Tizor Announces Mantra 6 for Automated Discovery of Sensitive Data and Prevention of Unauthorized Database Activity

Market Wire, June, 2008

Tizor Systems , a leading provider of enterprise database monitoring and protection solutions, today announced Mantra 6 with updated features for data discovery, database security and ease of use. Mantra 6 features include automated discovery for finding databases and specific classes of sensitive data; session termination for blocking unauthorized or suspicious database activity; and drag and drop policy creation for the fastest and easiest implementation of data auditing for risk mitigation.

"Many organizations are realizing that they don't know what data they have, where it is stored, and where it is processed. Successful organizations take a top-down approach, rather than creating a meticulous inventory of all the data within their environment. They identify the very specific pieces of data that can directly affect revenues or the business processes that handle very sensitive data, protect them appropriately, and then use templates and the lessons learned to classify and handle other data within the organization." Making Data Centric Security Real, February 5, 2008 by Paul Stamp, Analyst, Forrester Research

Most companies do not have a complete inventory of their databases or the types of data that exist within them. This lack of visibility creates risks that could lead to insider abuse, data breaches or failure to pass a compliance audit. Mantra 6 automates discovery tasks that previously took months and required a highly manual effort. It quickly finds and classifies databases and the data within them to provide IT, security and compliance professionals with unprecedented visibility into the location of data assets, type of data assets in use, and potential risks to those assets. Mantra's new discovery features are critical for companies that need to find credit card data for the Payment Card Industry (PCI) Data Security Standard compliance, account information for Gramm-Leach-Bliley Act (GLBA) compliance, or user information for personally identifiable or protected health information (PII/PHI) projects. The detailed information that Discovery provides can dramatically increase the effectiveness of an organization's security and compliance programs.

Mantra 6 also adds session termination to allow companies to combine database monitoring and auditing with preventative controls for stopping unauthorized activity in real time. Mantra's TAP, a lightweight, host-based agent for monitoring network and local database activity, has been enhanced to also prevent or block activity in real time. This enables companies to monitor and prevent unauthorized privileged user activity such as accessing sensitive customer data, granting privileges to unauthorized users or creating new tables or users. Unauthorized or inappropriate access can be prevented both over the network and by users going directly to the database console. The Mantra TAP is a completely transparent solution that does not require any changes to be made to the database. It also ensures separation of duties and cannot be manipulated or changed by DBA's or developers. With these new features, companies can now use Mantra as a preventative control to stop unauthorized activity that could lead to data leakage, identity theft or fraud.

"Tizor's solutions are specifically designed to end the long, painful, and costly process many companies have experienced deploying enterprise security solutions," stated Joel Rosen, president and CEO of Tizor. "We have now extended that same philosophy to three of the most fundamental questions companies face around data security and data-oriented compliance: where is my sensitive data; who is accessing it; and how is it being used today? Companies need an easy-to-deploy but rigorous way to get the macro picture in order to focus their compliance and security efforts and that's just what Mantra 6.0 does."

About Mantra 6

Mantra 6 enables large and mid-sized enterprises to regain control of critical data, IT budgets and personnel resources. The only purpose-built solution for high-performance database monitoring and auditing, Mantra's architecture balances technically sophisticated analytical capabilities with an intuitive user interface and easy to use policy language.

Mantra's English-like policy language allows technical or non-technical users to create detailed compliance and security policies without the long learning curve typically associated with these tools. Using drag and drop policy creation along with Mantra's pre-built compliance templates, enterprises can address regulations and standards, such as SOX, GLBA, FFIEC and PCI in less time, with fewer people and at a lower total cost of ownership.

Mantra's innovations include:

--  Automated, best-in-class data discovery - discovers and classifies
    data at rest inside of databases or as the data is moving across the
    network.
--  Non-inline Blocking - provides policy-driven session termination
    without becoming a point of failure in your network.
--  Drag and Drop policy creation and policy wizards - allows for the
    rapid creation and implementation of more security and compliance policies.
--  Behavioral Fingerprinting® - automatically identifies suspicious
    behavior in real time, eliminating the need for complex baseline policies
    which generate volumes of false positives.
--  Content Scanning - locates any type of sensitive or regulated data and
    includes in-the-box scanning policies for locating cardholder numbers from
    all of the major credit cards.
--  Monitors encrypted traffic - first product to monitor encrypted
    traffic to the database supporting multiple encryption methods including
    IPSEC, SSL or SSH.
--  Unstructured data - first product to provide unified auditing and
    monitoring of file shares.