Fortify Software Named Rising Star in Deloitte’s Technology Fast 50 Program for Silicon Valley

Application security leader is recognized for its achievements as a fast–growth company.

PALO ALTO, Calif., October 17, 2007 - Fortify® Software Inc., the market–leading provider of enterprise application security solutions, has been named a Rising Star in Deloitte & Touche USA LLP’s Technology Fast 50 program for Silicon Valley. The Rising Star award is a special designation for fast–growth companies that have been in business a minimum of three years, but less than five, and are part of the Silicon Valley Technology Fast 50 program, which ranks the 50 fastest growing technology, media, telecommunications and life sciences companies headquartered in Silicon Valley. Rankings are based on percentage revenue growth over three years (2004–2006). This year’s Silicon Valley Technology Fast 50 program is co–presented by Deloitte & Touche USA LLP and Silicon Valley Bank, Cooley Godward Kronish LLP, Korn/Ferry International, and Woodruff–Sawyer & Co.

“The Deloitte Silicon Valley Technology Fast 50 Rising Star companies have shown the strength, vision and tenacity to succeed despite a very challenging technology environment,” said Mark Jensen, partner and national director, Venture Capital Services, Deloitte & Touche LLP. “We applaud the successes of Fortify Software and acknowledge its place as one of the few to accomplish such a fast growth rate over the past three years.”

Fortify has a strong presence in a wide range of industries, with a customer base that includes the top five commercial banks, three branches of the U.S. armed services, two of the world’s most visited Internet site providers, and three of the leading four accounting firms. In 2007, Fortify continued to build its leadership position in the accelerating market for application security. Its in–house research group led the charge in discovering the first Web 2.0–based hacking vulnerability, members of Fortify’s technical advisory board participated in the review of e–voting machines for a study commissioned by the California Secretary of State, and the company closed the largest order ever in the application software industry with the U.S. Air Force. In addition to this year’s Rising Star award, Fortify also received honors from SC Magazine’s Readers Trust program, the Jolt Productivity Award and the SD Times 100.

“We are honored to be recognized by Deloitte for our strong performance,” said John Jack, Fortify’s CEO. “As a company thriving in a fast–growing market like application security, we appreciate what receiving the Rising Star Award means. This award, distinguishing Fortify as an innovator within the highly competitive technology industry here in the Bay Area, is particularly meaningful because of our strong commitment to being on the forefront of technology. The entire Fortify team takes great pride in this acknowledgement as we continue our mission to enable organizations to protect their strategic digital assets from the inside out.”

To qualify for the Technology Fast 50 Rising Star program, companies must be incorporated a minimum of three years and have revenues in only three or four years, have operating revenues of at least $50,000 in 2004 and $5 million in 2006, be headquartered within the San Francisco Bay Area, own proprietary technology or proprietary intellectual property that contributes to a significant portion of the company’s operating revenues or devote a significant proportion of revenues to the research and development of technology.

Rising Star companies are automatically entered in Deloitte’s Technology Fast 500 Rising Star category. Deloitte’s Technology Fast 500 program ranks North America’s top 500 fastest growing technology, media, telecommunications and life sciences companies based on percentage revenue growth over five years (2002–2006). Its Rising Star ranking is based on percentage revenue growth over three years (2004–2006). For more information on Deloitte’s Technology Fast 500 or Technology Fast 50 programs, visit www.fast500.com.

About Fortify Software, Inc.

Fortify® Software products protect companies from the threats posed by security flaws in business–critical software applications. Its software security products—Fortify SCA, Fortify Manager, Fortify Tracer and Fortify Defender—drive down costs and security risks by automating key processes of developing and deploying secure applications. Fortify’s customers include government agencies and FORTUNE 500 companies in a wide variety of industries, such as financial services, healthcare, e–commerce, telecommunications, publishing, insurance, systems integration and information management. The company is backed by world–class teams of software security experts and partners. More information is available at www.fortify.com.

About Deloitte

Deloitte refers to one or more of Deloitte Touche Tohmatsu, a Swiss Verein, its member firms and their respective subsidiaries and affiliates. As a Swiss Verein (association), neither Deloitte Touche Tohmatsu nor any of its member firms has any liability for each other’s acts or omissions. Each of the member firms is a separate and independent legal entity operating under the names “Deloitte”, “Deloitte & Touche”, “Deloitte Touche Tohmatsu” or other related names. Services are provided by the member firms or their subsidiaries or affiliates and not by the Deloitte Touche Tohmatsu Verein.

Deloitte & Touche USA LLP is the U.S. member firm of Deloitte Touche Tohmatsu. In the United States, services are provided by the subsidiaries of Deloitte & Touche USA LLP (Deloitte & Touche LLP, Deloitte Consulting LLP, Deloitte Financial Advisory Services LLP, Deloitte Tax LLP and their subsidiaries), and not by Deloitte & Touche USA LLP.

Fortify Press Contact

Lisa Eskey, Sterling Communications, 1-408-884-5157, leskey@sterlingpr.com