For Immediate Release

PROMINENT IT SECURITY OFFICERS JOIN SKYBOX SECURITY CUSTOMER ADVISORY BOARD

Cisco, E*TRADE FINANCIAL, Lehman Brothers, Standard Chartered Bank
and WesCorp Named as Charter Members to Help Shape Skybox's Vision
for Security Risk Management

PALO ALTO, CA - March 29, 2005 - Skybox® Security, Inc., the leader in Security Risk Management (SRM), today announced the formation of its Customer Advisory Board (CAB) that is comprised of highly respected IT security professionals with extensive experience in leading large security operations at major and respected corporations. Skybox Security established the board as a forum for bringing together leaders in the field of information security to offer objective and actionable insights and advice on shaping the SRM category and Skybox's product strategy, positioning, programs and roadmap. Charter members include:

• Mike Engle is Lehman Brothers' Vice President of Information Security. Engle has over ten years of experience designing and managing secure enterprise systems. His technical expertise includes creating enterprise processes for information security issues including policy, privacy, compliance and security awareness. He currently manages a team of security professionals tasked with all aspects of information security. Prior to joining Lehman in 1996 Engle worked for Merrill Lynch and Air Products and Chemicals. Engle's team continuously identifies ways to secure new and existing systems, applications and user access and is responsible for internal investigations relating to use or abuse of Lehman's technology systems.
  
• Christofer Hoff serves as WesCorp's Chief Information Security Officer and Director of Enterprise Security Services. Hoff is responsible for WesCorp's enterprise security initiatives focused on providing internal business units and credit union members with rational information security risk management services and a consultative approach to information security focused on adding value and solving business problems. He also oversees the enterprise security technology architecture, implementation and management for WesCorp.
  
  Hoff served as a board member for three Internet technology ventures and successfully rose venture capital funding. He is a featured speaker at numerous information security events and holds several security credentials - including CISSP, CISA, CISM, IAM - and is an accomplished and accredited technical instructor. Hoff is active in several security associations such as ISC2, ISACA and the ISSA and sits on the advisory councils of numerous security solutions providers and organizations.
  
• Steve McOwen serves as Cisco's Manager of Audit, Incident Response and Security Services. Cisco Systems, Inc. is the worldwide leader in networking for the Internet and one of the most respected solution innovators in the industry. McOwen's educational background includes two degrees, a Juris Doctor from George Mason University School of Law and a Bachelor of Business Administration in Finance from the College of William and Mary. He teaches Computer Crime and Information Warfare to undergraduate and graduate students at Duke University in the Terry Sanford Institute of Public Policy. In addition he teaches Computer Forensics and Investigation techniques to North Carolina local law enforcement.
  
  McOwen came to Cisco in September, 2000 to found Cisco's internal Risk Assessment team and has since increased his scope of responsibility to include managing Cisco's Incident Response team as well as the Spam & Privacy and PKI teams.
  
  Prior to joining Cisco, he worked as a Special Agent with the Federal Bureau of Investigation mainly involved in computer crime, espionage and intellectual property investigations. McOwen is a licensed attorney and practiced law, conducted lobbying, and helped draft creditor's rights issues and debt collection-related legislation prior to joining the FBI.
  
• Dr. John Meakin is Standard Chartered Bank's Group Head of Information Security and is a specialist in information systems security with more than 18 years experience. Meakin has an impressive track-record of establishing and managing information security functions in a range of financial services and other businesses. He has brought innovative approaches to the application of risk methods and risk automation to achieve the right balance of security in those businesses, delivering optimum cost-effectiveness. Meakin has a particular interest in better modeling and managing the costs and benefits of security to the business, as well as in shifting the emphasis of commercial security efforts into dynamic management and monitoring rather than static prevention. He is a board member of the Jericho Forum and is leading Standard Chartered's efforts to bring more flexible network security technologies to bear on the challenge of doing good business in "out of the way places."
  
  Meakin has a PhD in Experimental Solid State Physics from Cambridge University, plays football regularly, builds computers in his spare time and speaks regularly at conferences and public forums on a variety of IT Security topics.
  
  Meakin was previously responsible for leading systems security policy and strategy in Reuters, the Royal Bank of Scotland, Swiss Bank Corporation and the investment-banking arm of Dresdner Bank, where he led teams providing a full range of IT Security services.
  
• Russell Ross is E*TRADE FINANCIAL's Director of Corporate Information Security responsible for the company's information security policy development and maintenance, information security training and education, information security risk assessment management, internal and external security audit assessment and access control governance.
  
  As the first information security professional hired by the company, Ross was instrumental in building a world-class information security program and professional staff. With over 27 years of experience in the information security field, Ross has also held various management positions at Lockheed Martin, Viking Freight Systems and the U.S. Air Force.
  
  Ross holds two significant certifications - CISSP and CISM - and is the acting President of the Silicon Valley Chapter of the ISSA (Information System Security Association).

The charter CAB members are joined by Skybox executives, Gidi Cohen, Chief Strategy Officer and Founder as well as David Batista, CEO and President. Gidi Cohen is the CAB chairman.

"Skybox is honored to attract such a unique team of customer experts that will enable the company to carefully listen to the needs of customers as well as effectively apply their collective user experience to our product vision and strategy. We felt it was very important to blend practical user experience with strong industry participation so that our software solutions will be market driven. These executives are all at the forefront of the most significant advances in IT security and risk management that will help us anticipate what enterprises will need in order to better align the risk assessment and management process with the needs of the business," said David Batista, CEO and President of Skybox.

About Skybox Security

Skybox ® Security, Inc. is the leader of next-generation Security Risk Management (SRM) solutions. The company's flagship product, Skybox ® View, is the first enterprise software platform that raises vulnerability assessment, threat analysis, remediation planning and change management to the business risk level where it belongs. By combining business impact analysis and simulation with vulnerability data and network modeling, enterprises can continuously maintain risk-resilient networks, reduce regulatory compliance exposures, and shrink the window of exposure from months to hours.

With Skybox View security professionals can take a disciplined approach to measure business risk exposure, understand effectiveness of remediation alternatives, justify mitigation efforts (ROI), and minimize damage from attacks while lowering operating cost. By enhancing current best practices and internal controls with automated risk management analysis, security, network and business units can work more effectively as a team. Skybox solutions have been successfully deployed at highly respected Global 2000 companies worldwide.

Founded in 2002 the company is headquartered in Palo Alto , California and is backed by Benchmark Capital, Lightspeed Venture Partners, Carmel Ventures, and Mofet Technology Fund. For more information contact (650) 565-8060 or http://www.skyboxsecurity.com .

About Skybox View

Skybox ® View automates labor-intensive risk assessment and remediation planning processes. Skybox View helps enterprises continuously collect, identify visualize and understand the total risk exposure of digital assets and proactively prioritize and optimize the mitigation steps necessary to prevent internal and external attacks. It represents the missing piece for assessing, evaluating and mitigating pre-attack exposures, taking network information and business impact into account. Unique patented modeling and attack simulation technologies generate a virtual map of business asset exposures, distilling thousands of vulnerabilities down to the one to two percent that really matter. "What if" planning analysis puts security, network and business teams on the same page, empowering IT organizations to balance the cost and benefit of proposed remediation, network changes or patches before deployment. Open collection architecture leverages existing and future investments in firewall, router, network and vulnerability scanner technologies.

###

Contact:

Leslie Kesselring

Kesselring Communications, LLC

leslie@kesselring.net

503-656-2847