corporate Ink
617.969.9192

# # #

RSA, Secured, and SecurID are registered trademarks or trademarks of RSA Security, Inc. in the U.S. and/or other countries. EMC is a registered trademark of EMC Corporation. All other company and product names may be trademarks of their respective owners.