PRESS RELEASE

20 April, 2009 " ArcSight Inc. (NASDAQ: ARST), a leading global provider of compliance and security management solutions that protect enterprises and government agencies, today announced its new ArcSight Express family of compliance and security monitoring appliances targeted at the needs of mid-size organisations with limited resources.

Leveraging expertise and insights gained from serving over 1,200 organisations, including clients of MSSP customers, ArcSight Express includes the correlation rules, dashboards and reports that matter in the protection of mid-size organisations. ArcSight Express eliminates the need for in-house security experts to build custom threat detection rules, dashboards and reports as is the norm for customers of other security information and event management (SIEM) products focused on this market segment.

"Large organisations have more training, security skills and technology safeguards in place than smaller organisations have. This is a problem since mid-market companies are just as vulnerable as enterprise firms," said Jon Oltsik, Principal Analyst at the Enterprise Strategy Group. "With this announcement, ArcSight is marrying its enterprise experience with mid-market requirements for ease-of-use, packaging and product pricing."

ArcSight Express is tailored to organisations with little in-house security expertise and looking for increased compliance and security at affordable prices and reduced administrative requirements. Many businesses are unable to staff a dedicated security operations centre. In these firms, IT personnel may have multiple roles and cannot afford to dedicate their time to monitoring the network. With ArcSight Express, security incident detection and notification is automated and IT personnel are able to focus on responding to important security incidents. "We see increased focus on security and compliance in both public and private sectors," says Ian Kilpatrick, chairman Wick Hill Group. "ArcSight Express delivers management, performance, security and compliance in an easy to deploy appliance for customers who need affordable compliance."

ArcSight Express includes an ArcSight Express correlation appliance for real-time correlation, an ArcSight Express log management appliance for long-term storage and built-in expert correlation rules, dashboards and reports needed to secure the IT infrastructures found in mid-size organizations. ArcSight Express works with the ArcSight SmartConnector family that collects event data in native format from more than 275 devices and applications, and normalises the data into a common format for correlation and analysis.

"ArcSight SIEM products are solid and tested in hundreds of the world's largest enterprises today," ArcSight CEO Tom Reilly said. "We are now taking our years of experience with advanced deployments and packaging a solution to address the needs of a much broader market segment. For mid-size businesses with constrained resources and budgets, ArcSight Express acts as their security expert, removing the need for custom rule development and automates security operations - eliminating the need for a fully staffed 24x7 SOC, yet providing the automated monitoring needed around the clock.

"We are excited to offer our new ArcSight Express family for mid-size organisations looking to benefit from world-class security expertise with our correlation and analysis capabilities at a fraction of the cost." The ArcSight Express family is available now and pricing starts at $45,000. Please visit http://www.arcsight.com/products to learn more about ArcSight Express.

About ArcSight ArcSight (NASDAQ: ARST) is a leading global provider of compliance and security management solutions that protect enterprises and government agencies. ArcSight helps customers comply with corporate and regulatory policy, safeguard their assets and processes, and control risk. The ArcSight platform collects and correlates user activity and event data across the enterprise so that businesses can rapidly identify, prioritize, and respond to compliance violations, policy breaches, cybersecurity attacks, and insider threats. For more information, visit www.arcsight.com. (ARST-IR)

2009 ArcSight, Inc. All rights reserved. ArcSight and the ArcSight logo are trademarks of ArcSight, Inc.

Media Contact Peter Rennison / Allie Andrews PRPR, Tel: + 44 (0)1442 245030, [email protected] / [email protected]