ArcSight and SRA International Join Forces to Combat Enterprise Threat and Risk

Agreement Combines Enterprise Class Cybersecurity Solutions with Proven In-the-Field Experience

CUPERTINO, CA – December 9, 2009 – ArcSight, Inc. (NASDAQ: ARST), a leading global provider of security and compliance management solutions that protect enterprises and government agencies, today announced a partnership with SRA International, Inc. (NYSE: SRX), a leading provider of technology and strategic consulting services and solutions to government organizations, to develop interoperable privacy and security programs for customers.

With three decades of service, SRA is dedicated to solving complex problems of global significance for clients in national security, civil government and global health through expert knowledge, technical tools and solutions that governments, agencies and companies need to improve performance, reduce costs and risks, introduce enterprise efficiencies and enhance human health.

ArcSight is working with SRA to help mitigate potential gaps on security and privacy risks in the critical infrastructure of organizations. ArcSight’s cybersecurity solutions combined with SRA’s expertise in delivering a reliable, resilient and trustworthy digital experience will also help customers meet compliance regulations such as FISMA, HIPAA, SOX and PCI, by protecting personally identifiable information, and securing sensitive data.

“ArcSight’s industry leading cybersecurity solutions are among the very best and are vital to establishing the enterprise-level, real-time situational awareness, persistent protection, and anomaly detection capabilities required to forestall new threats, both internal and external,” said Pat Burke, senior vice president, offerings & products, SRA. “As a partner, ArcSight products will be interoperable with SRA’s One Vault ™ cyber security portfolio and solutions platform to provide ‘next class’ of responsive, adaptive and predictive defense solutions.”

“SRA is a proven leader in architecting and deploying information assurance and cyber security solutions, with deep experience protecting high risk data in the enterprise,” said Rick Wescott, vice president, public sector, ArcSight. “We believe that through SRA’s expertise and the ArcSight SIEM technology platform, customers will be well equipped to fight the cyber threats and risks that face the enterprise, even as they advance in sophistication.”

About ArcSight

ArcSight (NASDAQ: ARST) is a leading global provider of security and compliance management solutions that protect businesses and government agencies. ArcSight identifies, assesses, and mitigates both internal and external cyber threats and risks across the organization for activities associated with critical assets and processes. With the market-leading ArcSight SIEM platform, organizations can proactively safeguard their assets, comply with corporate and regulatory policy and control the risks associated with cyber-theft, cyber-fraud, cyber-warfare and cyber-espionage. For more information, visit www.arcsight.com.

Forward Looking Statements

This news release contains forward-looking statements, including without limitation the companies’ intention to develop interoperable privacy and security programs for customers and to work together to help mitigate potential gaps on security and privacy risks in the critical infrastructure of organizations; the companies’ intention to deliver a reliable, resilient and trustworthy digital experience to help customers meet compliance regulations such as FISMA, HIPAA, SOX and PCI, by protecting personally identifiable information, and securing sensitive data; the companies’ intention to have ArcSight products interoperate with SRA’s One Vault ™ cyber security portfolio and solutions platform to provide ‘next class’ of responsive, adaptive and predictive defense solutions; and ArcSight’s belief that, through SRA’s expertise and the ArcSight SIEM technology platform, customers will be well equipped to fight the cyber threats and risks that face the enterprise, even as they advance in sophistication. These forward-looking statements are subject to material risks and uncertainties that may cause actual results to differ substantially from expectations. Investors should consider important risk factors, which include: the risk that ArcSight and SRA International may be unsuccessful in developing the anticipated interoperable programs; the risk that the demand for the interoperable programs may be less than the companies anticipate; the risk that alternative solutions may be perceived as better positioned to fight the cyber threats and risks that face the enterprise; and other risks detailed under the caption “Risk Factors” in the ArcSight Quarterly Report on Form 10 Q filed with the Securities and Exchange Commission, or the SEC, on September 9, 2009 and the company’s other filings with the SEC. You can obtain copies of the company’s Quarterly Report on Form 10 Q and its other SEC filings on the SEC’s website at www.sec.gov.

###

Media Contact:
Atomic PR for ArcSight
Chris Fucanan
415-402-0230
chris.fucanan@atomicpr.com