Citadel Security Software Appoints Regional Sales Vice Presidents.

Business Editors/High-Tech Writers

DALLAS--(BUSINESS WIRE)--Jan. 26, 2004

Regional Vice Presidents Extend Sales Force to Offer Citadel's

Hercules Automated Vulnerability Remediation Solution to

Enterprises Nationwide

Citadel Security Software Inc. (OTCBB:CDSS), a leader in vulnerability management including Automated Vulnerability Remediation (AVR) and policy compliance solutions, today announced the appointments of Barry Sowerwine, Paul Golitz and Terrence Mahoney as regional vice presidents of sales (RVP). At Citadel, the RVP's will oversee all aspects of Citadel's software sales operations for the East, West and Central regions. These RVP's bring 59 years of combined enterprise sales management experience to Citadel's growing worldwide sales organization and will be responsible for addressing the vulnerability management needs of large commercial enterprises throughout the United States and Canada.

The addition of the three RVP's strengthens a seasoned enterprise software sales team led by Edward Krupa, executive vice president of sales. Krupa will manage Citadel's global sales operations, ensuring that a framework is in place to effectively deliver its product and services offerings in the growing vulnerability management marketplace. The RVP's will oversee sales teams in their respective territories to promote Citadel's Hercules, the first AVR solution to automate the resolution of all five classes of vulnerabilities.

"I have chosen this team based on their stellar reputations and strong foundation in enterprise software sales with demonstrated history of consistently meeting and exceeding sales goals," said Krupa. "I am confident this sales leadership team will help maximize Citadel's revenue potential in 2004 and beyond."

Barry Sowerwine comes to Citadel from FiberTower, a wireless network infrastructure provider, where he secured multi-million dollar contracts with some of the telecom industry's largest providers. Sowerwine also managed an 18 state region with eight regional managers reporting to him while at PeopleSoft generating annual revenue in excess of $25 million. As RVP for the West region at Citadel, Sowerwine will oversee a sales team covering 17 states and 4 Canadian provinces. Sowerwine will be based in Dallas, Texas.

Heading up sales for the Central region is Paul Golitz, who joins Citadel from Cognos, Inc., a world leader in business intelligence and performance planning software. During his time at Cognos, Golitz leveraged a sales organization comprised of 42 sales and pre-sales professionals contributing over $43 million of top line revenue. Prior to Cognos, Golitz held various executive sales positions at Tivoli Systems where he managed over $100 million in new business. His experience managing a 20 state area at Cognos, combined with 20 years of sales management, provides a substantial foundation to meet the sales goals for Citadel's Central region consisting of 14 states and one Canadian province. Golitz will be based in Chicago, Illinois.

Terrence Mahoney joins the Citadel team from Preventsys, a security policy compliance company. Mahoney brings over 20 years of technology sales experience with a strong track record in entrepreneurial environments, consistently exceeding sales forecasts and growing sales teams. At Preventsys, Mahoney was responsible for launching the Eastern sales territory. Prior to Preventsys, Mahoney held executive sales positions with companies like Divine Inc. where he was responsible for generating over $35 million in product and services revenue in less than twelve months and Platinum Software where he grew the East region from $3 million to $250 million in annual sales during a four year period. At Citadel, Mahoney will manage the East region comprised of 19 states and one Canadian province. Mahoney will be based in Short Hills, New Jersey.

About Citadel

Citadel Security Software Inc., a leader in vulnerability management solutions through automated vulnerability remediation and policy enforcement, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. Winshield(R) SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as FISMA, HIPAA and Gramm-Leach-Bliley legislation. For more information on Citadel, visit www.citadel.com, or contact the company at 214-520-9292.

This press release contains forward looking statements that are subject to risks and uncertainties, including the current economic and geopolitical environment, the current information technology spending trend, the uncertainty of funding of government information technology security projects, a lack of Citadel operating history, uncertainty of product acceptance, uncertainty of ability to compete effectively in a new market and the uncertainty of profitability and cash flow of Citadel. These risks and uncertainties may cause actual outcomes and results to differ materially from expectations in this presentation. These and other risks are detailed in Citadel's quarterly report on Form 10-QSB filed for the quarter ended September 30, 2003 and Citadel's annual report on Form 10-KSB filed for the year ended December 31, 2002.