NEWS RELEASE

Web Access Management Solution
for Apache and Tomcat Servers Ships

San Diego, CA, February 5, 2003 - Cafésoft today announced that it is now shipping the final 1.0 release of the Cafésoft Access Management System (Cams™). Cams is easy-to-use, reliable, and cost-effective security software that centrally controls access to Apache, Tomcat, and custom resources. This high-performance server provides single sign-on and fine-grained access control to web server content and applications. Cams is the first web access management product to focus on the feature and cost requirements of midsize businesses.

"We are excited to make the first release of Cams available," said Gary Gwin, Cafésoft CEO. "Getting application security to work cohesively across web applications, servers, and tiers is a difficult challenge for any IT staff. This is what Cams is designed to do. Cams provides a centralized application security platform that improves time to market while lowering security implementation costs, risks, and maintenance burdens."

Cams makes sites more secure and manageable by centralizing application security administration and access, rather than building access control into each application and server. This centralized approach enables companies to reduce development and administration complexity and costs, while improving time to market, application security, and user satisfaction. Cams also delivers single sign-on to multiple web servers and applications by securely sharing authentication information across web applications and servers.

The Cams server is built with Java and deploys into heterogeneous environments providing a centralized security platform that scales for high-volume sites. Cams provides native user repository integration with industry-standard LDAP and SQL databases. Other repositories can be added using the open Cams and Java JAAS APIs. The initial release includes support for protecting resources provided by the Apache web server and Tomcat J2EE web server. Custom agents can be created using open Cams APIs. Support for additional web servers, application servers, Java applications, and web services are planned for future releases.

Cams primary product features include:

• Single sign-on to multiple web applications and servers
• Role-based access control defined by business policies including date/time, location, and custom rules
• Centralized management of rules/permissions and logging of security events
• Flexible extension via open APIs (including integration into third-party software)
• Cross-platform support including Windows NT/2000 and Linux

"We created Cams to help application developers implement fine-grained web application security without embedding authentication policy or access control business rules into application code," said Norbert Kuhnert, Cafésoft chief technology officer and founder. "With Cams, environments like Apache and the Tomcat J2EE web server can share security configurations and provide single sign-on. An open API also empowers developers to use any user/password repository for authentication, create custom access control rules that match business policy, and trigger business processes from security events."

A free evaluation copy of Cams is available for Windows NT/2000 and Linux on Cafésoft's web site. Cams web security system licenses are available starting at $2,995 per server with free developer licenses. Evaluation Cams licenses, which provide access to the Cams IIS web agent, are available upon request.

Cafésoft provides software products and professional services for managing secure access to network resources. Customers use the company's flagship product, the Cafésoft Access Management System (Cams), to easily, reliably, and cost-effectively centralize access control to secure network resources. Using Cams for web access management improves time to market, increases operational efficiencies, and lowers maintenance costs. Headquartered in San Diego, California, Cafésoft is a private company founded in March of 1996. More information can be found at http://www.cafesoft.com.

- 30 -

Cafésoft is a trademark of Cafésoft, LLC. Sun, Sun Microsystems, Java and JavaOne are trademarks or registered trademarks of Sun Microsystems Inc. in the United States and other countries.