Cenzic Achieves Record Growth in 2006

Cenzic, Inc., a leading provider of automated application security assessment and compliance solutions, has experienced tremendous momentum and growth in the past nine months solidifying its leadership position in the web application security market. Not only has the company achieved 500% growth in 2006 over the same period last year, many of its customers are switching to Cenzic's solutions from other products. Today over 500 companies are using Cenzic's technology with an additional 3,000 companies using its Windows port of Nessus.

In addition to remarkable customer growth, the company also continues to reach significant product and corporate milestones. The company recently unveiled the first and only web application discovery and security assessment solution for the enterprise, Cenzic Hailstorm® Enterprise ARC (Application Risk Controller)(TM). With its intelligent dashboard, Cenzic Enterprise ARC gives companies the ability to automatically discover and inventory applications and provides a comprehensive view of application security status with a complete workflow from a central console for Information Security Managers, CIOs, CISOs, Compliance Officers, and Privacy Officers -- all through a web interface. With the release of Enterprise ARC, Cenzic now offers a full suite of web assessment and security products enabling companies of any size to bulletproof its web applications.

Cenzic Hailstorm Professional, the company's flagship product, also continues to rise in popularity due to its next-generation technology that truly emulates a hacker and automates the security testing process throughout the entire software development lifecycle (SDLC). Unlike other approaches that merely compare signatures, Cenzic Hailstorm is based on a unique patent-pending technology, Stateful Assessment(TM), that maintains the state of the application during assessment, and is able to track a series of transactions to identify vulnerabilities. The result is a dramatic reduction in false positives and false negatives. Interested companies can download Hailstorm at http://www.cenzic.com/products_services/download_hailstorm.php . Cenzic is also seeing a tremendous growth in its managed service (SaaS) ClickToSecure(TM) which now comprises one-third of the company's total business, as well as Assessment Methodology(TM), its best practices consulting package.

"Today, over 75% of attacks are occurring through web applications due to gaping security holes in code," said John Weinschenk, CEO and president of Cenzic. "Hackers know this and Cenzic is completely focused on solving that problem by providing Information Security, QA, and developers throughout the enterprise an ability to test applications for security vulnerabilities. We are excited about our growth and the fact that there's a huge momentum for companies switching from their existing solutions to Cenzic. This is an acknowledgement of the most superior solution combined with an outstanding service-driven organization."

Over the past nine months, Cenzic has also integrated its products with several leading technologies, won numerous product and corporate awards and dramatically heightened the awareness of web application vulnerabilities and the effects they can have on companies and end-users. A few significant milestones include: joining the Microsoft SecureIT Alliance, a first-of-its-kind industry collaboration designed to efficiently and effectively develop new and enhanced security solutions for the Microsoft platform; integrating its technology with Source Code Scanners; and last year's release of its Windows port of Nessus, the world's most popular vulnerability scanner used in over 75,000 organizations world-wide, to the open source community. It can be downloaded at http://www.cenzic.com/news_events/nessusport.php .

Further validating its commitment to its customers, Cenzic's specialized research team, Cenzic Intelligent Analysis (CIA) Research, continues to aggressively discover and report new application vulnerabilities. The CIA Lab recently discovered a vulnerability in Yahoo! and vulnerabilities in two popular blog technologies, Roller and Blojsom. The discovery of these vulnerabilities has kept hackers from wreaking havoc for over hundreds of thousands of individuals.

About Cenzic

Cenzic is a leading provider of the next-generation enterprise software and a leading Managed Service offering for automated application security assessment and compliance that allows Fortune 1000 corporations, mid-sized corporations, and government organizations to dramatically improve the security of web applications. Cenzic® Hailstorm®, the most accurate and extensible product in the industry, enables security experts, QA professionals, and developers to work together to assess, analyze, and remediate applications for security vulnerabilities. Hailstorm benefits include reduced security risk and liability, lower development and testing costs, and faster time-to-market. Cenzic ClickToSecure(TM) service is one of the industry's first Software as a Service (SaaS) to combine the power of an enterprise-class application security assessment product with the flexibility of a managed security service. Cenzic Assessment Methodology completes the solution with a state-of-the-art business process consulting service to help customers improve their application security methodologies. Cenzic solutions are the most accurate, comprehensive, and extensible in the industry. Cenzic's current focus includes financial services, e-retail, healthcare, and government sectors. For more information, visit www.cenzic.com .