Emeryville, Calif., October 20, 2005 - BigFix, a leading provider of security configuration management solutions, announced today that its BigFix Enterprise Suite will undergo the U.S. federal government’s evaluation process designed to validate the security of IT products. Known as the Common Criteria, the third-party evaluation criteria aims to provide enterprises worldwide with a new level of assurance that products meet internationally recognized security standards and is used as a benchmark for quality and reliability when U.S. government agencies acquire new technologies. BigFix is specifically pursuing Common Criteria EAL3, which requires in-depth analysis of product design and development methodology and extensive testing.

The BigFix Enterprise Suite, deployed by nearly 400 enterprises and government organizations on thousands to tens-of-thousands of computing devices managing millions of changes across distributed IT infrastructures and networks, is built from the ground up to deliver the highest level of security and trustworthiness. Unlike other systems and security configuration management offerings, the BigFix platform is one of the industry’s only security configuration management solutions to leverage a highly secure public key infrastructure (PKI) to authenticate administrative commands and mitigate the security risks of deploying an enterprise-wide IT infrastructure management system.

“The evaluation of the BigFix Enterprise Suite for Common Criteria certification exemplifies our commitment to delivering the highest quality solutions while providing customers with the confidence that BigFix stands up to the rigorous security guidelines set forth by national security coordinators worldwide,” said Gregory Toto, vice president of product management at BigFix.

BigFix provides scalable, easy-to-use security and software configuration management solutions for global enterprises, managed service providers and government agencies facing challenges such as managing regulatory compliance and corporate governance, and ensuring business agility and operations continuity. With customer implementations on thousands to tens-of-thousands of PC clients, workstations and servers managing millions of changes across distributed IT infrastructures and networks, BigFix solutions enable customers worldwide to improve IT processes, enhance security and deliver more reliable services, while reducing costs and the overall management load on IT.

About Common Criteria
The Common Criteria program is developed by the National Institute of Standards and Technology and National Security Agency as part of the National Information Assurance Partnership (NIAP) establishing an organizational and technical framework to evaluate the trustworthiness of IT products and protection profiles. Certification to the Common Criteria EAL3 requires in-depth analysis of product design and development methodology, backed by extensive testing. EAL3 certificates are currently recognized by the following countries: United States, Canada, Australia, New Zealand, France, Germany, Finland, Greece, Israel, Italy, The Netherlands, Norway, Spain and the United Kingdom. The Common Criteria represents the outcome of efforts to develop criteria for evaluation of IT security that are widely accepted within the international community. Further information is available at http://niap.nist.gov/cc-scheme/index.html.

About BigFix, Inc.
BigFix enables organizations to better manage their global IT infrastructures with solutions to discover, analyze, change and maintain security and software configurations faster and more accurately, resulting in improved processes, greater visibility, better security and more reliable services while reducing costs. For more information, visit http://www.bigfix.com.