Amarillo, TX November 8, 2005 - BRICKServer users should rest easy knowing their web servers are safe from the latest Linux worm.

According to Symantec, the Lupper worm affects key Linux web server distributions. Once infected, it is recommended the web server be completely reinstalled because of all the impending damage.

BRICKServer utilizes Process-Based Security (PBS), a proactive security approach implemented into the operating system. PBS prevents the execution of any arbitrary code allowing IT Professionals focus on other important duties, instead of reinstalling their web server.

Vincent Larsen, President and CTO of SAGE, Inc., explains below, how the BRICKServer protects against the Lupper worm and any future ones like it.

· The BRICKServer cannot write anywhere in the system or execute anything outside of CGI scripts. If a variant were found that worked against the web server, it would be safe, since our web server cannot write to disk (OS enforced). This specific exploit worked based on CGIs, but our CGIs can only write to cgi-data (OS enforced) and nothing can execute from cgi-data (OS enforced). In addition, our CGIs can only execute other CGIs in cgi-bin (OS enforced).

· The exploit also requires the execution of "shell" commands. We do not have a shell on our system. A shell cannot be put on our system and executed (OS enforced). Any commands that the shell might additionally try to execute are also not on our system (and could not be added [OS enforced]).

“SAGE offers a secure, yet simple solution eliminating the constant annoyance of defending and patching your web server”, said Vincent Larsen. “It is time that IT Professionals understand there is an alternative way of protecting a web server from malicious code, a BRICKServer”.

About SAGE, Inc.
SAGE Inc. is a technology leader in web appliance security providing businesses with secure operating system solutions. Located on the web at www.sage-inc.com.

SAGE OFFERS NEW SERVICE WITH SECURITY AND EXPERTISE

Amarillo, Texas, November 4, 2004 -- SAGE, Inc. announced today, a new services offering enabling businesses to take advantage of SAGE’s core development team to add enhancements or deploying new applications.

“Sometimes companies have limited resources or time to finish a software project; SAGE wants to help solve this problem,” said Louis Jurgens, EVP of SAGE, Inc. “Understanding client’s goals with security as a priority is a key benefit with SAGE Services. If you need to outsource, why not outsource to a company with the right credentials.”

SAGE’s goal is to assist other companies with their projects. Some of the new services offered are; BRICKServer 2 custom application software, web-based database applications, secure application software and database processing, custom database design, credit card and financial transaction software, and remote penetration testing.

“SAGE Services will offer present and future clients a professional development team who are experienced, capable, and motivated to ensure project success,” said Louis Jurgens. “There have been many opportunities for SAGE to establish this effort in the past and now is the time for us to move forward with this service.”

SECURITY HELP FOR THE SCADA INDUSTRY
New Secure Industrial Automation Firewall, SCADASentry

AMARILLO, TX -- 10/21/2004 -- SAGE, Inc. and PlantData Technologies, Inc. have entered into a partnership utilizing their resources to build a Secure Industrial Automation Firewall, SCADASentry (www.scadasentry.net).

"The security of the utility and energy industry, including information systems and industrial supervisory control and data acquisition (SCADA) systems, became a national issue on 11 September 2001," said Jonathan Pollet, President of PlantData. "This product is the first of its kind and was well received at the recent 2004 ISA Expo, showing system administrators and plant operators how SCADASentry could prevent attacks."

SCADASentry performs a unique job for the industrial automation market. It is a firewall that sits directly in front of the programmed logic controller (PLC) offering protection from malformed packets, DoS prevention via throttling, and IP and MAC filtering.

"When SAGE made the decision to enter the Industrial Automation market, we were thrilled to find a partner with the credibility and experience of PlantData," said Louis Jurgens, Executive VP at SAGE. "SAGE's security expertise combined with PlantData's knowledge of the SCADA market enabled us to bring this first product to market very quickly," said Jurgens.

07.01.04

SAGE BRICKSERVER 2 SECURE WEB APPLIANCE PREVENTS MALICIOUS CODE

For Immediate Release

July 1, 2004, Amarillo, TX - A warning from the government and industry last Thursday informed Internet surfers to be aware of malicious code being injected on computers when visiting a web site.

