Preso: LogLogic Agrees to Acquire Exaprotect

LogLogic Signs a Definitive Agreement to Buy Exaprotect Pat Sueltz | April 22, 2009

Legal Disclaimer

This presentation does not constitute an offer to sell or the solicitation of an offer to buy LogLogic securities. The LogLogic securities have not been registered under the Securities Act of 1933, as amended (the “Act”), or under any state securities laws, and may not be offered or sold in the United States or to U.S. persons (as defined in Regulation S of the Act) absent registration or an applicable exemption from the registration requirements pursuant to the Act. LogLogic does not intend to register the shares issued as consideration for Exaprotect in whole or in part in the United States or to conduct a public offering in the United States.

A Break-through in Security Management

LogLogic signed a definitive agreement to acquire the outstanding securities of Exaprotect, subject to customary closing conditions

Announcement via a press release April 22 nd during the RSA Conference

Acquisition expected to close this quarter

Company Backgrounders

Founded 2002

Privately held

120+ employees

700+ customers

150+ partners

Founded in 2004

Privately held

50+ Employees

200+ Customers

30+ Partners

Founded in 2002 170+ employees 900+ customers 200+ partners Proven ability to execute Strong patent portfolio +

Even Better Together Most complete security management suite Unifying historically disparate point solutions Closing the security management loop Extensible Open Log Management Platform +

Log management platforms

Compliance management

Database security management

Security event management

Security change/configuration management

Behavioral threat monitoring

Complementary Intellectual Property

Up to 100 x Faster log management reporting

Combined normalization and indexing

Compliance workflow

Ease of installation and use

Native appliance architecture

Auto identification

Self maintaining database

Intellectual Property

Up to 100x Faster security event processing

Human language taxonomy and behavioral monitoring

Security incident workflow

Ease of installation and use

Native appliance architecture

Natural language policy editor

Efficient correlation administration

+

LogLogic Delivers Value in a Tough Economy Traditional SIEM LogLogic Compliance Management Database Security Management Log Management Change Management Log Management Compliance Reports Security Event Management Security Event Management Change Management Bundled solution One stop shop Do more with less Time to value

The Three Steps to Security Management Maturity 1 2 3 What’s important? Security Event Management Compliance Management What to do? Change Management Database Security What’s going on? Log Management Database Activity Monitoring

Open Log Management Platform Accelerates Integration of new Log Powered Applications Contextual Data Network Servers Database Applications LogLogic Compliance Manager Partner Applications Correlation LogLogic Security Event Manager Open APIs LogLogic Database Security Manager Customer Applications Security Asset Identity Configuration Open Log Management Platform LogLogic Change Manager

Available Today: Log Powered Applications Working Together LogLogic Change Manager LogLogic Database Security Manager LogLogic Security Event Manager “ access to HR data” 1 (Privileged) User Activity Periodic Review 3 4 “ and sends e-mail” Prioritize Alert Prevention Investigation 2 LogLogic Compliance Manager Networks Servers Databases Applications

Towards Automated Management and Prevention Indexed Information Normalized Information Semantic Information Contextual Information Action Actionable Information – Alerts, Reports, Portals, etc. Log Files Data Information Recommendation Prediction Action

And Fine Grain Monitoring and Prevention Network Systems Applications Transactions Information Traditional SIEM Database Activity Monitoring Sensitive Data Privileged Users Applications Host Sensor Transaction Records. Customer Data. Financial Records. Intellectual Property. Personally Identifiable Information. Shared Memory DBMS

Fine Grain Monitoring Enables Accurate Prevention Sensitive Information Network Systems Applications Transactions Information Data Information Recommend Prediction Action Fine grain monitoring. More accurate prevention. What are the logs saying? What to do about it?

Questions?