Hannaford Supermarkets Installs Rapid7's NeXpose for Achieving Compliance with the Payment Card Industry (PCI) Data Security Standard

BOSTON--(BUSINESS WIRE)--Aug. 15, 2006--

Rapid7's NeXpose Will Be Used by Hannaford to Scan Devices Throughout Its Networks and at Point-of-Sale in Its Supermarkets and Food and Drug Stores

“NeXpose also demonstrated it enables integration with other technologies. We can easily integrate it with the Peregrine Service Center, the software we use for call-ticketing and incident-handling.”

Rapid7 today announced that the Hannaford Bros. Co. has purchased NeXpose, its award-winning enterprise vulnerability management solution, to perform network security scanning in compliance with the Payment Card Industry (PCI) Data Security Standard.

NeXpose will be used to scan devices in Hannaford's networks and at point-of-sale in its 158 retail supermarkets and food and drug stores, ensuring the protection of customers' credit card data and other information. Rapid7 is a MasterCard-approved security scanning vendor as part of the MasterCard Site Data Protection (SDP) Program.

During a review of several vulnerability management solutions for performing its PCI compliance scanning, Hannaford found that NeXpose stood out for several reasons.

"NeXpose is extremely thorough in its compliance checking against devices," stated David Fournier, senior information security analyst, Hannaford Bros. Co. "NeXpose also demonstrated it enables integration with other technologies. We can easily integrate it with the Peregrine Service Center, the software we use for call-ticketing and incident-handling."

Fournier further reported, "The product is easy to use; the interface makes it simple to set up and perform the scanning. We were also pleased to learn that it is an affordable solution and fit within our budget."

"By deploying NeXpose vulnerability management to secure its networks, Hannaford is proactively protecting its business and the customer data in its payment systems against the threat of compromises," stated Alan Matthews, president of Rapid7 LLC. "Vulnerabilities left undetected can potentially lead to unauthorized access, but by finding and fixing any exposures, NeXpose reduces the risk of intrusion."

NeXpose PCI Compliance provides scan templates and reporting capabilities that meet or exceed the MasterCard SDP specifications for system security scanning. The PCI Standard compliance report presents pass/fail information at both executive and administrator detail levels. A complete remediation plan is generated that enables security analysts to bring their system devices into full compliance with the PCI Standard.

About Hannaford Bros. Co.

Hannaford Bros. Co., based in Scarborough, Maine, operates 158 supermarkets and food and drug combination stores in Maine, New Hampshire, Vermont, New York and Massachusetts. These stores operate under the Hannaford Supermarket and Hannaford Supermarket and Pharmacy names. Hannaford employs more than 26,000 associates. The company is owned by Delhaize Group of Brussels, Belgium. Additional information can be found at www.hannaford.com

About NeXpose

The award-winning NeXpose enterprise vulnerability management scans devices, systems, software and Web server applications to locate threats, assess their risk to the environment, devise a remediation plan and implement the ticketing process. With its expert system, NeXpose builds a knowledge base of facts on the environment it's exploring and models potential targeted attacks to expose all existing threats. NeXpose provides reporting capabilities that ensure compliance with governmental regulations and corporate security configuration policies.

NeXpose is available in multiple deployment options: Software, plug-and-play Appliance and Hosted Services.

About Rapid7

Rapid7 was founded in 1999 by a team of software industry veterans who were major contributors to product development and subsequent growth and success at Percussion Software, Bond Technologies and Stride & Associates. Rapid7 launched NeXpose, its award-winning enterprise vulnerability management solution, in 2001. Since introduced, NeXpose has been sold to over 130 organizations in the U.S. and abroad. Rapid7 sells NeXpose to corporate enterprises, Global 2000 companies, and government entities, and serves the full range of vertical markets.

Rapid7 is headquartered in Boston, MA, with offices in California and the United Kingdom. For more information on the company and its product, NeXpose, visit http://www.rapid7.com.