AirTight's SpectraGuard Online Integrates into Qualys' SaaS Security Ecosystem to Facilitate, Manage and Simplify PCI DSS Compliance

Mountain View, CA - April 20, 2009 - AirTight^® Networks, the global leader in wireless security and compliance solutions, announced it has joined the QualysGuard^® PCI Connect Ecosystem launched today at the RSA Conference 2009 by Qualys^®. AirTight is integrating its unique SpectraGuard^® Online service to provide automated data feeds for wireless vulnerability management into QualysGuard PCI Connect. (See Qualys press release issued today)

Navigating through the multiple provisions of PCI DSS can be daunting. Traditionally organizations have used point systems and walk around auditing tools which can be a time consuming and complex way to understand their compliance and security posture and offer only a point-in-time view. SpectraGuard Online automates wireless vulnerability scanning and maps the results to specific PCI compliance requirements for securing data from wireless threats, including PCI Requirement 11.1 that mandates a minimum quarterly wireless scan of all locations or the deployment of a wireless IDS/IPS.

AirTight was the first wireless security company to introduce a software-as-a-service (SaaS) security and vulnerability management solution to provide customers with visibility into their wireless security posture with lower operation costs and no capital investment. SpectraGuard Online is a modular hosted service using the same AirTight award-winning, patented, multi-tenant architecture, plug and play sensors, remote upgrade capabilities and web user-interface as SpectraGuard Enterprise, a complete onsite wireless intrusion prevention system (WIPS) - giving enterprises a choice in how they deploy and manage wireless security.

QualysGuard PCI Connect is an on demand ecosystem bringing together multiple security solutions into one unified end-to-end business application for PCI DSS compliance and validation. As a new addition to the widely adopted QualysGuard PCI service, PCI Connect streamlines business operations related to PCI compliance and validation for merchants and acquirers all from a combined collaborative application with automated report sharing and distribution. PCI compliance status and tracking is performed on an ongoing basis. Merchants who use PCI Connect can easily identify areas where they may not be meeting compliance requirements. Acquirers who use PCI Connect can easily evaluate whether merchants have met PCI requirements and whether sufficient evidence has been submitted for validation.

"Listening to our customers who are dealing with PCI DSS, it became clear to us that a centralized solution to collect the data for various PCI requirements, including the new wireless requirements, was needed to streamline the process and give merchants more technology options for PCI validation," said Philippe Courtot, CEO and Chairman of Qualys. "AirTight is a natural fit for our ecosystem because it was already delivering an on demand solution for wireless PCI compliance and reporting which complements what Qualys provides."

"AirTight recognized a year ago that a managed wireless security service could serve many of our customers who had less expertise or bandwidth by providing an on demand, automated solution to help them meet and exceed their wireless PCI DSS requirements, which is why we launched SpectraGuard Online," said David King, Chairman and CEO of AirTight. "By bringing together partners such as AirTight, who provide best-in-class security solutions, Qualys is offering an integrated framework that will easily allow customers to meet the compliance requirements of PCI DSS, including the new standards that specifically apply to wireless. We are happy that Qualys understood that wireless is an integral element of PCI compliance and security."

How QualysGuard PCI Connect Works
QualysGuard PCI Connect is an on demand ecosystem bringing together multiple security solutions into one unified end-to-end business application for PCI DSS compliance and validation. QualysGuard PCI Connect is an open platform with XML APIs that allows partners and solution providers to provide automated data feeds into PCI Connect to demonstrate compliance.  In addition, merchants will be able to identify gaps in the PCI compliance program and easily connect to security solutions that can meet their needs.

How SpectraGuard Online Works
SpectraGuard Online meets the need for low administration, high value security services. The service is offered in three discrete modules which can be purchased separately or together depending on the customer’s needs.

Wireless Vulnerability Assessment - allows customers to:

• Automate discovery and prioritization of all wireless assets on a 24/7 basis
• Perform wireless policy audits
• Maintain compliance of remote locations
• Generate wireless vulnerability reports with one click

Regulatory Compliance - allows customers to:

• Generate wireless compliance reports for regulations such as PCI, HIPAA,  SOX, GLBA, DOD Directive 8100.2 etc with just one click
• Add compliance reports for other standards by defining custom reports
• Schedule reports on demand for periodic delivery

Wireless Vulnerability Remediation - provides:

• 24/7 notification of wireless vulnerabilities as they occur
• Protection from breaches by blocking wireless vulnerabilities and security threats
• Location tracking of security threats on a floor map with pinpoint accuracy 
• A visual view of wireless signal spillage from corporate APs

About AirTight Networks
AirTight Networks is the global leader in wireless security and compliance solutions providing customers best-of-breed technology to automatically detect, classify, locate and block all current and emerging wireless threats. AirTight offers both the industry’s leading wireless intrusion prevention system (WIPS) and the world’s first wireless vulnerability management (WMV) security-as-a-service (SaaS). AirTight’s award-winning solutions are used by customers globally in the financial, government, retail, manufacturing, transportation, education, healthcare, telecom, and technology industries. AirTight owns the seminal patents for wireless intrusion prevention technology with 12 U.S. patents and two international patents granted (UK and Australia), and more than 25 additional patents pending. AirTight Networks is a privately held company based in Mountain View, CA. For more information please visit www.airtightnetworks.com

Media Contacts:
Della Lowe
AirTight Networks
Tel: +1 (650) 934 8191
della.lowe@airtightnetworks.com