SD Times Awards Watchfire Top Security Company Honors as Part of SD Times 100

Software Developers Continue to Embrace Watchfire's Integration of Security Testing across the Software Development Life Cycle

WALTHAM, MA - June 4, 2007 - Continuing to earn recognition for its innovation as the industry leader in web application vulnerability testing, Watchfire today was honored by SD Times as a winner of the Security category in BZ Media's 5th Annual SD Times 100. Spotlighting the leaders and innovators of the software development industry, the judges picked Watchfire for the Security category award because the Company "continued bolstering its flagship AppScan black-box testing tool by adding the ability to test web services code for vulnerabilities." This is a significant honor as it recognizes Watchfire's focus in making secure software development a reality.

The SD Times 100 is featured in the June 1, 2007 issue of the newspaper (online at www.sdtimes.com). The development industry newspaper lists winning companies, organizations and individuals that most broadly "set the agenda" for software development managers, developers and the industry through leadership and innovation during the past year.

"Security is a priority for developers, yet it's unrealistic to expect the development community to have the same advanced skills of security professionals. In working directly with our extensive customer base, Watchfire has yielded tremendous results in our efforts to bridge the gap between security and development teams so they can both achieve the goals of secure development without having to leave the comfort zone of the technology they are already familiar with," said Peter McKay, president and CEO, Watchfire. "This SD Times award recognizes Watchfire's efforts to make application security scanning a simple, yet highly powerful and effective tool for secure software development."

Chosen by the editors of SD Times, the technology industry's most influential companies were broken down into ten separate industry segments. When choosing the winners, the editors carefully considered each company's offerings and reputation. They listened to the developer industry "buzz" around the company, its products and technologies as a sign of leadership within the industry. The SD Times 100 looked for companies that: have determined a direction that developers followed; set the industry agenda; advanced the software development art; have competitors nervously tracking the company's moves; and have programmers anxiously awaiting its developments. In the opinion of the publication, those qualities mark a leader.

Winning the Security category award in the SD Times 100 continues a trend of industry achievements for Watchfire, and is the second major award the company has received from a top developer magazine this quarter. Other recent accolades include:

• Watchfire recognition as the Best Security Company at the recent RSA Conference, sweeping THREE out of only five total 2007 SC Magazine Excellence Awards.
• Watchfire's AppScan winning the Dr. Dobb's Journal 17th Annual Jolt Award for Security (chosen over competitors as the most innovative, trend-making, ahead-of-the-curve security product that developers should be using today).
• Watchfire named the worldwide market share leader in the application vulnerability assessment software category for the second year in a row by leading IT market research/advisory firm IDC.
• Watchfire named one of the top 25 innovations by Financial IT Security Magazine in its 2007 "Future Now" list.
• Selection as a "Top Pick" for 2007 in the ITDefense Product Directory.
• Software Test and Performance selection of Watchfire as a finalist for the Tester's Choice Awards.
• SOA Web Services Journal readers chose Watchfire as a finalist for the Best Security Solution in the pending Reader's Choice awards.

"The winners of this year's SD Times 100 awards have demonstrated their leadership in shaping the software development industry," said David Rubinstein, Editor-in-Chief of SD Times. "We took into account each nominee's products and services, its reputation among development managers, and the new ideas it brought out. These select individuals and organizations are the ones we've identified as helping to move the art of development forward."

About AppScan
Watchfire's flagship product, AppScan, is the market-leading web application security assessment suite that accurately pinpoints critical vulnerabilities and manages the process of fixing them. Solutions include:

• AppScan 7.5: World's most popular and precise application vulnerability assessment product
• AppScan QA: Seamlessly integrates web application security testing into the current QA environment
• AppScan Reporting Console: Industry's first web-based, multi-user solution to aggregate vulnerability data and provide scalable report access
• AppScan Enterprise: Industry's first web-based, multi-user solution to extend application security testing throughout your SDLC
• AppScan Enterprise OnDemand: Web application vulnerability assessment software offered as a service

For more information, visit Watchfire's AppScan Products Page at www.watchfire.com/products/appscan

About BZ Media and SD Times
BZ Media LLC (www.bzmedia.com) is a New York-based media company combining the best of print and Internet publishing with industry-leading technical conferences and expositions.

BZ Media's SD Times (www.sdtimes.com) is the twice-monthly newspaper of record for the software development industry. SD Times reaches more than 60,000 subscribers in 131 countries.

About Watchfire
Watchfire is the leading provider of web application security software and the only company to offer an end-to-end solution including intelligent fix recommendations to evaluate, understand and resolve issues. More than 800 enterprises and government agencies, including AXA Financial, SunTrust, HSBC, Vodafone, Veterans Affairs and Dell rely on Watchfire to identify, report and help remediate security vulnerabilities. Watchfire has been the recipient of several industry honors including: winning an unprecedented three out of five 2007 SC Magazine Excellence Awards (including Best Security Company); the HP/IAPP Privacy Innovation Award; Computerworld's Innovative Technology Award; winner of the Dr. Dobb's Journal 2007 Jolt Product Excellence Award for Security; and "Recommended" rating by Computer Reseller News. For two years in a row, Watchfire has been named by IDC as the worldwide market share leader in web application vulnerability assessment software. Watchfire's partners include IBM Global Services, Fortify, PricewaterhouseCoopers, Sapient, Microsoft, Interwoven, EMC Documentum and Mercury. Watchfire is headquartered in Waltham, MA. For more information, please visit www.watchfire.com.