Sourcefire, Inc.

"Hackers and attacks have become more sophisticated and blended in nature. The motive is purely criminal now. At times like these Sourcefire offers real-time defense solutions."

Rick Justice, Chief Editor

What makes Sourcefire, Inc. an Info Security "Hot Company" 2006

Products & Technologies

Sourcefire has been recognized as the fastest growing and most innovative security company in the industry, and is changing the way customers protect their network assets. Sourcefire delivers real-time network defense solutions that enable companies to realize the promise of self defending networks. The company’s ground-breaking technology unifies intrusion and vulnerability management technologies to provide customers with the most effective network security available. The Sourcefire 3D System provides companies with the ability to Alert, Block and Correct through vulnerability management, network asset and vulnerability discovery and intrusion detection and prevention.

At its core, the Sourcefire 3D System leverages open source Snort, the world’s most widely deployed intrusion prevention system that was created by Sourcefire’s founder, Martin Roesch. With more than 2 million downloads and over 100,000 active users, Snort is the highest regarded technology for detecting and preventing attacks on corporate assets and is in operation at most of the world’s most critical networks, including 96 of the Fortune 100 and many government agencies including the DoD.

The Sourcefire 3D System – this award-winning solution features comprehensive protection against enterprise threats such as worms, viruses and spyware against all networks all the time (before, during and after an attack). It consists of Sourcefire Intrusion Sensors and Agents, Sourcefire RNA Sensors and the Sourcefire Defense Center. All to help secure real networks in real-time and provides proactive defense-in-depth through an integrated process of discovering risks, vulnerabilities and threats; determining their business impact; and taking the appropriate action to defend the network.

Sourcefire Intrusion Sensors – a powerful combination of signature, protocol, and anomaly-based inspection methods to achieve the maximum attack detection and prevention capability. Every aspect of the sensor can be configured and customized to ensure that users detect and prevent the events most important to them. Flexibility in the rules language and the numerous configuration options (port density, interface types, deployment modes for example) allow users to easily define new ways to identify and prevent threats and enforce policies specific to their environment.

Sourcefire RNA Sensors – using a combination of passive network discovery, behavior profiling and integrated vulnerability management technologies, Sourcefire RNA (Real-time Network Awareness) Sensors provide the most comprehensive view of security events, and the ideal basis for the most effective network defense. RNA Sensors continually monitor all network assets, (servers, routers, PC’s, firewalls, wireless access points) presenting a real-time view and highly-detailed profiles of all network assets including their configuration, behavior, potential vulnerabilities, and associated changes.

Sourcefire Intrusion Agents – allow open source Snort users to benefit from the Sourcefire 3D approach while protecting and maximizing their investment in open source Snort deployments. All the intrusion event information from Snort sensors can be aggregated directly into the Sourcefire Defense Center with data from both Sourcefire Intrusion Sensors and Sourcefire RNA Sensors to trigger the ABC’s of Defense -- Alert, Block and Correct.

The Sourcefire Defense Center – provides users with the ability to manage all of their Intrusion Sensor, RNA Sensor and Snort deployments from a single console. By tightly integrating and correlating the threat information provided by Sourcefire Intrusion Sensors and Agents with the network intelligence provided by Sourcefire RNA Sensors, the Sourcefire Defense Center easily prioritizes the millions of security events to determine the most critical events to an organization’s business and takes the appropriate actions. These actions follow the ABCs of Defense – Alert, Block, Correct – all in real-time to deliver the most effective security.

People & Investors

On October 6, 2005 Sourcefire announced that it signed a definitive agreement to be acquired by Check Point Software Technologies Ltd. (Nasdaq: CHKP), for a total consideration of approximately $225 million.

Sourcefire’s management is responsible for creating the fastest growing, largest privately held intrusion prevention vendor in the world within 4 short years.

• Wayne Jackson, CEO – Wayne joined Sourcefire in May 2002. His philosophy of differentiation through consistent execution and technology leadership is proving itself once again as Sourcefire is becoming widely acknowledged both as an innovator and threat to industry incumbents. Before joining Sourcefire, Wayne built a fifteen year track record of success in senior management roles for several innovative technology companies. Most recently, Wayne co-founded Riverbed Technologies, a wireless infrastructure company, and served as its CEO until the successful sale of the company to Aether Systems for more than $1 billion dollars in March of 2000.

