PRESS RELEASE : July 26, 2005

Proofpoint Introduces Proofpoint Secure Messaging Module, Powered by Voltage IBE, Adding Identity-Based, Policy-driven Encryption to Proofpoint’s Leading Messaging Security Solutions

Proofpoint Announces OEM Agreement with Voltage Security, Introduces New Module to Easily Ensure the Security of Confidential, Private or Regulated Email

Cupertino, Calif. –  July 26, 2005 – Proofpoint, Inc., the leader in large-enterprise messaging security solutions, today announced that the company will incorporate Voltage IBE™ (Identity-Based Encryption) technology into Proofpoint’s messaging security solutions. Proofpoint will include the Voltage IBE technology as part of the new Proofpoint Secure Messaging™ module which adds powerful, policy-driven encryption features to the Proofpoint Protection Server® software and Proofpoint Messaging Security Gateway™ appliance. Proofpoint Secure Messaging, powered by Voltage IBE, is the industry’s first automatic, policy-based secure messaging solution. It is the only solution on the market today that combines the industry’s best-of-breed identity-based encryption and enterprise messaging security technologies on a single, fully-integrated, easy-to-deploy platform.

The Proofpoint Secure Messaging module, powered by Voltage IBE, automatically and dynamically encrypts outbound email based on customizable policies, right at the email gateway. As a result, encryption policies are accurately and consistently applied and end users do not need to take any special actions to ensure that messages are appropriately encrypted. Proofpoint Secure Messaging is ideal for organizations in the healthcare, financial services, government and other sectors that need to protect sensitive data while still making that data readily available to appropriate affiliates, business partners and end users.

“Driven in part by government regulations including HIPAA, GLBA and Sarbanes-Oxley, organizations increasingly require integrated, policy-based email encryption capabilities as part of a complete email security solution,” said Sandra Vaughan, senior vice president of products for Proofpoint. “Building Voltage IBE technology into Proofpoint Secure Messaging offers our customers best-in-class encryption, seamlessly integrated with Proofpoint’s unique outbound email compliance and content security features.”

“Voltage Security and Proofpoint already share a number of customers and this highly-integrated solution is a natural extension of our joint success in the messaging market,” said Wasim Ahmad, vice president of marketing for Voltage Security. “With Proofpoint Secure Messaging standardizing on Voltage IBE, enterprises will get the policy-driven encryption capabilities they require coupled with the outstanding ease-of-use and minimal administration overhead they expect from Proofpoint.”

As in Proofpoint’s anti-spam, anti-virus and content security modules, secure messaging policies are managed and enforced on an enterprise level from a single location, using the Proofpoint Messaging Security Console™. Once defined, enterprise encryption policies are applied automatically at the gateway, eliminating the risk of user error. Message encryption policies can be extremely granular and encryption can be triggered by any combination of:

Structured data matches: Such as the presence of protected healthcare or financial information such as HIPAA codes, ABA routing numbers, credit card numbers and social security numbers as detected by the Proofpoint Regulatory Compliance™ module.

Unstructured data matches: Such as the presence of confidential information as detected by the Proofpoint Digital Asset Security™ module.

Keywords and regular expressions found in the subject line or content of messages.

Message origin or destination: Messages can be encrypted based on their destination (e.g., a specific business partner or supplier) or sender.

Unlike alternative approaches to encryption, Proofpoint’s identity-based encryption features provide effective protection for sensitive information without the administrative burdens and infrastructure costs typically associated with secure messaging. Advantages include:

End-user simplicity: Proofpoint Secure Messaging operates transparently to end users without requiring software downloads or the installation and maintenance of desktop encryption clients. Proofpoint’s solution automatically encrypts and decrypts sensitive content as required, without end users having to use and manage complicated digital certificates or encryption keys.

Simplified key and certificate management: Using Voltage IBE technology, public keys are generated on-demand, eliminating the daunting certificate lifecycle and key management requirements of other encryption solutions. Ongoing maintenance of certificates and Certificate Revocation Lists (CRLs) is not required.

Minimal data storage and archive requirements: Proofpoint Secure Messaging simplifies the storage, backup and recovery overhead usually associated with message encryption. Using IBE, messages and keys do not need to be backed up or stored for extended periods of time.

Low total cost-of-ownership: Easy deployment and minimal ongoing management requirements greatly reduce the ongoing costs associated with managing Proofpoint’s secure messaging solution.

In a separate announcement, Proofpoint and Voltage Security also announced today that R-G Crown Bank has deployed the companies’ solutions to provide complete protection from both inbound and outbound message-borne threats (see related announcement “R-G Crown Bank of Central Florida Selects Voltage Security and Proofpoint to Provide Comprehensive Secure Email”).

Pricing and Availability for Proofpoint Secure Messaging
The Proofpoint Secure Messaging module will be available in August 2005. Pricing begins at $20,000.

About Voltage IBE
Voltage IBE is a public key cryptography system that uses common identities (such as an email address or screen name) as public keys, eliminating the need for certificates, Certificate Revocation Lists (CRL) and other costly infrastructure. Voltage IBE results in a solution that is easy to implement and easy to manage, without the overhead and cost inherent in traditional security solutions. Voltage IBE is ideal for use with financial services customers and medical patients who expect communication to be kept private and secure and also want ease-of-use and low-cost. The practical application of Voltage IBE results in a solution that is:

Easy to implement and easy to manage – eliminates the overhead and costs inherent in traditional security solutions such as PKI

Highly scalable – no storage of keys or messages, and no need to contact online servers; allows the solution to scale dramatically without the need for additional infrastructure

Easy to use – no need for end users to worry about keys or certificates.

About Proofpoint, Inc.
Proofpoint provides messaging security solutions for large enterprises to stop spam, protect against email viruses and ensure compliance with corporate policies and regulations through their messaging infrastructure. The company's flagship products, the Proofpoint Messaging Security Gateway™ and Proofpoint Protection Server® provide future-proof messaging security using Proofpoint MLX™ technology, an advanced machine learning system developed by Proofpoint scientists and engineers. Proofpoint was founded by technology visionary and former CTO of Netscape Communications, Eric Hahn. The Cupertino, California-based company is funded by investors including Benchmark Capital, Inventures Group, Meritech Capital, Mohr, Davidow Ventures, and RRE Ventures. For more information, please visit http://www.proofpoint.com.

# # #

Proofpoint, Proofpoint MLX, Proofpoint Protection Server, Proofpoint Messaging Security Gateway, Proofpoint Spam Detection, Proofpoint Virus Protection, Proofpoint Content Compliance, Proofpoint Digital Asset Security and Proofpoint Regulatory Compliance are trademarks or registered trademarks of Proofpoint Inc. Voltage and Voltage IBE are trademarks or registered trademarks of Voltage Security, Inc. in the United States and other countries. All other trademarks contained herein are the property of their respective owners.