A significant number of visitors to popular websites were subject to malicious code being installed on their computer after visiting certain web sites. The infected web site would attempt to inject malicious code on the visitor's computer that allows others to use their computers to covertly route spam e-mails or capture keystrokes, thus gaining a user's critical password information.

SAGE BRICKServer prevents this from occurring with its Process-based Security (PBS) model. "This model is what differentiates our web server in the web server appliance market," said Louis Jurgens, EVP at SAGE. PBS prevents the injection of any malicious code into a web server, and stops
It from running on BRICKServer because it is not a recognized process in the security tables. Any Internet visitor should feel safe visiting a website hosted on a BRICKServer knowing their machine was not going to be injected with malicious code.

06.21.04

WORLD’S LARGEST EXPRESS TRANSPORTATION COMPANY USES SAGE BRICKSERVER 2 FOR INTRANET/INTERNET APPLICATIONS

For Immediate Release

June 21, 2004, Amarillo, TX—As the result of a collaborative effort between SAGE and InVictus Technologies of Dallas, the World’s largest express transportation service is now utilizing the BRICKServer2 as part of a mission critical Oracle-based application that has intranet and Internet components. “The patch-free server environment and Oracle support coupled with a rigorous security model were the main features that gained their interest,” said Arnold Arphul, CEO of InVictus Technologies.

The application has both Intranet and Internet functionality that share a common Oracle database. Data gathered from the web is seamlessly integrated into a back-office application. BRICKServer2 offers a secure environment for dynamic web applications and a trusted front-end for database connectivity. This provides a balance between security, performance, and system management.

The BRICKServer2 Secure Web Appliance with its Process-Based Security model uses mandatory access controls directly embedded into the operating system. This creates a virtually impenetrable secure web appliance. Dynamic web applications are then deployed with database connectivity enabling a highly secure environment.

“The capabilities of the BRICKServer2 are ideal for this application,” said a senior official of the transportation company. “It gives us the safe, web-based access we need as well as supporting the database with a secure environment.”

“Fortune 500 enterprises are extremely security conscious these days,” said Louis Jurgens, executive VP of SAGE, Inc. “Providing this very important customer with a BRICKServer2, a powerful solution that combats unauthorized access for their mission critical Internet application, validates this.”

02.10.04

SAGE BRICKServer® 2 PROVIDES DATABASE SECURITY
BY ADDING SUPPORT FOR ORACLE 10g

Amarillo, Texas, February 10, 2004 -- SAGE, Inc. announced today that BRICKServer 2 Secure Web Appliance now supports the Oracle 10g database. This added benefit provides additional functionality and security to companies who have chosen Oracle for their database needs. The BRICKServer 2 rigorous security model, Process-Based Security, offers secure front-end protection for a database.

The BRICKServer 2 Secure Web Appliance uses mandatory access controls directly embedded into the operating system. This creates a virtually impenetrable secure web appliance allowing database connectivity in a secure environment.

“Adding the benefit and functionality of Oracle 10g to BRICKServer 2 allows our larger customers access to the best solutions for their secure web server needs,” said Louis Jurgens, Executive Vice-President, SAGE, Inc. “In addition, Oracle’s new aggressive pricing for their product matches perfectly with the modest cost of our secure web server appliance.”

About SAGE, Inc.
Founded in 1993, SAGE Inc. is a technology leader in web appliance security providing businesses and enterprises with secure Internet solutions. Focusing on secure solutions, the SAGE BRICKServer 2 demonstrates prestigious and rigorous web appliance security. This solution is the answer for a company needing to protect the integrity of their data and information from unauthorized access.

12.17.03

For Immediate Release

New Federal Government Scorecard: Fs, Ds and As

Allied Technology Group and BRICKServer to help protect sensitive data

Amarillo, Texas December 17, 2003 -The Federal Government released its annual scorecard of agency security performance and, like last year, most agencies did poorly, getting Ds and Fs.

