Application Data Security and Compliance Leader Lends Support to Help Promote PCI DSS Adoption and Compliance

FOSTER CITY, Calif., Sep 17, 2007 – Imperva®, the leader in application data security and compliance, today announced that it has joined the Payment Card Industry (PCI) Security Standards Council founded by American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International. The Council is an open global forum for the ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection.

Members of the PCI Council recommend changes, provide input on future initiatives, nominate representatives for election to the PCI Security Standards Council Advisory Board, and have access to and ability to comment on drafts of potential changes to security standards in advance, as well as influence the direction of the organization overall. Imperva brings a unique perspective to the Council with its combined expertise in web application protection and database monitoring/security.

The PCI Data Security Standard (DSS) represents a common set of industry tools and measurements to help ensure the safe handling of sensitive information. Initially created by aligning Visa’s Account Information Security (AIS)/Cardholder Information Security (CISP) programs with MasterCard’s Site Data Protection (SDP) program, the standard provides an actionable framework for developing a robust account data security process – including preventing, detecting and reacting to security incidents.

“More than 50 percent of Imperva’s business is driven by PCI specific projects, so we bring deep experience in PCI compliance to the PCI Security Standards Council,” said Shlomo Kramer, president and CEO of Imperva. “Earlier this year we introduced the Imperva ADC Insight Services, which provide the only out-of-the-box solution targeted to PCI application and database security requirements. This expertise will enable us to make valuable contributions to the Council in the areas of web application protection and database security.”

About Imperva ADC Insight Services

Imperva ADC Insight Services are a continuously updated library of configuration packages that tailor SecureSphere gateways for the security, audit, and compliance needs of specific business applications and regulations. Created by the Imperva Application Defense Center, an internationally recognized security and compliance research organization, ADC Insights instantly set-up SecureSphere to monitor and protect SAP ERP and Oracle E-Business applications, and meet requirements for the PCI DSS Standard, and other mandates including Sarbanes-Oxley, HIPAA, and more. ADC Insights enable organizations to quickly and easily secure databases and meet regulatory pressures without in-depth knowledge of these applications or mandates.

About SecureSphere

Imperva SecureSphere award-winning products deliver activity monitoring, audit and security for business applications and databases. SecureSphere products offer proven, automated capabilities for achieving, maintaining and documenting regulatory compliance. SecureSphere is the industry’s only complete business-critical data security and compliance solution that provides full visibility into data usage by the end-user, through the application and into the database. Automated feeds from the security and compliance experts at the Imperva Application Defense Center (ADC) ensure that SecureSphere is always armed with the latest defenses against new threats, and the most recent regulatory compliance best practices.

About the PCI Security Standards Council

The mission of the PCI Security Standards Council is to enhance payment account security by fostering broad adoption of the PCI Data Security Standard and other standards that increase payment data security.

The PCI Security Standards Council was formed by the major payment card brands American Express®, Discover Financial Services, JCB, MasterCard Worldwide and Visa International to provide a transparent forum in which all stakeholders can provide input into the ongoing development, enhancement and dissemination of the Data Security Standard. Merchants, banks, processors and point of sale vendors are encouraged to join as Participating Organizations.

A 21 member Board of Advisors represents the current roster of more than 230 PCI SSC Participating Organizations and provides critical feedback to the ongoing enhancement of security standards managed by the Council. Previously announced Board members include: APACS , Bank of America, British Airways PLC, Chase Paymentech Solutions, First Data Corporation, JPMorgan Chase and Co, Microsoft, Moneris Solutions Corporation, PayPal Inc., The Royal Bank of Scotland, Tesco Stores Ltd., TSYS Acquiring Solutions, LLC, VeriFone, Inc. and Wal-Mart Stores, Inc.

About Imperva

Imperva is the leader in application data security and compliance. Leading enterprise and government organizations worldwide rely on Imperva to prevent data theft and abuse, and ensure data integrity. The company’s SecureSphere products provide data governance and protection solutions that monitor, audit and secure business applications and databases. For more information, visit www.imperva.com

# # #

Imperva and SecureSphere are trademarks of Imperva, Inc. All other brand or product names are trademarks or registered trademarks of their respective holders.

Editorial Contact

Marc Gendron
(781) 237-0341
marc@mqpr.net