Citadel Security Software's Hercules Finalist in eWEEK Excellence Awards.

DALLAS -- Pioneer of Enterprise Vulnerability Management Solutions Named Finalist in Vulnerability Assessment & Remediation Category

Citadel Security Software Inc. (Nasdaq:CDSS), a leader in enterprise vulnerability management and policy enforcement solutions, announced today that Hercules, the company's automated vulnerability management solution, has been named as a finalist in the eWEEK Fifth Annual Excellence Awards for the "Vulnerability Assessment and Remediation" category. The eWEEK Excellence Awards program was open to any enterprise product or service that had been announced in 2004 and that would be available before March 31, 2005.

The eWEEK Excellence Awards are determined by the Excellence Awards judges -- comprised of eWEEK analysts and members of the eWEEK Corporate Partner Advisory Board -- who are currently evaluating finalists to determine winners in each of 19 different categories. According to the publication, the judges determined a need to expand the number of categories used in the past. Regulatory mandates, the need for a broader application of security technologies and a more integrated business environment are just some of the forces that have combined to create more stringent and more multidisciplinary technology demands.

"More than ever before, the Excellence field this year showed that IT vendors are trying to deliver what enterprise professionals need, not just following the least-resistant path of technology progress," said Peter Coffee, eWEEK technology editor.

"As a pioneer in vulnerability management, this award selection validates Citadel's view that enterprise vulnerability remediation is a critical component of effective network security," said Steve Solomon, CEO of Citadel. "Additionally, acknowledgement from a top industry publication such as eWEEK is evidence that the technical strength of Hercules sets the bar at a level to which others strive, and further supports why Citadel holds a reputation for excellence in enterprise vulnerability management solutions."

The winners will be announced in the April 11, 2005, issue of eWEEK Magazine and honored at an awards ceremony at The Westin Copley Hotel in Boston on April 26, 2005. Additional information on the eWEEK Excellence Awards finalists can be found by visiting eWEEK Magazine's Web site at: http://www.eweek.com/article2/0,1759,1779705,00.asp.

Citadel's Hercules technology is an innovative vulnerability remediation solution that automates the resolution of all classes of vulnerabilities. With the largest library of tested vulnerability remedies across Windows and UNIX platforms and interoperability with industry leading network scanners and vulnerability assessment tools, Hercules allows users to import and aggregate data from multiple sources, review, approve and customize resolutions and systematically deploy vulnerability fixes.

About eWEEK

eWEEK, "the enterprise newsweekly," is the essential technology information source for builders of enterprise infrastructure. eWEEK enables readers to successfully evaluate, deploy and leverage new technology solutions for competitive advantage. The publication delivers to its readers breaking news, technology evaluations, and strategic analysis on the technologies, platforms, and trends that impact enterprise-wide computing. eWEEK reaches 400,100 enterprise technology buyers who are evaluating and purchasing technology solutions for their company. eWEEK delivers news, analysis and technology reviews in print weekly and on a daily basis on the Web.

About Citadel

Citadel Security Software Inc., a leader in enterprise vulnerability management solutions powered by AVR technology, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending, Common Criteria EAL 3 certified Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as FISMA, HIPAA and Gramm-Leach-Bliley legislation. For more information on Citadel, visit www.citadel.com, or contact the company at 214-520-9292.

Safe Harbor/Forward-Looking Statements

This press release may contain forward-looking statements that are intended to be subject to the safe harbor protection provided by Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934. These statements relate to future events or future financial performance and involve known and unknown risks and uncertainties that may cause actual results or performance to be materially different from those indicated by any forward-looking statements. In some cases, you can identify forward-looking statements by terminology such as "forecast," "may," "will," "could," "should," "anticipate," "expect," "plan," "believe," "potential" or other similar words indicating future events or contingencies. Some of the things that could cause actual results to differ from expectations are: the current economic and geopolitical environment; current information technology spending trends; the uncertainty of funding of government information technology security projects; a lack of Citadel operating history; uncertainty of product development and acceptance; uncertainty of ability to compete effectively in a new market; the uncertainty of profitability and cash flow of Citadel; intellectual property rights and dependence on key personnel; economic conditions; the continued impact of terrorist attacks, global instability and potential U.S. military involvement; the competitive environment and other trends in the company's industry; changes in laws and regulations; changes in the company's business plans, including shifts to new pricing models that may cause delays in licenses; interest rates and the availability of financing; liability, legal and other claims asserted against the company; labor disputes; the company's ability to attract and retain qualified personnel; and inflation. For a discussion of these and other risk factors, see the company's Annual Report on Form 10-KSB for the year ended December 31, 2003, and its Quarterly Report on Form 10-QSB for the quarter ended September 30, 2004. All of the forward-looking statements are qualified in their entirety by reference to the risk factors discussed therein. These risk factors may not be exhaustive. The company operates in a continually changing business environment, and new risk factors emerge from time to time. Management cannot predict such new risk factors, nor can it assess the impact, if any, of such new risk factors on the company's business or events described in any forward-looking statements. The company disclaims any obligation to publicly update or revise any forward-looking statements after the date of this report to conform them to actual results.

Editors Note: Citadel is a trademark and Hercules is a registered trademark of Citadel Security Software Inc.