Citadel Security Software Appoints David Helffrich Vice President of Development.

Business Editors/High-Tech Writers

DALLAS--(BUSINESS WIRE)--Feb. 17, 2004

Industry Veteran to Drive Product Development of Fast-Growing

Vulnerability Management Leader

Citadel Security Software, Inc. (OTCBB:CDSS), a leader in vulnerability management solutions through automated vulnerability remediation (AVR) and policy enforcement, today announced the addition of David Helffrich to the Citadel team as Vice President of Product Development. Helffrich brings 19 years of product development, product positioning and customer relations to the company. At Citadel, Helffrich will develop and bring to market Citadel's trusted vulnerability management products.

"I am very impressed with Citadel's management team and the overall market opportunity," said Helffrich. "I look forward to leading such a highly talented development organization as we continue to deliver advanced technologies for the vulnerability management market. By listening to the needs of customers, I can ensure that Citadel's solutions will continue to provide unique value to IT managers facing the real business challenge of keeping up with security threats."

Helffrich joins Citadel from etalk Corporation, where he was Vice President of Development, and directed all product development, maintenance, quality assurance and customer support. Prior to etalk, Helffrich served as Vice President and General Manager of Server I/O Products at Interphase Corporation, where he implemented programs to align operations with revenue. Helffrich gained his knowledge and experience in software development while working as Vice President of Development for Sterling Software, a $750MM producer of software development tools for the application, storage, Internet, and federal markets. At Sterling, Helffrich successfully deployed seven product lines while working closely with sales, marketing, and the Chief Technology Officer to develop product strategy and communicate it to key customers and staff.

"I am confident that David will successfully leverage his experience to steer Citadel's product development through our continued growth," said Steve Solomon, CEO of Citadel Security Software. "Under his leadership, Citadel will continue to deliver innovative products anticipating the vulnerability needs of enterprise customers."

About Citadel

Citadel Security Software Inc., vulnerability management solutions through automated vulnerability remediation and policy enforcement solutions, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. Winshield(R) SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as HIPAA and Gramm-Leach-Bliley legislation. For more information on Citadel, visit www.citadel.com, or contact the company at 214-520-9292.

Safe Harbor/Forward-looking Statements:

This press release contains forward looking statements that are subject to risks and uncertainties, including the current economic and geopolitical environment, the current information technology spending trend, the uncertainty of funding of government information technology security projects, a lack of Citadel operating history, uncertainty of product acceptance, uncertainty of ability to compete effectively in a new market and the uncertainty of profitability and cash flow of Citadel, competition, intellectual property rights and dependence on key personnel. These risks and uncertainties may cause actual outcomes and results to differ materially from expectations in this press release. These and other risks are detailed in Citadel's quarterly reports on Form 10-QSB filed for the quarter ended September 30, 2003 and Citadel's annual report on Form 10-KSB filed for the year ended December 31, 2002 and our Form 10-KSB to be filed for the year ended December 31, 2003.

Editors Note: Citadel is a trademark and Hercules is a registered trademark of Citadel Security Software.