OUNCE LABS CERTIFIED RESELLER PROGRAM LAUNCHES WITH PATRIOT TECHNOLOGIES

Ounce Labs and Patriot Technologies Address Federal Demands for Application Source Code Security

Waltham, MA—August 16, 2004 — Ounce Labs, Inc., the leader in software vulnerability analysis and management, today announced the launch of the Ounce Labs Certified Reseller Program and named Patriot Technologies, Inc. as its first member. A provider of premier security solutions for federal agencies and commercial organizations, Patriot Technologies now includes Ounce Labs’ Prexis in its full complement of product and services.

Prexis automatically analyzes source code to identify and manage software vulnerabilities. By addressing security issues proactively at their root cause, Prexis offers significant value for Patriot’s customer base, which consists primarily of organizations responsible for the nation’s critical infrastructure.

“Prexis fills a void for companies looking for a cost-effective, metrics-based method to analyze, manage, and fix vulnerabilities. We are excited to launch the Ounce Labs Certified Reseller Program to give more security managers that option,” said Greg Dunne, VP of Sales at Ounce Labs. “Patriot Technologies clearly fits the standards of professionalism and expertise that we require from our channel partners. Patriot is a trusted name in security implementation that is committed to helping customers fulfill the strict requirements associated with critical infrastructure.”

Among a number of regulations mandating security practices, the DoD Information Technology Security Certification and Accreditation Process (DITSCAP) requires agencies to analyze each of their IT systems “to determine its susceptibility to exploitation, the potential rewards to the exploiter, the probability of occurrence, and any related threat.”

The Federal Information Security Management Act (FISMA) specifically requires that government agencies identify and remediate vulnerabilities in information systems, including applications. These requirements are in force whether the applications are developed in house or “provided or managed by another agency, contractor, or other source.”

“Federal CIOs are specifically mandated to assess and address vulnerabilities in the applications that run their mission-critical operations, but typically they cannot afford the cost or manpower for manual review,” said Mark Williamson, VP of Sales at Patriot Technologies. “Prexis accomplishes in minutes what used to take months, and provides the metrics-based analysis needed to support our customers’ remediation and compliance efforts. The addition of Prexis to our comprehensive portfolio is of tremendous interest to our client base.”

Prexis v. 2.0 is now available through Patriot Technologies.

Patriot Technologies
Patriot Technologies, Inc. is a leader in providing information security solutions for business, education, and government clients around the world. Headquartered in Frederick, Maryland, Patriot is a growing company that has been entirely focused on information security since it was established in 1996. Patriot consistently exceeds the expectations of its most demanding clients by providing superior information security solutions, services, and training. Government agencies and Fortune 500 companies rely on Patriot to protect their critical information systems and data.

About Ounce Labs, Inc.
Ounce Labs™, the leader in software security assurance, delivers products that allow customers to manage software risk in applications across the enterprise, down to individual lines of code. The Ounce solution features patents-pending analysis technology, which scans source code to pinpoint programming errors, design flaws, and policy violations. Ounce offers the most accurate and complete analysis, the fastest time-to-value, the only complete portfolio management, and the greatest deployment flexibility. Customers include leading organizations in financial services, telecommunications, software development, government, and other industries focused on protecting data, reducing software vulnerabilities, and complying with industry regulations. For more information, please visit www.ouncelabs.com.

###

CONTACT:
Ounce Labs
Jake Messier
781.547.7031 (o)
774-368-0094 (m)
jake.messier@ouncelabs.com

"Security scanners tend to be trigger happy and obtuse, but Ounce Labs offers friendly scanners with fewer false alarms."

SD Times 100