Internationally Recognized Standard Provides Objective Validation of Reliability, Quality, and Trustworthiness of IT Product

FOSTER CITY, Calif., Feb. 27, 2007 – Imperva®, the global leader in data security and compliance solutions for the data center, today announced that its SecureSphere data security appliances are approved by the National Information Assurance Partnership (NIAP) for conformance to the Common Criteria Certification process. SecureSphere appliances will be certified for Common Criteria (also known as ISO 15408), providing independent validation of their security capabilities that is recognized worldwide.

Upon completion of the conformance process, SecureSphere will be one of the first database and web application security appliances to achieve Common Criteria certification. Common Criteria Certification is a requirement of hardware and software devices used by federal government on national security systems. The international community has embraced the Common Criteria through the Common Criteria Recognition Arrangement (CCRA) whereby the signers have agreed to accept the results of Common Criteria evaluations performed by other CCRA members.

Common Criteria certification will provide globally recognized validation of SecureSphere’s ability to secure web-based applications and databases. Imperva’s appliances enable organizations to protect web applications from being compromised, secure databases from internal and external attacks, and monitor database activity for audit and compliance reporting.

“Common Criteria certification will open up the government sector in the US and new markets around the world for Imperva’s award winning data security products,” said Amichai Shulman, CTO for Imperva.

About the Common Criteria Evaluation

The National Institute of Standards and Technology (NIST) and the National Security Agency (NSA) have established a national program, the NIAP Common Criteria Evaluation and Validation Scheme (CCEVS) for the evaluation of information technology internationally. During the course of an evaluation, the Validation Body provides technical guidance to those testing laboratories, validates the results of IT security evaluations for conformance to the Common Criteria, and serves as an interface to other nations for the recognition of such evaluations. The Validation Body assesses the results of a security evaluation conducted and when appropriate, issues a Common Criteria certificate. Imperva is currently in the process of receiving this assessment. The certificate, together with its associated validation report, confirms that an IT product has been evaluated at an accredited laboratory using the Common Evaluation Methodology for conformance to the Common Criteria.

About Imperva

Imperva is the leader in application data security and compliance. Leading enterprise and government organizations worldwide rely on Imperva to prevent data theft and abuse, and ensure data integrity. The company’s SecureSphere products provide data governance and protection solutions that monitor, audit and secure business applications and databases. For more information, visit www.imperva.com

# # #

Imperva and SecureSphere are trademarks of Imperva, Inc. All other brand or product names are trademarks or registered trademarks of their respective holders.

Editorial Contact

Marc Gendron
(781) 237-0341
marc@mqpr.net