NEWS RELEASE

Free Interactive Web Security Learning Tool Ships

San Diego, CA, June 26, 2003 - Cafésoft today announced that it is now shipping the Cams™ Tour, a free interactive security system that facilitates learning about web single sign-on, web application security, and the Cams web security system. The Cams Tour is an enterprise security implementation that includes: multiple web application servers; an SQL user directory; and, Cams. Within minutes of download, users can begin to interact with the Cams Tour to learn about web application security architecture, self-register new user accounts, perform single sign-on against multiple web servers, mine security logs, and understand how to implement fine-grained access control in web applications running on one or more web servers.

"We are excited to make the Cams Tour available as a free download," said Gary Gwin, Cafésoft CEO. "Web security is difficult to understand and get right, especially for small and midsize companies where security experience is often hard to find. The Cams Tour greatly reduces the amount of time required to learn about web security and how to implement and manage it cost-effectively. Users can download and begin working with the Cams Tour in minutes, with no obligation. There's no or little configuration required to run it. It's really a full-featured web application security implementation on your desktop."

The Cams Tour takes an interactive approach to learning about web application security. The product provides architectural instruction on configuring security for web servers such as Apache and Microsoft IIS, and J2EE application servers such as BEA WebLogic, IBM Websphere, Oracle 9iAS, and JBoss. The Cams Tour is pre-configured to use two Apache Tomcat web application servers to show the use of secure tokens to achieve web single sign-on. An SQL relational database is provided for the user directory. Example web applications demonstrate how to use secure HTTP request headers to personalize the user experience using web programming environments such as JSP/servlets, ASP, PHP, Cold Fusion, and CGI. Users of the Cams Tour create their own accounts and mine Cams logs for their own security events.

The Cams Tour includes the Cams web security system. Cams makes sites more secure and manageable by centralizing application security administration and access, rather than building access control into each application and server. This centralized approach to web security enables companies to reduce development and administration complexity and costs, while improving time to market, application security, and user satisfaction. Cams also delivers single sign-on by securely sharing authentication tokens across web applications and servers.

Cams features a service oriented architecture built with Java. The product deploys into heterogeneous environments providing a centralized security platform that scales for high-volume sites. Cams provides user directory integration with industry-standard LDAP and SQL databases. Other repositories can be added using the open Cams and Java JAAS APIs. Cams also provides support for securing web servers, application servers, Java/C applications, and custom resources. Primary product features include:

• Single sign-on to multiple web applications and servers
• Role-based access control defined by business policies including date/time, location, and custom rules
• Centralized management of rules/permissions and logging of security events
• Flexible extension via open APIs (including integration into third-party software)
• Cross-platform support including Windows NT/2000, Linux/UNIX, and Solaris

"We created Cams to help application developers implement fine-grained web application security without embedding authentication policy or access control business rules into application code," said Norbert Kuhnert, Cafésoft chief technology officer and founder. "With Cams, environments like Apache and the Tomcat J2EE web server can share security configurations and provide single sign-on. An open API also empowers developers to use any user/password repository for authentication, create custom access control rules that match business policy, and trigger business processes from security events."

Cams Tour is available for Windows NT/2000 and Linux. A free download is available on Cafésoft's web site at http://www.cafesoft.com. Cams web security system licenses are available starting at $2,995 per server with unlimited, free developer licenses. Evaluation Cams licenses are also available.

Cafésoft develops and markets the Cams web security system, and provides associated web security services. Customer use Cams to easily and cost-effectively implement web single sign-on and centralize access control to and management of secure web applications and resources. Using Cams for web application security improves time to market, increases operational efficiencies, and lowers maintenance costs. Headquartered in San Diego, California, Cafésoft is a private company founded in March of 1996. More information can be found at http://www.cafesoft.com.

- 30 -

Cafésoft is a trademark of Cafésoft, LLC. Sun, Sun Microsystems, Java and J2EE are trademarks or registered trademarks of Sun Microsystems Inc. in the United States and other countries. All other trademark or registered trademarks are the property of their respective companies.