Paymetric Adds Cenzic Web Application Security Solution to Enhance Security of Web Apps

Cenzic ClickToSecure to Help the Payment Card Solution Provider Comply With New PCI Requirement

Santa Clara, CA—11-03-2008— Cenzic Inc., the leading provider of Web application security assessment and risk management solutions, today announced that Paymetric Inc., a leading provider of innovative payment card solutions, has added Cenzic ClickToSecure, its Software as a Service model, to its software development lifecycle (SDLC). With this addition, Paymetric has added security enhancements to an already robust, comprehensive solution for its security initiatives, allowing the company to frequently test and assess various forms of vulnerability and hacking threats.

Paymetric’s integrated payment acceptance solutions enable companies to accept, manage and protect payment card transactions across a variety of enterprise applications, including SAP solutions. As the solution provider for integrating payment card transactions in enterprise systems for Fortune 500 organizations, the company understands the importance of hosting a secure, reliable and efficient environment while protecting customer information. The company’s previous methods involved a security assessment system that performed a general penetration testing into its environment. To ensure that its customers were receiving the best security practices available, Paymetric was looking to add an inclusive, multifaceted application security solution, for an additional level of security protection.

“After reviewing three of the leading Web application security products, we determined that Cenzic was the most comprehensive solution over the other SaaS and software models that we reviewed. The fact that Cenzic has both a software and a SaaS model also allows for flexibility in the future,” said Genady Vishnevetsky, director of IT operations and security at Paymetric. “The product had the ability to generate frequent tests, and the overall model and product structure worked efficiently within our organization. The Cenzic solution adds a value proposition to our security framework, ensuring that our application meets new security standards and further prevents the potential code exploits that are at risk of being compromised.”

Additionally, Paymetric needed to become compliant with new PCI Requirement 6.6 that necessitates organizations to implement application code review to ensure Web applications exposed to the public Internet are protected against the most common types of malicious input as of June 2008. By choosing Cenzic ClickToSecure as an automated assessment solution, Paymetric’s Web applications will remain secure, as well as validate the organization for PCI compliance.

“Implementing Cenzic ClickToSecure has helped Paymetric to comply with PCI Requirement 6.6 while bolstering its security procedures,” said John Weinschenk, CEO of Cenzic. “Paymetric is an excellent example of a company implementing a Web application security solution into its SDLC, a precaution that all organizations should take in order to keep applications protected and sensitive information confidential.”

Formed in 1998 in Houston, Texas, Paymetric was founded by two former SAP employees with the vision of delivering advanced payment solutions for large enterprise customers. For more information on Paymetric, please visit www.paymetric.com.

About Cenzic

Cenzic is the next-generation Web application security assessment and risk management solutions leader. The Cenzic suite of application security solutions fits the need of any company from remote, Software as a Service (ClickToSecure®), for testing one or more applications, to a full enterprise-wide solution (Cenzic Hailstorm® Enterprise ARC) for effectively managing application security risks across an enterprise. Always an innovator, Cenzic has integrated Hailstorm with VMware to enable testing of production Web applications through virtualization -- making Cenzic the only company in the industry with a complete solution for assessing Web applications in all stages from development to production. In addition, Cenzic solutions, targeted at financial services, e-retail, high-tech, energy, healthcare and government sectors, are the most accurate, comprehensive and extensible in the industry, empowering organizations to stay on top of unrelenting application security threats.