For Immediate Release

SKYBOX SECURITY PRESENTS AT FORRESTER'S EMERGING TECHNOLOGY SHOWCASE

Highlights Skybox Leadership in Growing Security Risk Management Market

PALO ALTO, CA - December 14, 2004 - Skybox ® Security Inc., the leader of next-generation Security Risk Management (SRM) software solutions, today announced that the respected analyst firm of Forrester Research chose Skybox as one of six security-focused companies to present at Forrester's Emerging Technology Showcase (ETS) last week in Scottsdale, Arizona. This prestigious honor recognizes Skybox's market leadership and validates a clear trend toward proactive risk management.

"We are honored to have been selected by Forrester to be part of this prestigious event and for bringing to the forefront a significant problem shared by many of the largest financial, telecommunications, high technology and government institutions in the world: the need to automate the risk assessment and remediation planning process - bringing proactive risk management and operational efficiencies to IT security already enjoyed by other IT disciplines," said Edward Cooper, VP of worldwide marketing for Skybox Security.

Forrester Research recently named Skybox as "the most innovative company" in a September 2004 report titled "Technical Threat Management: Steps to take Before, During and After the Next Attack" by analysts Steve Hunt, Laura Koetzle and Natalie Lambert. The report identifies a clear gap between threat information gathering and execution technologies and the need for planning and decision tools that can help enterprises prevent attacks on critical information assets. Technical Threat Management is defined as the complete process of understanding threats, managing vulnerabilities, limiting the damage from attacks, and applying patches to the target systems.

The Forrester ETS is a platform for companies to demonstrate alternative technologies that provide solutions to current business needs. Through a series of live presentations, critical product evaluations and analyst debates, Forrester identifies best-of-breed solutions that will offer future competitive advantages.

 The ETS was held December 8-10, 2004 in Scottsdale, Ariz. Skybox Security presented as part of the Security TechnoVista, which also featured Adobe Systems, Datanautics, SecureWave and Tumbleweed.

About Skybox Security

Skybox ® Security, Inc. is the leader of next-generation Security Risk Management (SRM) solutions. The company's flagship product, Skybox ® View, is the first enterprise software platform that raises vulnerability assessment, threat analysis, remediation planning, and change management to the business risk level where it belongs. By combining business impact analysis and simulation with vulnerability data and network modeling, enterprises can continuously maintain risk-resilient networks, reduce regulatory compliance exposures, and shrink the window of exposure from months to hours.

With Skybox View, security professionals can take a disciplined approach to measure business risk exposure, understand effectiveness of remediation alternatives, justify mitigation efforts (ROI), and minimize damage from attacks while lowering operating cost. By enhancing current best practices and internal controls with automated risk management analysis, the security, network and business units can work more effectively as a team. Skybox solutions have been successfully deployed at highly respected Global 2000 companies worldwide.

Founded in 2002, the company is headquartered in Palo Alto, California and is backed by Benchmark Capital, Lightspeed Venture Partners, Carmel Ventures, and Mofet Technology Fund. For more information contact (650) 565-8060 or http://www.skyboxsecurity.com

About Skybox View

Skybox ® View automates labor-intensive risk assessment and remediation planning processes. Skybox View helps enterprises continuously collect, identify, visualize and understand the total risk exposure of digital assets and proactively prioritize and optimize the mitigation steps necessary to prevent internal and external attacks. It represents the missing piece for assessing, evaluating and mitigating pre-attack exposures, taking network information and business impact into account. Unique patented modeling and attack simulation technologies generate a virtual map of business asset exposures distilling thousands of vulnerabilities down to the one to two percent that really matter. 'What If' planning analysis puts security, network and business teams on the same page empowering IT organizations to balance the cost and benefit of proposed remediation, network changes or patches before deployment. Open collection architecture leverages existing and future investments in firewall, router, network and vulnerability scanner technologies.

Contact:
Vanessa Miali
Kesselring Communications, LLC
vanessa@kesselring.net
503.380.1884