• Martin Roesch, CTO – Martin founded Sourcefire in 2001. As a respected authority on intrusion detection technology and forensics, he is responsible for the technical direction and product development efforts. Martin, who has 17 years industry experience in network security and embedded systems engineering, is also the author and lead developer of the Snort Intrusion Detection and Prevention System. As the worlds most widely deployed IPS with 100,000 active users and over 2 million downloads to date, Snort is the de facto standard in Intrusion Prevention. Martin has also been the recipient of the 2004 InfoWorld IT Heroes Innovator Award as well as winning the 2004 “40 Under 40” award from the Baltimore Business Journal.

• Tom McDonough, COO & President – Tom joined Sourcefire in September 2002 and serves as its President and Chief Operating Officer. Tom is responsible for day-to-day operations of Sourcefire. Before joining Sourcefire, Tom was the Chief Executive Officer of Mountain Wave, Inc., an early stage information security company based in Northern Virginia. The company was acquired by Symantec Corporation in July of 2002

• Todd Headley, CFO – Todd joined Sourcefire in May of 2003 and serves as its Chief Financial Officer. He is responsible for financial, legal, personnel, IT and administrative matters for the company. Prior to joining Sourcefire, Todd held similar positions at privately held companies in the Washington, D.C. area. He was CFO for BNX, a network access management company; CFO of Riverbed Technologies, an enterprise wireless applications company, CP & Controller at Roadshow international, a supply chain execution company.

• Michele Perry, CMO – As Chief Marketing Officer, Michele Perry is widely respected throughout the marketing industry. In her role, Michele is responsible for overseeing all of Sourcefire’s marketing and product management functions, including branding, public relations and lead generation. A 20 year marketing and business executive, Michele drives Sourcefire’s branding and marketing campaigns and has established programs that contribute to the growth of the company’s customer base. Previously, Michele held senior marketing and management positions at USinternetowrking Software AG and IBM, as well as operating her own strategic and business development consultancy, MPB Strategies, which specialized in providing consulting and strategy services to fast growing companies.

Performance & Growth

In addition to its innovation, Sourcefire has been widely recognized for its business growth and success. In 2005 the company was named to the AlwaysOn 100 for the second consecutive year, and in October Sourcefire was named to the prestigious Deloitte Fast 50 Rising Star list for the second consecutive year, based on its 796% revenue growth.

Sourcefire’s customers include major financial institutions, federal agencies, as well as a large number of Global 1000 companies. Additionally, Snort is the highest regarded technology for detecting and preventing attacks on corporate assets and is in operation at most of the world’s most critical networks, including 96 of the Fortune 100 and many government agencies including the DoD. With over 200 million downloads to date, and 100,000 active users, Snort is easily the most widely deployed intrusion prevention system in the marketplace today. Snort Rules continue to be the industry standard with download rates for rule updates tripling over the last year alone.

Based on this ground-breaking technology, the company was named the “Most Innovative Company” at the 2005 RSA Conference, and Frost & Sullivan’s “Security Company of the Year” for 2005. The Sourcefire 3D system was also declared “Best Intrusion Prevention Solution” among twelve vendors evaluated by SC Magazine in its July 2005 issue and in April, Sourcefire’s Real-time Network Awareness (RNA) solution became only the fifth product in history to receive “ NSS Gold” for its unique ability to solve customers’ complex security awareness issues.

Potential and Strategies

Sourcefire has strategic relationships with leading networking, systems, security and reseller companies. Strategic partners include Nortel, who OEMs the Intrusion Sensor technology, as well as IBM who supports the technologies in its fast-growing MSSP business. Other partners include Check Point, Sun, Mitsui, Nebulas Security, NetSec and Pentura.

Sourcefire has partnered with all of the leading Managed Service Providers and Security Information Management vendors, and it has partnered with Ellacoya to enable broadband operators to detect network attacks at the earliest opportunity and automatically treat subscriber traffic to prevent the spread of Denial-of-Service (DoS) attacks, worms and viruses on the network.

Sourcefire offers a certification program, instructor-led training and online courses to address the worldwide demands from its growing user base. It is the only certification program available for Snort, the most widely deployed intrusion prevention system that has been downloaded more than two million times and has over 100,000 active users. Sourcefire allows delegates to attend anytime and anywhere for continuing education credits. The certification program also validates the real world expertise gained.

Sourcefire, Inc.
9770 Patuxent Woods Drive
Columbia , Maryland 21046
Tel: (410) 290-1616
Fax: (410) 290-0024
www.sourcefire.com