Tumbleweed Awarded U.S. Government FIPS 140-2 Security Certification

Tumbleweed® Communications Corp. (NASDAQ:TMWD), an industry leader in managed file transfer and content security, today announced that its security kernel has achieved the Federal Information Processing Standards (FIPS) 140-2 Level 1 certification, the benchmark standard for government agency data security. Tumbleweed was issued validation certificate number 857. This new certification validates that the Tumbleweed security kernel, the software module implemented to provide security functionalities for three of Tumbleweed’s product lines, SecureTransport™, MailGate® and Validation Authority™, meets the toughest data security standard for all U.S. government agencies. "Our customers, the most security conscious organizations, both public and private, can rest assured knowing that we meet the most stringent U.S. government data security standard, FIPS 140-2,” said Joe Fisher, senior vice president of product management at Tumbleweed. "This certification means our products, like SecureTransport, continue to build on our years of security heritage that has seen us accumulate 27 U.S. security patents, providing paramount security for organizations when transferring their critical business files and data.” The FIPS 140-2 Level 1 certification, a standard managed by the National Institute of Standards and Technology (NIST) is only awarded to products which pass rigorous testing procedures to qualify for use in protecting sensitive content in motion belonging to government agencies. Specifically, the certification verifies the security of cryptographic modules of products that handle or protect sensitive data. Tumbleweed’s SecureTransport product suite facilitates secure file transfer while preventing the loss of customer, partner and personal data. With Tumbleweed’s SecureTransport product suite, organizations can accept, validate and secure incoming connections and file transfers, regardless of file size, ranging from small files to extremely large ones. The product suite is based on open standards allowing for consolidation of homegrown FTP server solutions, for central system management and monitoring across multiple sites or applications. The SecureTransport product suite encrypts files on the server through delivery to the end user providing security and reliability of information at all times during transmission. SAFE HARBOR STATEMENT Tumbleweed cautions that forward-looking statements contained in this press release are based on plans and expectations as of the date of the press release, and that a number of factors could cause the actual results to differ materially from the guidance given at this time. These factors are described in the Safe Harbor statement below. Except for the historical information contained herein, the matters discussed in this press release may constitute forward-looking statements that involve risks and uncertainties that could cause actual results to differ materially from those projected, particularly with respect to performance and functionality of any Tumbleweed product containing a FIPS 140-2 Level 1 certified security kernel, as well as any particular Tumbleweed product line continuing to contain a FIPS 140-2 Level 1 certified security kernel in the future. In some cases, forward-looking statements can be identified by terminology such as "may,” "will,” "should,” "potential,” "continue,” "expects,” "anticipates,” "intends,” "plans,” "believes,” "estimates,” and similar expressions. For further cautions about the risks of investing in Tumbleweed, we refer you to the documents Tumbleweed files from time to time with the Securities and Exchange Commission, particularly Tumbleweed’s Form 10-K filed March 14, 2007 and Form 10-Q filed November 9, 2007. Tumbleweed assumes no obligation to update information contained in this press release. Although this release may remain available on Tumbleweed’s website or elsewhere, its continued availability does not indicate that Tumbleweed is reaffirming or confirming any of the information contained herein. About Tumbleweed Communications Corp. Tumbleweed Communications Corp. (NASDAQ:TMWD), an industry leader in managed file transfer and content security, provides enterprise-class solutions to organizations of all sizes. Tumbleweed’s innovative products enable organizations to effectively manage and protect business-critical Internet communications, with capabilities that span secure file transfer, encryption, data loss prevention, and email security. Tumbleweed has more than 3,000 customers worldwide, including blue-chip companies across an array of industries such as Technology, Retail, Finance, Healthcare, Manufacturing, Consumer Packaged Goods, Telecom, Energy, and the U.S. Government. The world’s most security conscious organizations rely upon Tumbleweed technology including Bank of America Securities, JP Morgan Chase & Co., the U.S. Food and Drug Administration, and the U.S. Department of Defense. Our award-winning products build on 14 years of R&D and 27 security patents in the U.S. alone – many of which are licensed by other security vendors. More information can be found at www.tumbleweed.com. Tumbleweed, SecureTransport, MailGate and Validation Authority are either registered trademarks or trademarks of Tumbleweed Communications Corp. in the United States and/or other countries. All other trademarks are the property of their respective owners.