Qualys and AsiaPay Partner to Deliver On Demand Risk and Compliance

Solutions to Asia
AsiaPay to Resell Qualys’ Solutions to Businesses in Hong Kong, Macau, Thailand and the
Philippines to Manage Vulnerabilities and Ensure Compliance with PCI Data Security Standards

REDWOOD CITY, Calif. — August 20, 2007 — Qualys, Inc., the leading provider of on demand
security risk and compliance management solutions, today announced a partnership with AsiaPay, the
leading electronic payment processing service and technologies provider in Asia. Through this
agreement, AsiaPay will resell Qualys’ solutions to help customers better prevent, detect and respond
to vulnerabilities and threats in real-time. Additionally, AsiaPay will utilize QualysGuard to deliver PCI
certification and PCI-related services to their clients.

PCI DSS requires any organization accepting credit card payments to comply with 12 core network
and data security requirements. PCI DSS is enforced across the global marketplace, therefore,
retailers around the world are challenged to protect customers’ confidential information including credit
card numbers, contact and billing information. With the proliferation of online transactions in Asia,
businesses there have to be as vigilant as ever to combat threats.

Qualys pioneered Security-as-a-Service (SaaS) as the first and only company to deliver security risk
and compliance solutions through an on demand, or SaaS, delivery model. With Qualys as part of its
security portfolio, AsiaPay will deliver on demand services, minimizing solution maintenance and
upgrade requirements. Additionally, customers can scan critical assets, analyze threat data and
correlate it immediately – enabling IT administrators to effectively manage risk and produce
documentation for regulatory compliance.

Based in Hong Kong, with operational presence in Thailand, the Philippines, Singapore and mainland
China, AsiaPay provides a comprehensive suite of secure, scalable, function-rich, real-time multi-
currency, -channel and -lingual payment processing solutions and technologies on credit and debit
cards for banks, corporations, small-to-medium enterprises, charities and individuals. In addition,
AsiaPay offers its advanced fraud detection and management capabilities as well as 3D-Secure
technology for banks and corporations. As part of its business strategy for market growth in the region,
Asiapay is expanding to PCI-related service offerings to offer one-stop comprehensive payment
service solutions to banks and corporations.

“We are excited to be partnering with Qualys to quickly deploy the most robust risk and compliance
solution as well as comprehensive PCI offering on the market,” said Joseph Chan, CEO of AsiaPay.
“With the exponential increase in payment card use in Asia, our customers are seeking best-in-breed
technologies that protect their systems and sensitive customer information against the imminent threat
of exposure.”
“The partnership with AsiaPay illustrates the heightened use of payment cards and the subsequent
need to enforce PCI compliance across the Asian region,” said Philippe Courtot, chairman and CEO of
Qualys. “Additionally, it exemplifies a continuing trend toward adoption of on demand, Security-as-a-
Service solutions on a global scale. The market demands real-time visibility into network vulnerabilities
while at the same time organizations are hesitant to take on increased operational and hardware
expenses. Enterprises are continually looking for ways to improve their security posture while easing
their IT burdens and regulatory requirements, and AsiaPay and its customers will benefit from the
ability to deploy Qualys’ on demand solutions anywhere in the world, quickly.”

About AsiaPay
AsiaPay Limited is a leading ePayment and mPayment solution and technology vendor, as well as a
merchant-acquiring service player in Asia. AsiaPay strives to bring advanced, secure and cost-
effective electronic payment processing solutions and technologies to banks, corporations, SMEs,
charities and individuals in the global market. They also provide integrated payment processing for a
comprehensive range of international credit cards and popular debit cards in Asia and China.

AsiaPay serves as an accredited TPP processor for banks, certified IPSP for merchants, certified
international 3D-Secure vendor for Visa, MasterCard and JCB, and advanced payment gateway
solution and 3D-Secure product vendor for banks. With its differentiated multi-currency, -lingual, -card
and -channel processing platform with advanced fraud detection and monitoring capabilities and
unparalleled quality account management service, AsiaPay is pleased to be a quality service for nearly
ten banks and thousands of merchants throughout Asia.

For more information, please visit www.asiapay.com

About Qualys
Qualys, Inc. is the leading provider of on-demand security risk and compliance management solutions.
Qualys is the only security company that delivers these solutions through a single software-as-a-
service platform. QualysGuard® allows organizations to strengthen the security of their networks and
conduct automated security audits to ensure compliance with policies and regulations. As a scalable
and open platform, QualysGuard enables partners to broaden their managed security offerings and
expand their consulting services. Qualys’ on-demand solutions are deployed in a matter of hours
anywhere in the world, providing customers an immediate view of their security and compliance
posture. QualysGuard is the widest deployed security on-demand solution in the world, performing
over 150 million IP audits per year.

For more information, please visit www.qualys.com.

Qualys, the Qualys logo and QualysGuard are proprietary trademarks of Qualys, Inc. All other
products or names may be trademarks of their respective companies.

Contact :
AsiaPay Ltd. – Hong Kong
Sirina Mok
(852) 3173 1966
sirina.mok@asiapay.com

Qualys Inc.
Kim Angell or Jason Morris
Schwartz Communications
(415) 512-0770
qualys@schwartz-pr.com