Citadel Security Software Appoints Bob Dix Vice President of Government Affairs and Corporate Development.

DALLAS -- Citadel Security Software Inc. (Nasdaq:CDSS)

--Management Executive to Leverage Public and Private Sector Experience to Provide Liaison with Federal, State & Local Government and Expand Market Share for Leading Vulnerability Remediation Technology Company

Citadel Security Software Inc. (Nasdaq:CDSS), a leader in vulnerability management and policy enforcement through its automated vulnerability remediation (AVR) solution, Hercules(R), today announced the addition of Bob Dix to the Citadel management team as Vice President of Government Affairs and Corporate Development. Dix served during the 108th Congress as the Staff Director for the House Government Reform Subcommittee on Technology, Information Policy, Intergovernmental Relations and Census. He has been widely recognized as one of the leading Hill staffers in the area of technology transformation, e-government and cyber security. Dix also has more than 25 years of corporate senior management experience and will lead Citadel's efforts to introduce its suite of technology solutions to public and private sector entities throughout the United States.

"I am excited to join a recognized industry leader in automated vulnerability remediation solutions and the extraordinary team at Citadel," said Dix. "Citadel is a company that brings vision and innovation to the security marketplace with a unique suite of products that has demonstrated measurable results in improving the information security profile for its customers. This role will permit me to join an outstanding team of professionals in a collective effort to protect this nation's critical infrastructure against the real and growing threat of cyber attacks through the implementation of Citadel's proven solutions."

Dix joins Citadel from the Unites States House of Representatives where he served as Staff Director for the House Subcommittee on Technology, Information Technology, Intergovernmental Relations and the Census, working with Chairman Adam Putnam and Committee on Government Reform Chairman Tom Davis.

"The government's loss is Citadel's gain," House Government Reform Committee Chairman Tom Davis (R-VA) said. "Bob's been a friend and colleague of mine for many years and he's that rare individual who cares more about doing good than getting credit. The reason he's been such a success in both the private and public sectors is that he brings passion, commitment, energy and enthusiasm to everything he does. Citadel and its customers will benefit greatly from Bob's expertise in the vulnerability management arena."

Previously, Dix served as President and Chief Operating Officer for FedComp, Inc. a software firm in the financial services sector headquartered in Northern Virginia. Additionally, Dix served as President of Sportscombine, Inc., a Northern Virginia software and content management company. Dix's public sector experience includes 12 years as a local government elected official and a previous stint as a senior professional staff member for the House Oversight Committee for the District of Columbia.

"Bob is a strong addition to our management team; his leadership on the House Subcommittee on Technology and his work with industry leaders in the private and public sectors to help drive public policy and market-based initiatives to protect our nation's critical infrastructure demonstrates his talent and his ability to assist our customers in understanding how Citadel's technology will tangibly improve protection against today's myriad of cyber vulnerabilities," said Steve Solomon, CEO of Citadel Security Software. "Bob's work with FISMA and Clinger-Cohen is evidence of his ability to elevate awareness producing action and is a strong compliment to Citadel's mission to improve the protection of our nation's computer networks on behalf of all citizens, businesses, academic and public sector institutions."

About Citadel

Citadel Security Software Inc. a leader in enterprise vulnerability management solutions powered by AVR technology, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending, Common Criteria EAL 3 certified Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as FISMA, HIPAA and Gramm-Leach-Bliley legislation. For more information on Citadel, visit www.citadel.com, or contact the company at [phone].

Safe Harbor/Forward-looking Statements:

This press release may contain forward-looking statements that are intended to be subject to the safe harbor protection provided by Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934. These statements relate to future events or future financial performance and involve known and unknown risks and uncertainties that may cause actual results or performance to be materially different from those indicated by any forward-looking statements. In some cases, you can identify forward-looking statements by terminology such as "forecast," "may," "will," "could," "should," "anticipate," "expect," "plan," "believe," "potential" or other similar words indicating future events or contingencies. Some of the things that could cause actual results to differ from expectations are: the current economic and geopolitical environment; current information technology spending trends; the uncertainty of funding of government information technology security projects; a lack of Citadel operating history; uncertainty of product acceptance; uncertainty of ability to compete effectively in a new market; the uncertainty of profitability and cash flow of Citadel; intellectual property rights and dependence on key personnel; economic conditions; the continued impact of terrorist attacks, global instability and potential U.S. military involvement; the competitive environment and other trends in the company's industry; changes in laws and regulations; changes in the company's business plans; interest rates and the availability of financing; liability and other claims asserted against the company; labor disputes; the company's ability to attract and retain qualified personnel; and inflation. For a discussion of these and other risk factors, see the company's Annual Report on Form 10-KSB for the year ended December 31, 2003 and its Quarterly Report on Form 10-QSB for the quarter ended September 30, 2004. All of the forward-looking statements are qualified in their entirety by reference to the risk factors discussed therein. These risk factors may not be exhaustive. The company operates in a continually changing business environment, and new risk factors emerge from time to time. Management cannot predict such new risk factors, nor can it assess the impact, if any, of such new risk factors on the company's business or events described in any forward-looking statements. The company disclaims any obligation to publicly update or revise any forward-looking statements after the date of this report to conform them to actual results.

Editors Note: Citadel is a trademark and Hercules is a registered trademark of Citadel Security Software Inc.