Shavlik Technologies' Security Suite Receives SCAP Validation

PRESS RELEASE

St. Paul, MN (December 1, 2008) - Shavlik Technologies, the market leader in delivering software solutions that rapidly accelerate and continuously improve security and compliance readiness, today announced that the Shavlik Security Suite has now been SCAP validated for mis-configuration remediation. With this latest validation, the Shavlik solution simplifies the detection of computers that have drifted out of compliance with the Federal Desktop Core Configuration (FDCC) and automates remediation to bring them back into compliance. Automated remediation is critical for US Federal Government agencies pressured by upcoming FISMA audits to quickly achieve compliance and report on their FDCC compliance status.

"Many federal agencies have responded to the OMB mandate for FDCC compliance by applying for waivers. This is not surprising with an unfunded mandate in an environment where IT departments must continually do more with less, and many tools available today will report what is vulnerable or mis-configured but won't provide the means to fix it," said Mark Shavlik, president and CEO, Shavlik Technologies."Our solution simplifies the whole compliance process - identifying mis-configured systems, fixing them with one click of a button, and generating the reports to prove compliance. An agency does not have to add resources to manage our FDCC-Ready solution."

The Shavlik Security Suite fully leverages the Security Content Automation Protocol (SCAP), which is a method for using specific standards to enable automated vulnerability management, measurement, and policy compliance evaluation. This announcement positions Shavlik as one of a select group of security vendors able to both detect and then automatically remediate any mis-configurations and bring those vulnerable systems back into compliance with FDCC. This ability, coupled with Shavlik's easy to use and easy to implement approach, makes the Shavlik Security Suite attractive to both security and IT operations because it helps them to reduce cost, time, and staff needed while still achieving compliance faster, and improving security.

Shavlik's Security Suite The Shavlik Security Suite provides a sustainable solution for generating and distributing approved system baseline configurations and security policies for US government agencies and departments, and then document full compliance with those policies.

The Shavlik Security Suite can be deployed very quickly and provide almost immediate reporting on a government agency's current compliance status. Shavlik's Security Suite drives a higher state of security and compliance readiness through the continuous identification and remediation of system security gaps, and deliver on-going security management that evolves and grows as customers' needs grow.

About Shavlik Technologies Shavlik Technologies, LLC delivers businesses robust software solutions that rapidly accelerate and continuously improve security and compliance readiness by simplifying IT operations, and identifying and reliably closing system security gaps. Shavlik's solutions provide Rapid Readiness so IT organizations realize continuous security and compliance readiness in a fraction of the time, cost and IT resources required by alternative approaches.

With more than 10,000 customers worldwide, Shavlik enables enterprises and service providers to simplify complex IT security and compliance management, providing trustworthy solutions that free up critical IT resources to focus on innovations that drive business growth while lowering costs. Shavlik also licenses its technology to more than 20 leading security and technology companies such as BMC, Juniper, Sophos, Symantec and VMware. For more information, visit Shavlik Technologies at www.shavlik.com.