McAfee acquires Preventsys

BANGALORE

June 8, 2006

Security company McAfee has acquired Preventsys Inc, a security risk
management and automated security compliance reporting firm. The addition of
Preventsys's security risk management and compliance solution to McAfee's
proactive enterprise security technology will further advance McAfee in its
ability to help companies reduce the complexity of managing their security.

Preventsys has pioneered an advanced Security Risk Management System for
large companies that need to proactively protect confidential customer and
company information, ensure high availability of critical IT assets, and easily
communicate security compliance to executive management.

Preventsys currently provides the only solution that consolidates
vulnerability, configuration and threat data from multi-vendor tools into an
enterprise dashboard and automates the security compliance reporting process.

"McAfee's acquisition of Preventsys fulfills a key component of our risk
management and compliance strategy, which is based on helping our customers
leverage their existing security technologies," said Ken Gonzalez, VP of
Corporate Development, McAfee. "With Preventsys technology, we can help our
customers satisfy regulatory requirements for automated compliance reporting,
while leveraging existing McAfee technologies such as McAfee ePolicy
Orchestrator and Foundstone."

According to industry analyst firm IDC, "Budgetary and staffing
constraints will continue to drive organizations to look for better ways to
cost-effectively manage their security infrastructure. Security and
vulnerability management software solutions can simplify the complexity
associated with managing multiple security solutions while at the same time
increasing the effectiveness of protection."

"We see an opportunity to bring automated security compliance reporting
to McAfee's enterprise customers," said Patrick Harr, CEO for Preventsys.
"It is the only solution that can consolidate multi-vendor assessment
information and be easily integrated into a user's new or existing security
tools without ever having to change the security process or reports. This will
decrease the time and costs associated with manual auditing and compliance
reporting."