"The choice before us is a clear one: Inaction resulting in eventual economic devastation and potentially catastrophic loss of life, or preemptive action to protect our nation," Rep. Adam Putnam (R-Fla.), chairman of a House Subcommittee on Government Reform, said. "I, for one, vote for action. And today as I stand before you, I recommit the resources of my subcommittee to doing everything we can to ensure we adequately protect our nation against cyberattack."

One of the notable exceptions of the annual scorecard has been the Nuclear Regulatory Commission (NRC), who was one of the very few agencies receiving an A grade for security this year.

“NRC has worked very hard to improve its security environment and obtain an A grade. NRC management and staff recognize the need for a continuous focus if effective security is to be achieved and maintained. Last year Allied Technology Group installed a SAGE BRICKServer-based system to help protect sensitive information for the NRC. This, and other IT security support provided by Allied Technology demonstrated NRC’s security focus and were contributing factors to the improved grades”, said John Ippolito, Director of Information Technology Security, Allied Technology Group.

About Allied Technology Group
Allied Technology Group, Inc. is an information technology and engineering company dedicated to customer satisfaction by offering quality services and innovative solutions on time and within budget. Founded in 1988, Allied Technology is a recognized provider of quality information security services to government and industry. Located on the web at www.alliedtech.com

07.15.03

New Product from SAGE, Inc., Protects Websites from Hackers with Easy-to-Manage, NO PATCHES REQUIRED Security Model

Amarillo, Texas, July 15, 2003-SAGE, Inc., the experts in providing Process-Based Internet Solutions, today announced the release of BRICKServer™ 2 Secure Web Appliance. BRICKServer 2 is a self-contained web server, complete with all hardware and software with additional features of e-mail and FTP.

This secure web server utilizes a unique security model, Process-Based Security (PBS). PBS is built into the operating system invoking mandatory access controls, rules of least privilege and separation of duties. It prevents unauthorized access at the system-level, thereby creating a Hack-Proof web server.

"BRICKServer™2 co-exists with your firewall. In fact, SAGE recommends placing the appliance in front of your firewall", said Louis Jurgens, Executive Vice President of SAGE, Inc. "Using the BRICKServer 2 as a trusted front-end for your database eliminates about 70% of attacks that are caused from buffer overflows. The best benefits of BRICKServer 2 are ease of use, less time to manage and it NEVER requires a security patch."

"SAGE's vision is to provide a simple and secure web appliance that eliminates the headaches of constantly defending your web server," said Don Paxton, Co-founder of SAGE,Inc. "BRICKServer 2 is significant product in our strategic growth plan to produce more Process-Based Internet Solutions."

01.28.03

WEEKEND SLAMMER WORM COULD HAVE BEEN PREVENTED

Amarillo, Texas, January 28, 2003---The Slammer worm, also known as Sapphire, that brought down tens of thousands of servers this weekend could have been considerably slowed or even prevented, says Louis Jurgens at SAGE, Inc.

Jurgens, Executive Vice President of the Texas-based software security company said, "This attack was specifically directed at Microsoft's SQL Server database, but it was so virulent and spread so quickly that a denial of service attack resulted. It's really too bad these systems weren't all running SAGE software. We could have prevented this."

Similar to Code Red, but with a less destructive payload, Slammer went after vulnerabilities in Microsoft's SQL Server 2000 software and exploited a well-known problem. The attack grounded ATM machines at Bank of America, brought Internet usage in South Korea to its knees, and possibly affected some non-critical communications for airlines.

"System administrators should have been aware of this problem since last July," said Jurgens. On July 24, 2002 Microsoft posted an alert they dubbed as "critical" and offered patch downloads to fix the problem. But many administrators responsible for keeping their company's servers updated with patches haven't done so.

"The problem with conventional security approaches is that any privilege-based attack like buffer overflow results in hackers gaining control of your system," said Jurgens. "The only way to mitigate this is with constant vigilance and continual patching and updating, something that requires a lot of time and many companies can't afford the overhead to do this."

SAGE promotes web server systems with built-in security that do not require firewalls, patching or maintenance for security updating. Don Williams, Chief Operating Officer for SAGE said, "We met with members of the President's Critical Infrastructure Protection Board last summer, but so far we haven't been able to get their attention. Maybe this will help."