Database Security Software guards against breaches.

Sentrigo Inc. Jun 29, 2007

Press Release Summary:

Hedgehog host-based database security software combats data breaches caused by insiders with access privileges such as employees, developers, and consultants. System does not require an I/O choke point and offers virtual patching using out-of-the-box rules for immediate protection against known vulnerabilities. Software enables administrators to customize object level rules to govern each protected database.

Original Press Release:

Sentrigo Releases Hedgehog, the New Standard for Database Security and Insider Threat Prevention

WOBURN, Mass.-June 18, 2007-Sentrigo, Inc., an innovator in database security software, today announced the general availability of Hedgehog. The product, currently available for Oracle databases on multiple operating systems, is software-only and can be downloaded and installed in minutes to provide unprecedented protection against breaches by company insiders and hackers alike, in addition to providing virtual patching against known vulnerabilities. Hedgehog is the first product specifically designed to combat data breaches caused by insiders with access privileges-including employees, developers and consultants.

Numerous studies have concluded that most data breaches are caused by company insiders. With Hedgehog, organizations have a solution whose unique design makes it easy and quick to deploy, yet protects databases from even the most sophisticated insiders.

"The vast majority of organizations today-including those in financial services, government, healthcare, education and retail-have very little visibility into what's going on in their databases," said Nathan Shuchami, chief executive officer of Sentrigo. "True database security must happen at the object level. This is the only approach that can provide protection with the required degree of granularity to detect and prevent breaches by insiders."

Eric Ogren, principal analyst with the Ogren Group, commented: "Sentrigo's focus on the database and Hedgehog's unique approach make the product a compelling option for organizations looking to intensify their focus on database protection. The database security market is rapidly evolving as enterprises and institutions comply with regulations to protect their confidential data by fortifying the databases themselves. Sentrigo is on the leading edge of this new and fast-growing market."

Hedgehog Delivers for Early Customers

Organizations across geographies and industry sectors have been working with the early access version of Hedgehog with immediate results.

N.E.W. Customer Service Companies, Inc. (NEW) is the nation's leading provider of extended service plans that protect the purchases of more than 100 million consumers annually. "Protecting the privacy and confidentiality of our customers' information stored in our databases is paramount to our business," said Barry Danoff, group vice president of information systems of the Dulles, Va.-based company. "Our interest in providing the highest level of database protection available led us to participate in Sentrigo's early access program, and we are impressed with Hedgehog's granular protection and its facilitation of compliance with requirements such as PCI DSS."

Ben-Gurion University is one of Israel's top centers for teaching and research, with over 17,000 students currently enrolled. The university's systems section manager, Eran Lachs, commented: "Institutions of higher education across the globe have suffered some of the worst database breaches, but Ben-Gurion University is committed to holding itself to a higher security standard. Hedgehog allows us to defend our databases from prying eyes, without the need for expensive new hardware or changes to our infrastructure."

The Bank of Israel, the state's central bank, is also among Sentrigo's early access customers. "We were looking to secure mission-critical databases, and Hedgehog is already providing us with valuable information on database activity", said David Aviad, senior systems analyst with the bank. "The system is easy to use and, as promised, we've seen no impact on database performance."

Easily Enforce Security Policy and Prevent Breaches

Sentrigo designed Hedgehog to respond to the unique challenges of database security, as well as to address the market need for a solution that can be readily evaluated, obtained, installed and configured. Product attributes and features that make Hedgehog ideally suited to combat database breaches include:

oDownloadable software-Both Hedgehog Enterprise and Standard editions can be downloaded and installed in minutes.

oTwo versions for risk-free trials-Sentrigo offers Hedgehog Standard, a free version of the software that can be downloaded and used indefinitely free of charge. Hedgehog Enterprise provides additional functionality, including centralized management of multiple database alerts, prevention capabilities and integration with network and security management systems.

oHost-based software-Hedgehog sensors are deployed on the database host, so they can monitor all transactions in real time with unprecedented granularity.

oVirtual patching-Using out-of-the-box rules, which are regularly updated by Sentrigo's Red Team, Hedgehog monitors for attempted vulnerability exploits, including those using newly discovered but unpublished vulnerabilities. This protects the database immediately, with no downtime, while it may take months or longer for the DBMS vendor to issue a patch to the kernel. Hedgehog virtual patching provides immediate protection, with no need to invest efforts in system configuration or custom rules.

oAdvanced rules-based engine-Hedgehog gives security professionals and database administrators the ability to determine rules that govern monitoring of each database, down to the object level. The flexibility and resolution of the rules prevent false-positive alerts and enable accurate security policy enforcement. CISOs can also decide whether they want to receive alerts when a potential intrusion has been detected or, in addition, have Hedgehog immediately and automatically terminate the user session.

oMinimal impact on database performance-Unlike previous host-based solutions that rely on database audit logs or act as a gateway, Hedgehog has negligible impact on performance and does not require an I/O choke-point.

Hedgehog Enterprise is available immediately for download from www.sentrigo.com. Pricing begins at $2,000 per CPU; 14-day evaluation is free. Hedgehog Standard is also available for download and is completely free of charge. Both are available for Oracle databases on Unix and Linux platforms, with Microsoft Windows support expected next quarter. Sentrigo will make Hedgehog available for other database platforms, beginning with Microsoft SQL Server, later this summer.

About Sentrigo

Sentrigo, Inc. is an innovator in security software that monitors all database activity and protects sensitive information in real time in order to prevent both internal and external data breaches. Sentrigo's Hedgehog software, including a free version, can be downloaded and easily installed to provide immediate protection against breaches, as well as virtual patching against recently discovered threats-with minimal impact on database performance. The product's unparalleled level of protection, coupled with its ease of use, makes it the instant standard for database security and regulatory compliance. For additional information, visit www.sentrigo.com.