OUNCE LABS' LEADING SOURCE CODE ANALYSIS SOLUTION NAMED FINALIST IN ANNUAL JOLT PRODUCT EXCELLENCE AWARDS

WALTHAM, MA--January 8, 2008 -- Ounce Labs™, the industry leader in software risk analysis, today announced that the company's flagship source code analysis solution, Ounce 5, has been selected as a finalist for the 18th annual Dr. Dobb's Jolt Product Excellent Awards in the Security Tools category. The finalists were chosen by a team of esteemed editors, columnists, and industry experts.

CMP Technology's Dr. Dobb's Jolt Product Excellence Awards have been awarded in the past to software products, books and Web sites that developers should be using to create software faster, easier and more efficiently. Finalists are selected by a panel of prestigious judges that are recognized as forward-looking industry experts who provide insight into the latest and most promising trends. They define who is ahead of the curve, honoring products that are universally useful; that are simple, yet rich in functionality; that redefine or "jolt" their product space or solve a nagging problem that has consistently eluded other products and resources.

"The Jolt judges have selected these finalists from among hundreds of qualified nominations, and they represent a cross-section of innovative tools for every phase of the software development lifecycle," said Amber Ankerholz, Conference Manager for Dr. Dobb's Events. "In the next round of the process, the judges will take an in-depth look at the finalists, examining the standard criteria of audience suitability, productivity, innovation, quality, ROI, risk, and flexibility, but also seeking products that are: ahead of the curve, universally useful, simple yet rich in functionality, or that have solved a nagging problem in their product space."

"Being named as a finalist for the prestigious Jolt Awards illustrates how we're providing an industry-leading solution to address today's leading security issues -- eliminating existing software security vulnerabilities and preventing future ones," said Hugh Scandrett, president and CEO of Ounce Labs. "Leading organizations are using our solutions to tightly integrate application security methods, tools, standards and best practices into every stage of their software development lifecycles."

Jolt award winners will be announced on March 5, 2008 at the Software Development Conference & Expo West at the Santa Clara Convention Center in Santa Clara, CA. More information is available at http://www.joltawards.com.

Ounce Labs' flagship product, Ounce 5, released in June 2007, is the only source code analysis solution designed from the ground up to provide executives, security analysts, developers, auditors and managers with the answers they need to manage the risk created by vulnerable software. Ounce Labs' patented software risk analysis solution helps developers, IT managers, security auditors and compliance managers to:

• Quickly identify the most serious security risks: Ounce's patented
  analysis capabilities identify the most critical coding errors and design
  flaws.
• Maximize the effectiveness of all security stakeholders: The fastest
  time-to-results streamlines security efforts throughout the software
  development lifecycle.
• Manage risk across an enterprise portfolio: Centralized dashboards and
  policy management capabilities allow at-a-glance information about your
  software risk, enterprise-wide.
  

Ounce 5 is also the first solution to support both the Privacy (Requirement 3) and Security (Requirement 6) sections of the PCI (Payment Card Industry) standard and deliver the industry's most comprehensive support for best practices standards, including detailed reports identifying application vulnerabilities defined by the OWASP Top 10 2007 and the CWE specification published by Mitre Corp.

About Ounce Labs, Inc.
Ounce Labs' solutions enable organizations to identify, prioritize and eliminate business risk to the enterprise caused by software security vulnerabilities. With Ounce Labs, organizations strengthen application security, protect confidential information and verify compliance with both internal policies and industry mandates such as PCI, FISMA, HIPAA and others.

Ounce Labs' software analyzes application source code to provide the most complete and accurate analysis of application vulnerabilities and their relative priorities, enabling business users and IT professionals to optimize their resources on resolving the most critical issues. Unique in its ability to scale across an organization's entire portfolio of applications, Ounce is used enterprise-wide by many of the world's most security-conscious organizations, including AT&T, IBM, Intel, Lockheed Martin, GMAC, Eos Airlines, the U.S. Government Accountability Office, Unisys and VeriSign.

Led by senior executives with deep enterprise software and security expertise, Ounce Labs is headquartered in Waltham, Massachusetts, with regional offices throughout the U.S. and Europe. For more information, please visit www.ouncelabs.com.

Ounce Labs is a registered trademark of Ounce Labs, Inc. in the United States and other countries. Ounce 5, SmartTrace and SmartAudit are trademarks of Ounce Labs. Other product or service names mentioned herein are the trademarks of their respective owners.

Media Contacts:
Rachel O’Connell
Ounce Labs
+1.781.547.7016
rachel.oconnell@ouncelabs.com
http://www.ouncelabs.com

Brenda Menard
Davies Murphy Group
+1.781.418.2435
ounce@daviesmurphy.com
http://www.daviesmurphy.com

Ounce Labs is a registered trademark of Ounce Labs, Inc. in the United States and other countries. Ounce 5, SmartTrace and SmartAudit are trademarks of Ounce Labs. Other product or service names mentioned herein are the trademarks of their respective owners.