For Immediate Release

SKYBOX SECURITY NAMED "COOL VENDOR" BY LEADING ANALYST FIRM

Vendors Selection Based on how Innovative, Impactful and Intriguing They Are

Palo Alto, CA, April 6, 2005 - Skybox ® Security, Inc., the leader in Security Risk Management (SRM), has been included in the list of "Cool Vendors" in the "Cool Vendors in Security and Privacy, 2005" report published on March 28, 2005 by Amrit T. Williams and Jay Heiser, et al of Gartner, Inc. The 15 cool vendors chosen by Gartner's security and privacy analysts have earned this distinction for their ability to develop technologies that add value in a real-world environment.

"We are honored to be selected as a cool vendor by Gartner. This recognition reflects a major enterprise shift we are hearing from our customers - transforming IT risk management into a measurable, predictable and effective process," said David Batista, president and CEO for Skybox Security.

In their report, Amrit Williams and Jay Heiser write "Each year, thousands of new vulnerabilities appear. It's counterproductive to try to fix each one, and security managers need mechanisms to help them understand the business, network and security impact of vulnerabilities so they can effectively plan mitigation efforts."

Skybox Security is driving the category of IT Security Risk Management (IT SRM) solutions. IT SRM is the complete process of understanding threats, prioritizing vulnerabilities, limiting damage from potential attacks, and understanding the impact of proposed changes or patches on the target systems. IT SRM solutions integrate multiple information sources and technologies required to implement an effective risk management process - and add the analytics required to understand an organization's security posture and make intelligent decisions for proactive risk management and regulatory compliance.

About Gartner's Cool Vendors Selection Process

Gartner's listing does not constitute an exhaustive list of vendors in any given technology area, but rather is designed to highlight interesting, new and innovative vendors, products and services. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness of a particular purpose.

Gartner defines a cool vendor as a company that offers technologies or solutions that are: Innovative, enable users to do things they couldn't do before; Impactful, have, or will have, business impact (not just technology for the sake of technology); Intriguing, have caught Gartner's interest or curiosity in approximately the past six months.

About Skybox Security

Skybox® Security, Inc. is the leader of next-generation Security Risk Management (SRM) solutions. The company's flagship product, Skybox® View, is the first enterprise software platform that raises vulnerability assessment, threat analysis, remediation planning and change management to the business risk level where it belongs. By combining business impact analysis and simulation with vulnerability data and network modeling, enterprises can continuously maintain risk-resilient networks, reduce regulatory compliance exposures, and shrink the window of exposure from months to hours.

With Skybox View security professionals can take a disciplined approach to measure business risk exposure, understand effectiveness of remediation alternatives, justify mitigation efforts (ROI), and minimize damage from attacks while lowering operating cost. By enhancing current best practices and internal controls with automated risk management analysis, security, network and business units can work more effectively as a team. Skybox solutions have been successfully deployed at highly respected Global 2000 companies worldwide.

Founded in 2002 the company is headquartered in Palo Alto, California and is backed by Benchmark Capital, Lightspeed Venture Partners, Carmel Ventures, and Mofet Technology Fund. For more information contact (650) 565-8060 or http://www.skyboxsecurity.com.

About Skybox View

Skybox® View automates labor-intensive risk assessment and remediation planning processes. Skybox View helps enterprises continuously collect, identify visualize and understand the total risk exposure of digital assets and proactively prioritize and optimize the mitigation steps necessary to prevent internal and external attacks. It represents the missing piece for assessing, evaluating and mitigating pre-attack exposures, taking network information and business impact into account. Unique patented modeling and attack simulation technologies generate a virtual map of business asset exposures, distilling thousands of vulnerabilities down to the one to two percent that really matter. "What if" planning analysis puts security, network and business teams on the same page, empowering IT organizations to balance the cost and benefit of proposed remediation, network changes or patches before deployment. Open collection architecture leverages existing and future investments in firewall, router, network and vulnerability scanner technologies.

Contact:
Vanessa Miali
Kesselring Communications, LLC
vanessa@kesselring.net
503.380.1884