Citadel Security Software Announces Hercules 2.0 for Enterprise Automated Vulnerability Remediation.

Business Editors/High-Tech Writers

DALLAS--(BUSINESS WIRE)--March 31, 2003

Hercules 2.0 Offers Flexible, Automatic Remediation of All Classes

of Network Vulnerabilities Across Windows, Unix and Linux Platforms

Citadel Security Software, Inc. (OTCBB:CDSS), a leader in automated vulnerability remediation (AVR) and policy compliance solutions, today announced Hercules(R) 2.0, the first and only automated vulnerability remediation tool that provides users with the control, flexibility and scalability needed to quickly and effectively resolve all classes of vulnerabilities within an enterprise network. With the largest library of remediation signatures across Windows, Sun Solaris, and Linux platforms, Hercules 2.0 combines flexible automation with remediation best practices to ensure up-to-the-minute protection. Hercules' scalable architecture allows enterprise users to maximize current security investments and IT resources.

Security administrators cannot keep up with the volume of known vulnerabilities or configuration errors, which account for more than 95% of all intrusions (Carnegie Mellon University, CERT(R)/CC, "Incident and Vulnerability Trends," March 4, 2002.) Under the complete control of a professional security administrator, Citadel's Hercules 2.0 automatically remediates vulnerabilities from the five classes of security vulnerabilities, including unsecured accounts, unnecessary services, mis-configurations, back doors and software defects. Interoperable with industry-standard network scanners to import and aggregate vulnerability assessment data from multiple sources, Hercules simplifies the research, review and prioritization process, allowing administrators to customize remediation and automatically fix scanner-identified vulnerabilities and rapidly emerging threats such as zero-day exploits within individual environments.

"With the ever-growing list of vulnerabilities, security administrators simply do not have the time or resources to manage the remediation process manually and the end result for the organization is network downtime, reduced worker productivity and in some cases loss of critical information," said Pete Lindstrom, research director of Spire Security. "Citadel's automated vulnerability remediation tool Hercules makes a big leap forward for solving this deficit of time and bandwidth. With Hercules, security administrators can automate the vulnerability remediation process across multiple platforms and on thousands of devices, saving time and money while allowing administrators to focus on more strategic issues."

Hercules 2.0 Features

Citadel's patent-pending automated vulnerability remediation technology ensures full user control by allowing administrators to determine which vulnerabilities are resolved and when. With advanced features focused on user control and flexibility, along with enterprise scalability, Hercules 2.0 enables consistent, comprehensive remediation of all network devices.

User Control

-- Customized Remediations -- Hercules 2.0 provides a list of

sequential actions, tailored to individual environments, that

Hercules will take to remediate specific vulnerabilities as

approved by the administrator.

-- Scheduling Features -- administrators can control when

vulnerabilities are resolved by scheduling time, date and

notification of re-boot options. "Remediation on Demand"

enables resolution for zero-day exploits.

-- Advanced Rollback -- allows for automatic rollback of

configuration changes, patches and system settings.

-- Comprehensive Patch Installation -- includes compliance checks

and patch validation across IE, SQL Server, Apache and all

Office applications.

Scalability

-- Diverse OS Support -- Hercules 2.0 supports automated

vulnerability remediation across Microsoft Windows (NT SP4,

2000, XP), Unix (Solaris 2.6, 7, 8, 9) and Linux (Red Hat --

6.0, 6.1, 6.2, 7.0, 7.1, 7.2, 7.3) platforms.

-- Multi-tiered Architecture -- administrators can control

multiple Hercules servers from a single console.

Flexibility

-- Interoperability -- imports and aggregates data from leading

vulnerability scanners, including: Harris Corporation's STAT

Scanner, ISS Internet and Systems Scanners, Microsoft's

HFNetChk, Nessus Scanner, Qualys QualysGuard and Retina

Digital Security Scanner.

-- Remediation Policy -- applies consistent enforcement levels

for vulnerabilities, including disabling those not approved

for the specified network and defining remediation overrides.

-- Device Grouping -- allows users to create logical device

groupings, such as by function, department or geography, for

flexible remediation.

"Citadel continues to pioneer the multi-billion dollar automated vulnerability remediation market today with our new release of Hercules," said Steve Solomon, Citadel Security Software CEO. "Knowledge of vulnerabilities from scanner data is critical to effective network security, but without the proper remediation actions, corporations face significant liability risk as well as not being compliant with current legislative directives. Hercules 2.0 gives IT administrators a trusted way to round out security best practices by resolving vulnerability threats and reducing the lifecycle of exploits faster and more frequently than ever before."

Availability

Hercules 2.0 will be available in May 2003.

About Citadel

Citadel Security Software, Inc., a leader in automated vulnerability remediation and policy enforcement solutions, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. Winshield(R) SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as HIPAA and Gramm-Leach-Bliley legislation. For more information on Citadel, visit www.citadel.com, or contact the company at [phone].

Safe Harbor/Forward-looking Statements:

Except for the historical information contained herein, this news release contains forward looking statements that are subject to risks and uncertainties, including the current economic and geopolitical environment, information technology spending trends, lack of Citadel operating history, uncertainty of product acceptance, uncertainty of ability to compete effectively in a new market and the uncertainty of profitability and cash flow of Citadel. These risks and uncertainties may cause actual outcomes and results to differ materially from expectations in this press release. These and other risks are detailed in Citadel's reports on Form 10-QSB's and Registration Statement on Form 10-SB.