Note: We will avoid reviewing products for commercial enterprises in this section. These links are not endorsements; they are provided solely for completeness. Contact us for more information.

Finjan Software	Finjan Software produces two products SurfinShield and SurfinGate. Finjan recently formed a Technical Advisory Board.
MindQ Home Page	MindQ offers a CD-ROM about Java Security.
Maximized software	Offers the WebReferee product.
Phaos Technology	SSLAVA secure socket layer API classes.
Digitivity	Technology for more secure mobile code.
Acme.Crypto	FREE crypto classes from Jef Poskanzer.
Java-cryptlib	The FREE Java-cryptlib allows you to write platform independent crypto programs.
JavaTM Cryptography Extension	JavaSoft's JCE is an extension package to the JDK. North American distribution only (export control bites).
Java Cryptography Toolkit	Commercial encryption classes. Free for personal use only.
FlexxGuard	And guess what, big blue does it too! Applet regulation must have a market somewhere.
Security7	Security 7 and a related organization, WithinReach, once collaborated to spread fear, uncertainty, and doubts about hostile mobile code. Among others, we don't condone this approach. (See the Infoworld story on the link between Security7 and WithinReach).
Advanced Computer Research Online	Make the secure4u widget. Yet another hostile code "stopper".
Aphah	Aphah makes an outstanding decompiler. Now that mocha is defunct, this is the place to turn.
International Computer Security Association	The ICSA recently created a Malicious Mobile Code Consortium. This organization is likely to create self-imposed certification criteria for vendors. It remains to be seen what the certification will mean.
4th Pass	4thpass makes an obfuscation tool.
eSafe Technologies	Esafe makes a mobile code sandbox (as if Java doesn't have one already).
JCP	JCP provides cryptographic solutions for e-commerce, including an SSL class library and a crypto development kit.
Server-Based Java Security Products	A CMPnet comparative review of four of the several Java security add-on products on the market.
TrendMicro	Trendmicro makes the Interscan Appletrap product. This whitepaper explains Trendmicro's view of mobile code.
Java Security Vendors: Solutions of Snake Oil	Your hosts try to make some sense of third-party solutions. A preview of contect from Securing Java.

Note: The opinions expressed on this page are the opinions of Gary McGraw and Ed Felten. Statements made on this page should not be construed as having come from our employers or our publishers. We welcome correspondence, see the Java Security page for e-mail addresses. Copyright © 1996-9, Gary McGraw and Edward Felten