Opsware Achieves Security Certification From The Center for Internet Security (CIS)

Opsware Inc. (NASDAQ:OPSW), the leading provider of Data Center
Automation software, today announced it was awarded certification from
the Center for Internet Security (CIS) for the Opsware Server
Automation System and The Opsware Network. The certification was based
on the strength and proven effectiveness of Opsware's Compliance Audit
and Remediation policies to create secure, hardened server
infrastructure through Opsware's server hardening policies across
Windows, Solaris and Red Hat Linux server environments. These
continuously updated policies are among the many benefits of the
Opsware Server Automation System's compliance capabilities
and Opsware's compliance and vulnerability subscription service, The
Opsware Network.

"Opsware's comprehensive coverage of server hardening policies
across different operating systems is a testament to its commitment to
promoting the adoption of configuration best practices," said Clint
Kreitner, CIS President/CEO. "Opsware joins an elite class of vendors
who strive to deliver the highest quality solutions to their customers
which are consistent with the standards set forth by organizations
like CIS and third parties like NIST and DISA."

The CIS Benchmarks are a set of best practice technical standards
based upon the consensus of experts from the private sector and public
sector entities, including the National Security Agency (NSA), the
National Institute of Standards and Technology (NIST), and the U.S.
Defense Information Systems Agency (DISA).

The Opsware Network provides actionable CIS Benchmarks in the form
of Audit and Remediation policies that are native to Opsware's Server
Automation System, eliminating the need for IT departments to
implement the benchmarks manually. This allows IT to immediately
understand how their server environment meets the recommendations in
the CIS Benchmarks and take corrective action as necessary. Using
information it receives from The Opsware Network, the Server
Automation System immediately identifies systems deemed out of
compliance with the CIS Benchmarks, giving administrators the ability
to automatically update affected servers at the push of a button. As a
result, Opsware can significantly reduce an organization's
vulnerability window and threat risk, ensuring a hardened server
environment that meets stringent industry and government standards.

"CIS certification gives our customers an added degree of
confidence that through the Server Automation System they are meeting
widely accepted security configuration best practices from an
unbiased, well-respected source," said Tim Howes, CTO and EVP of
research and development at Opsware. "This certification also
demonstrates the critical role that a service like The Opsware Network
can play in keeping systems up-to-date and ensuring the health and
security of the entire IT infrastructure."

About The Center for Internet Security

The Center for Internet Security (CIS) is a non-profit enterprise
whose mission is to help organizations reduce the risk of business and
e-commerce disruptions resulting from inadequate technical security
controls. CIS members develop and encourage the widespread use of
security configuration benchmarks through a global consensus process
involving participants from the public and private sectors. The
practical CIS Benchmarks support available high level standards that
deal with the "Why, Who, When, and Where" aspects of IT security by
detailing "How" to secure an ever widening array of workstations,
servers, network devices, and software applications in terms of
technology specific controls. CIS Scoring Tools analyze and report
system compliance with the technical control settings in the
Benchmarks. The CIS Benchmarks and Scoring Tools are available for
download free of charge to the Internet community from
http://www.cisecurity.org/index.html.

About Opsware Inc. (NASDAQ:OPSW)

Opsware, the world's leading IT automation company, unlocks the
promise of technology by accelerating IT to zero latency. The
company's software, the Opsware System, automates the entire data
center, from provisioning to patching, configuration to compliance and
discovery to deployment, turning data center operations into a
competitive advantage for business. Opsware's technology is used by
hundreds of companies worldwide including banks, service providers,
retailers, manufacturers and Internet companies with IT environments
ranging from hundreds to tens of thousands of servers, network
devices, storage devices and IT processes. For more information on
Opsware Inc., please visit our Web site at www.opsware.com.

Opsware is a service mark and trademark of Opsware Inc. All other
product names, service marks, and trademarks mentioned herein are
trademarks of their respective owners.