Solidcore Helps Expedite PCI Compliance for Smaller Merchants with Low-Cost Product Download and 30-Day Free Trial: Eases Burden of Satisfying the

SAN FRANCISCO (Business Wire EON) April 7, 2008 -- Achieving PCI-DSS compliance requires merchants to address approximately 180 individual requirements in 12 categories. However, categories 10 and 11 of the PCI-DSS, which specify the use file integrity monitoring, have proven to be the most difficult to fulfill and least satisfied among smaller merchants according to recent research. These requirements have been difficult to satisfy because existing tools merely provided "periodic" file integrity monitoring that would detect changes through resource-intensive system scans. The Solidcore S3 Control PCI Starter Edition solves this problem by providing "continuous" file integrity monitoring capabilities that have a minimal impact on system resources, eliminating the need to perform repeat system scans.

"File integrity monitoring has become a strategic component of PCI compliance and one of the top requirements among the merchants we're assessing on a daily basis," said Steve Levinson, PCI assessments and remediation practice lead for VeriSign, Inc., a leading PCI Qualified Security Assessor (QSA) and trusted advisor for PCI DSS compliance. "The PCI DSS Requirement 11 for regular testing of security systems and processes is one of the leading causes of PCI assessment failures, and this includes file integrity monitoring. Solidcore's file integrity monitoring technology can help merchants and service providers who must address the file integrity monitoring requirements to become PCI compliant in this area."

"Solidcore's new downloadable offering provides a means for smaller PCI-challenged organizations to rapidly attain difficult-to-achieve requirements for critical file integrity monitoring," said Scott Crawford, research director for Enterprise Management Associates (EMA), a leading analyst firm. "Such an approach offers high value, particularly for the smaller or more resource-constrained business that must make difficult choices with tighter budgets. These are the very businesses that most need simply deployed, affordable, yet effective solutions to address their information risk management challenges."

The Solidcore S3 Control PCI Starter Edition is a stand-alone, continuous file integrity monitoring solution for small to medium size merchants. The PCI Starter Edition captures all changes to files on Windows servers in real-time, allowing administrators to quickly see where compliance policies are being challenged. The solution identifies and alerts on transient violations, such as when a file is changed inappropriately and then changed back, and also captures specific details about every change including the exact time of the change. The product provides out-of-the-box PCI reports that demonstrate compliance to auditors with minimal effort, thus reducing the cost of PCI compliance verification.

"The list of requirements around PCI compliance can leave smaller merchants feeling hopeless and overwhelmed about their options for effectively meeting each of the PCI requirements," said Bob Vieraitis, vice president of marketing for Solidcore. "Solidcore's new PCI Starter Edition and 30-day trial lifts the burden of complying with PCI sections 10 and 11, and gives the smaller merchant with fewer IT resources and budget a best-in-class solution for file integrity monitoring."

Solidcore helps merchants address PCI DSS compliance requirements from the device to the datacenter. While the S3 Control PCI Starter Edition helps smaller merchants, Solidcore's S3 Control PCI Pro and Enterprise Editions help larger organizations and data centers cost-effectively address the file integrity monitoring and audit trial requirements of the PCI data security standard. At the device level, Solidcore's S3 Control Embedded Edition provides file integrity monitoring and lock-down capabilities for popular networked devices such as point-of-sale systems and ATM machines.

Pricing and Availability

The Solidcore S3 Control PCI Starter Edition is available today as a download from Solidcore by visiting: http://www.solidcore.com/products/pci.html. The product is available as a free 30-day trial, and following the trial period available at a yearly subscription price of $25 per-server, plus $2,500 for the accompanying central console. The PCI Starter Edition supports up to 50 Windows servers, and the product includes Web-based support and ongoing product updates.

About Solidcore Systems

Solidcore is a leading provider of real-time change control software. Organizations worldwide trust Solidcore to assure compliance with the Payment Card Industry (PCI) and Sarbanes-Oxley (SOX) standards, to improve service availability, and achieve faster returns on ITIL and IT service management initiatives. Solidcore's S3 Control software helps organizations by tracking changes to their critical infrastructure in real-time, determining if the changes are authorized, and enforcing change policy by selectively preventing unauthorized change. Solidcore is headquartered in Cupertino, California. For more information, visit http://www.solidcore.com.

Solidcore is a registered trademark of Solidcore Systems, Inc. in the United States and other countries. S3 Control and S3 Control PCI Starter Edition are trademarks of Solidcore Systems, Inc. All other names, products and services are trademarks or registered trademarks of their respective holders.

Release Summary:

Solidcore Systems, a leading provider of real-time change control software, today announced that its S3 Control PCI Starter Edition is available for download as a free 30-day trial.

Keyword Tags:

change control, pci, pci audit, pci compliance, pci dss, qsa, solidcore, verisign