Citadel Security Software Announces Channel Partner Program to Deliver Automated Vulnerability Remediation to Expanding Customer Base.

Business Editors/High-Tech Writers

DALLAS--(BUSINESS WIRE)--Oct. 21, 2003

Top Resellers Drive Increased Awareness of

Hercules to Enterprise Users

Citadel Security Software, Inc. (OTCBB: CDSS), a leader in automated vulnerability remediation (AVR) and policy compliance solutions, today announced a channel partner program, that enables experienced resellers with a proven track record in the security industry to deliver Hercules automated vulnerability remediation technology to their customer base. Hercules is the first solution that enables enterprises to proactively resolve IT security vulnerabilities identified by vulnerability scanners, while mitigating risk and protecting against attacks. A few of the current resellers participating in the program include Hewlett-Packard (NYSE: HPQ), Radical Networks, Intelligent Decisions, Trinity Integrated Networks and OhioOnline.

For the first time resellers are able to offer their customers a combined security solution aimed at comprehensively addressing the overwhelming onslaught of vulnerabilities. Citadel's channel partner program provides approved resellers the opportunity to supplement their own core offerings with Hercules, and the ability to leverage Citadel's engineering, sales and marketing expertise in vulnerability remediation. Partners receive product sales and technical training on all Citadel products, as well as continued support.

"This is the most valuable solution we've seen in security in recent years. With the recent string of worm attacks, our Online Security Services (OSS) customers are looking for a way to quickly remediate their systems and protect themselves from the holes created by unmitigated vulnerabilities. Citadel has helped us address this growing need by supporting the integration of our products with proven vulnerability remediation," said Bradford Fish Brown, president, OSS, a division of OhioOnline, Inc. "We are looking forward to a long term, strategic relationship with Citadel. Vulnerability management is a growing market, and we are confident that through Citadel's partner program we will continue to expand upon our existing customer base."

"Industry demand for rapid vulnerability remediation has prompted our expansion to the channel. Our partner program allows resellers to fill an existing security need that is currently in demand from their enterprise users," said Steve Solomon, CEO of Citadel Security Software. "The ability to offer the best solutions in security strengthens each of our partner's positions as trusted advisors, and increases awareness of Citadel's offerings and the benefits of automated vulnerability remediation."

Citadel's Hercules is the first vulnerability remediation solution to automate the resolution of all five classes of vulnerabilities, including software defects, misconfigurations, unsecured user accounts, unnecessary services and backdoors. With the largest library of remediation signatures across Windows, Sun Solaris and Linux Red Hat platforms and interoperability with industry leading network scanners and vulnerability assessment tools, Hercules allows users to import and aggregate data from multiple sources, review, approve and customize resolutions, and systematically deploy vulnerability fixes.

About Citadel

Citadel Security Software Inc., a leader in automated vulnerability remediation and policy enforcement solutions, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. Winshield(R) SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as HIPAA and Gramm-Leach-Bliley legislation. For more information on Citadel, visit www.citadel.com, or contact the company at [phone].

Except for the historical information contained herein, this press release contains forward looking statements that are subject to risks and uncertainties, including the current economic and geopolitical environment, information technology spending trends, lack of Citadel operating history, uncertainty of product acceptance, uncertainty of ability to compete effectively in a new market and the uncertainty of profitability and cash flow of Citadel. These risks and uncertainties may cause actual outcomes and results to differ materially from expectations in this presentation. These and other risks are detailed in Citadel's current report on Form 10-QSB for the quarter ended June 30, 2003 and on Form 10-KSB for the year ended December 31, 2002 on file with the SEC.

Editors Note: Citadel is a trademark and Hercules is a registered trademark of Citadel Security Software.