Application Security, Inc. to Showcase Vulnerability Management Solution at Key Security Events

Market Wire, October, 2005

Application Security, Inc. (AppSecInc) (www.appsecinc.com) will participate in three security conferences in October, underscoring the criticality of database-specific security during a time of unprecedented attacks on corporate databases.

At all three conferences, beginning with Information Security Decisions Fall, October 19-21, AppSecInc will demonstrate the recently introduced features and functionality of its industry-leading vulnerability assessment scanner, AppDetective(TM). Last month, the company announced new distributed management and granular security change auditing capabilities (see announcement at www.appsecinc.com/news/pr/first_to_market.html).

Then on October 27, at the Federal Information Assurance Conference (FIAC) in Washington, DC, AppSecInc President and CEO Jack Hembrough will lead a tutorial on database attacks and how best to avoid them. Additional detail on Jack's tutorial at FIAC and AppSecInc's presence at all three events follows:

--  Information Security Decisions Fall, October 19-21, 2005, New York, NY
    -- Booth #302

    Held at the Hilton New York and hosted by Information Security Magazine
    and SearchSecurity.com, the invitation only event was designed
    specifically for information security professionals who need to keep
    critical data secure and protected from disaster or malice, and will
    cover topics such as vulnerability management, security as a business
    process and end-point compliance. For additional information,
    visit http://infosecurityconference.techtarget.com/html/ex_home.htm.

--  Federal Information Assurance Conference (FIAC), October 25-27, 2005,
    Washington, DC -- Booth #78

    AppSecInc President and CEO, Jack Hembrough, will lead a tutorial titled
    "Risk at the Interface: Anatomy of a Database Attack" on Thursday,
    October 27, 2005, from 9:00 a.m. to 12:00 p.m. During his talk, Jack
    will review examples of database attack scenarios -- privilege
    escalation, password brute-forcing, SQL injection and buffer overflow --
    and provide tips on how to combat database attacks, including
    recommendations on vulnerability assessment, intrusion protection and
    encryption.

    Revolving around this year's theme "Building Your Government Security
    Culture," the fifth annual FIAC will bring together a variety of
    resources from government, industry and academia to present and discuss
    information which will shape the information security steps throughout
    the government. For additional information, visit: www.fbcinc.com/fiac/.

--  SANS Network Security 2005, October 24-30, 2005, Los Angeles, CA --
    Booth #513

    This year's event offers multiple immersion training tracks and special
    one and two-day classes, as well as a number of vendor events including
    presentations, a two-day vendor solutions expo and receptions. For
    additional information, visit: www.sans.org/ns2005/.

Members of the media and market research communities interested in meeting with AppSecInc company executives at any of these events are invited to contact Rebecca Knowles (rknowles@appsecinc.com, 781-276-4508) or Juli Greenwood at CHEN PR (jgreenwood@chenpr.com, 781-672-3137).

About Application Security, Inc. (AppSecInc)

AppSecInc is the leading provider of application security solutions for the enterprise. AppSecInc's products -- the industry's only complete vulnerability management solution for the application tier -- proactively secure enterprise applications at more than 350 organizations around the world. By securing data at its source, we enable organizations to more confidently extend their business with customers, partners and suppliers while meeting regulatory compliance requirements. Our security experts, combined with our strong support team, deliver up-to-date application safeguards that minimize risk and eliminate its impact on business. Please contact us at 1-866-927-7732 to learn more, or visit us on the web at www.appsecinc.com.

AppSecInc and AppDetective are trademarks of Application Security, Inc. All other company and product names are trademarks of their respective companies.

CONTACT: Rebecca Knowles Application Security, Inc. Email Contact (781) 276-4508 Juli Greenwood CHEN PR, Inc. Email Contact (781) 672-3137