| | |
| Company type | Private company |
|---|---|
| Industry | Software and information technology |
| Predecessor | Perfecto Technologies |
| Founded | 1997 |
| Founder | Gili Raanan and Eran Reshef |
| Defunct | 2006 |
| Fate | Acquired by IBM |
| Headquarters | Herzliya, Israel, |
| Products | AppShield and AppScan |
| Website | www.sanctuminc.com (archived) |
Sanctum Inc. was a Santa Clara, California-based information technology company focused on application security. Sanctum offered a firewall, AppShield, and scanner, AppScan, for application-layer security for Web environments. [1]
In 2004 Sanctum was merged with Watchfire and the company was subsequently acquired by IBM. [2] [3]
Sanctum was founded in 1997 as Perfecto Technologies, by Eran Reshef and Gili Raanan.
The company released its first product AppShield in summer of 1999. [4]
The company has done an extensive research in application security and applying formal methods to real life software [5] in collaboration with Turing Award winner Professor Amir Penueli. Early research in 1996 and 1997 led to the invention, in parallel to other teams, of CAPTCHA technology, and the application for a US patent for CAPTCHA. [6]
In 2000 the company renamed itself to Sanctum. [7] The company was backed by investors Sequoia Capital, Intel Capital, Goldman Sachs, DLJ, Walden and Mofet. [8]
In 2004, Watchfire acquired Sanctum for an undisclosed amount. [3] In 2007, Watchfire was acquired by IBM. [9] [10]
The AppShield product was an early Web application Firewall. [11] AppShield was conceptualized by Eran Reshef and Gili Raanan and was introduced to the market in 1999. [12] AppShield worked by inspecting incoming HTTP requests and blocking malicious attacks based on a dynamic policy which was composed by analyzing the outgoing HTML pages. [13] [14] [15] A 2002 ZDNet article noted that in the three years following its launch, it had been used by 60 Fortune 100 companies. [16] Watchfire acquired Sanctum in 2004, and subsequently sold the intellectual property for AppShield to F5 Networks, which discontinued the product in favor of its competing TrafficShield product. [17]
In June 2000 the company introduced AppScan the world's first Web Security Vulnerability Assessment solution. [18] Among the first clients for AppScan were Yahoo!, [19] Bank of America and AT&T. [20]