McAfee acquires Preventsys

BANGALORE



June 8, 2006

Security company McAfee has acquired Preventsys Inc, a security risk

management and automated security compliance reporting firm. The addition of

Preventsys's security risk management and compliance solution to McAfee's

proactive enterprise security technology will further advance McAfee in its

ability to help companies reduce the complexity of managing their security.

Preventsys has pioneered an advanced Security Risk Management System for

large companies that need to proactively protect confidential customer and

company information, ensure high availability of critical IT assets, and easily

communicate security compliance to executive management.

Preventsys currently provides the only solution that consolidates

vulnerability, configuration and threat data from multi-vendor tools into an

enterprise dashboard and automates the security compliance reporting process.

"McAfee's acquisition of Preventsys fulfills a key component of our risk

management and compliance strategy, which is based on helping our customers

leverage their existing security technologies," said Ken Gonzalez, VP of

Corporate Development, McAfee. "With Preventsys technology, we can help our

customers satisfy regulatory requirements for automated compliance reporting,

while leveraging existing McAfee technologies such as McAfee ePolicy

Orchestrator and Foundstone."

According to industry analyst firm IDC, "Budgetary and staffing

constraints will continue to drive organizations to look for better ways to

cost-effectively manage their security infrastructure. Security and

vulnerability management software solutions can simplify the complexity

associated with managing multiple security solutions while at the same time

increasing the effectiveness of protection."

"We see an opportunity to bring automated security compliance reporting

to McAfee's enterprise customers," said Patrick Harr, CEO for Preventsys.

"It is the only solution that can consolidate multi-vendor assessment

information and be easily integrated into a user's new or existing security

tools without ever having to change the security process or reports. This will

decrease the time and costs associated with manual auditing and compliance

reporting."