ArcSight and Ping Identity Partner to Deliver Visibility and Control to Cloud Computing

ArcSight IdentityView and PingFederate® Will Enable Organizations to Detect and Analyze User Activity On-Premise or in the Cloud

ArcSight Protect 09, WASHINGTON, D.C. – September 15, 2009 – ArcSight, Inc. (NASDAQ: ARST), a leading global provider of security and compliance management solutions that protect enterprises and government agencies, today announced a planned joint solution with Ping Identity, the leader in Internet Identity Security, that will give organizations in-depth visibility into activity across traditional applications, IT infrastructure and cloud applications.

“As companies look for ways to keep costs low, cloud computing has become a desirable option,” said Jeff Scheel, senior vice president of business development at ArcSight. “We believe that combining IdentityView with Ping Identity’s Internet identity solutions will give organizations the confidence that, even in a virtual IT environment, their business will be protected from cyber threat and risk.”

PingFederate, Ping Identity's flagship Internet Identity Security software, supports Internet Single Sign-On, identity-enabled Web services and Internet user account management. PingFederate acts as a single control point for enterprise users accessing hundreds of leading cloud services, including Salesforce.com, Google, Amazon, SuccessFactors and many others. ArcSight IdentityView, a specialized application built on the ArcSight SIEM Platform, can report on unauthorized user access and monitor internal controls, providing comprehensive collection and analysis of user activity across an enterprise. In partnership, these technologies will provide a user monitoring solution that extends from the enterprise to the cloud.

With PingFederate and IdentityView working in combination, users will be able to access cloud services securely and easily, and the organization retains control and visibility over where those users go and what they access. Under the joint solution, users will log into the enterprise network through their normal Windows logon process. When they access a cloud service, PingFederate will seamlessly connect users to the service via the users’ authenticated Active Directory credentials (or other authentication source). PingFederate will log this access to ArcSight IdentityView, so that ArcSight customers can correlate usage reports and track when users are accessing unauthorized applications, violating role limitations, or creating undue business risk. IdentityView can then produce complete activity reports that cross internal and cloud systems, making audits faster, easier and less costly.

“Many organizations do not have a full view of who is on their network, what data can be seen and the actions taking place,” said Andre Durand, CEO at Ping Identity. “They need to be able to see how their entire IT investment and key assets are being used and the assurance that they’re being used in the intended manner. ArcSight and Ping Identity will provide that insight. As more companies invest in the cloud, we believe that they can be confident that this joint solution will give them the tools to secure their digital infrastructure.”

About Ping Identity Corporation

Ping Identity is the market leader in Internet Identity Security, delivering on-premise software and on-demand services for Internet Single Sign-On (SSO), Identity-Enabled Web Services and Internet User Account Management. More than 350 enterprises, government agencies, Software-as-a-Service (SaaS) vendors and online service providers worldwide rely on Ping Identity to streamline application access, reduce administrative costs, generate additional revenue and improve security. Visit www.pingidentity.com for additional information.

About ArcSight

ArcSight (NASDAQ: ARST) is a leading global provider of security and compliance management solutions that protect businesses and government agencies. ArcSight identifies, assesses, and mitigates both internal and external cyber threats and risks across the organization for activities associated with critical assets and processes. With the market-leading ArcSight SIEM platform, organizations can proactively safeguard their assets, comply with corporate and regulatory policy and control the risks associated with cyber-theft, cyber-fraud, cyber-warfare and cyber-espionage. For more information, visit www.arcsight.com.

Cautionary Statement Regarding Forward Looking Statements

This news release contains forward-looking statements, including without limitation the companies’ intention to deliver a joint solution that will enable organizations to detect and analyze user activity on-premise or in the cloud; the companies’ belief that combining ArcSight’s IdentityView with PingFederate will give organizations the confidence that, even in a virtual IT environment, their business will be protected from cyber threat and risk; the companies’ intended interoperation of the joint solution; the companies’ belief that organizations will need to be able to see how their entire IT investment and key assets are being used and the assurance that they’re being used in the intended manner; and that a joint solution of ArcSight and Ping Identity products will provide that insight and will give them the tools to secure their digital infrastructure. These forward-looking statements are subject to material risks and uncertainties that may cause actual results to differ substantially from expectations. Investors should consider important risk factors, which include: the risk that ArcSight and Ping Identity may be unsuccessful in developing a joint solution from their ArcSight IdentityView and PingFederate products; the risk that the demand for the joint solution may be less than the companies anticipate; the risk that alternative solutions may be perceived as better positioned to provide in-depth visibility into activity across traditional applications, IT infrastructure and cloud applications; and other risks detailed under the caption “Risk Factors” in the ArcSight Quarterly Report on Form 10 Q filed with the Securities and Exchange Commission, or the SEC, on September 9, 2009 and the company’s other filings with the SEC. You can obtain copies of the company’s Quarterly Report on Form 10 Q and its other SEC filings on the SEC’s website at www.sec.gov.

The foregoing information represents the companies’ outlook only as of the date of this press release, and the companies’ undertake no obligation to update or revise any forward-looking statements, whether as a result of new information, new developments or otherwise.