nCircle's IP360 Receives Internationally Recognized Common Criteria Certification
SAN FRANCISCO, CA — May 16, 2005 — nCircle, the leading provider of enterprise-class
vulnerability and risk management solutions, announced today that the IP360 Vulnerability Management System
has completed a security certification to EAL 3 under the Common Criteria Evaluation and Certification Scheme
(CCS). The Common Criteria (CC) certification is a globally accepted standard for evaluating the security features
and capabilities of information technology products.
Achieving Common Criteria certification and an EAL 3 designation is an important milestone for nCircle and the vulnerability management market,
said Abe Kleinfeld, president and CEO, nCircle. As a recognized global standard, Common Criteria certification provides government agencies and
commercial enterprises with proven third-party assurance that our solutions can meet the toughest demands of mission-critical security
environments. It further demonstrates nCircle's commitment to delivering solutions that are supported and validated by rigorous international
technology standards.
Common Criteria is an internationally recognized set of guidelines (ISO 15408), which define a common infrastructure for IT security products.
The standard consists of several predetermined assurance levels that the vendor can choose to be tested against, each one more stringent than
the last. The evaluation process is rigorous and can take months or years to complete. Once achieved, CC certifications are mutually accepted by
21 countries, including the United States government, regardless of what country the product was validated in. IP360 was tested by Electronic
Warfare Associates-Canada, Limited (EWA-Canada), which operates an independent third-party Common Criteria Test Lab.
nCircle partnered with Corsec Security, a consulting firm with over eight years of validation experience, to facilitate the prompt completion of
the certification process. Corsec is excited to have partnered with nCircle on the evaluation of IP360, said John Morris, president and co-founder
of Corsec Security. nCircle's commitment to achieving the Common Criteria certification further demonstrates their diligence in providing their
customers with exceptional quality products with proven third-party assurance.
The CC certification of IP360 is a significant milestone because nCircle has now set the standard for network vulnerability management,
said Erin Connor, director of the EWA-Canada test lab. Achieving this level of certification demonstrates nCircle's commitment to providing
high quality IT security tools for their customers to deploy in critical network installations.
Recognized within 21 countries, Common Criteria certification is a highly regarded industry program for measuring security assurance of
security products, and achieving this status with a vulnerability management product is significant, said Charles Kolodgy, Research Director,
Security Products, IDC. Government and commercial sector customers can be assured that Common Criteria-certified products are proven
technologies that will help them more effectively protect their networks.
For more information, please refer to the CSE Common Criteria Certified Products list at URL:
http://www.cse-cst.gc.ca/its-sti/services/cc/cp-pc-eng.html
About nCircle
nCircle is the leading provider of information risk & security performance management solutions to more than 6,500 businesses and government agencies worldwide. nCircle solutions enable enterprises of all sizes to (1) automate compliance and reduce risk, and (2) measure and compare the performance of their IT security program with their own goals and industry peers. nCircle solutions may be deployed on a customer's premise, as a cloud-based service, or in combination, for maximum flexibility and value.
nCircle has won numerous awards for growth, innovation, customer satisfaction and technology leadership and has been ranked among the top 100 best places to work in the San Francisco Bay Area. nCircle is headquartered in San Francisco, CA, with regional offices throughout the United States and in London and Toronto. To learn how you can more effectively protect your company visit us at http://www.ncircle.com.
nCircle is a registered trademark of nCircle Network Security, Inc. All other registered or unregistered trademarks are the sole property of their respective owners.
About Corsec Security, Inc.
Corsec Security, Inc. is a Fairfax VA based company which specializes in helping companies navigate through the complex process of receiving FIPS 140 and Common Criteria (CC) certifications. Corsec's consulting, document creation, and laboratory services deliver proven expertise in achieving government validations at a firm, fixed price. The company name represents the core of corporate security and it is with this reputation and stability that Corsec has been serving its clients for years. Corsec minimizes the time, effort and money a vendor needs to invest in validation while ultimately maximizing the return on that investment. For further information, please visit www.corsec.com.
About Electronic Warfare Associates-Canada, Limited (EWA-Canada)
Electronic Warfare Associates-Canada, Limited is an independent third-party lab and security consulting firm specializing in Common Criteria evaluations, FIPS 140-2 Cryptographic testing, IT Security Engineering Consulting and Managed Security Services. EWA-Canada is recognized for its comprehensive experience with Common Criteria evaluations, enabling companies to efficiently and cost-effectively manage the evaluation process thereby ensuring their products meet important certification requirements.
nCircle is a registered trademark of nCircle, Inc. All other registered or unregistered trademarks are the sole property of their respective owners



