Citadel Security Software Delivers Hercules 2.2 with Certification for Microsoft Windows Server 2003.

Business Editors/High-Tech Writers

DALLAS--(BUSINESS WIRE)--Jan. 15, 2004

First Automated Vulnerability Remediation Solution to Achieve

Windows 2003 Certification; Hercules 2.2 Offers

Enhanced Capabilities and V-Flash Security Center

Citadel Security Software, Inc. (OTCBB:CDSS), a leader in vulnerability management solutions, today announced Hercules(R) 2.2, the premier automated vulnerability remediation solution. Hercules 2.2 has achieved certification for installation on Windows Server 2000 and 2003 Standard Editions to support remediation of those environments. This certification assures customers that Hercules provides the highest levels of reliability both running on Windows 2003 and automating the mitigation of any vulnerabilities identified on the Windows family of products. In addition, Hercules 2.2 offers enhanced navigation, reporting and searching capabilities as well as a new V-Flash Security Center web portal to provide Hercules customers with timely security information on current threats.

"Meeting the rigorous and demanding test criteria for Microsoft certification underscores our commitment to total software quality," said Carl Banzhof, CTO of Citadel Security Software. "Achieving this certification provides our customers with a high level of confidence that Hercules is designed for security and reliability for Windows Server 2000 and 2003."

The rigorous independent certification testing was conducted by VeriTest, the testing division of Lionbridge Technologies (Nasdaq:LIOX), and the only authorized worldwide lab to test enterprise applications for Microsoft's "Certified for Windows" program. Using a set of stringent standards established by Microsoft and VeriTest, this program establishes an unprecedented technical standard to identify applications that are secure and manageable, and that run reliably on the Microsoft Windows family of operating systems.

Microsoft's certification ensures Hercules has seamless integration with Microsoft's industry-leading server platforms. Citadel's Windows certification reports are available at www.veritest.com/go.asp?citadel1.

"Customers depending on Hercules for the critical task of automatically remediating vulnerabilities can be confident that this product has been arduously tested against Microsoft's defined standards for applications running within Windows Server 2000 and 2003 environments," said Katrina Teague, vice president of Marketing and Solutions, VeriTest. "Achieving certification means that Hercules measures up to the highest standards and that customers can rely on the product's reliability and supportability."

Citadel's Hercules is the first vulnerability remediation solution to automate the resolution of all five classes of vulnerabilities including unsecured accounts, misconfigurations, backdoors, unnecessary services and software defects. With the largest library of remediation capabilities across Windows, Sun Solaris and Linux Red Hat platforms and interoperability with industry leading network scanners and vulnerability assessment tools, Hercules allows users to import and aggregate data from multiple sources, review, approve and customize resolutions and systematically deploy vulnerability fixes.

New features of Hercules 2.2 include:

-- Windows 2003 Certification - The Hercules administration

server, console, and client have been certified for

installation on the Windows 2000 and 2003 platforms to support

remediation of vulnerabilities identified in those

environments. Hercules continues to support Windows NT, XP,

Solaris and RedHat Linux environments.

-- Improved Navigation - A new wizard guides users with a

graphical workflow overview and leads them step-by-step

through specific tasks to complete each Hercules function.

-- V-Flash Security Center - Through an embedded web portal

within the Hercules administrator console, the Citadel

research team delivers customers timely security information

including the top vulnerabilities to remediate and useful tips

for utilizing Hercules for faster mitigation of the most

immediate threats.

-- Enhanced Searching - Users can now easily search for

vulnerabilities and remediations by device and industry

standard IDs, such as CVE code, Bugtraq or vendor

identifications, for faster profiling and remediation of

exploits not yet supported by vulnerability assessment tools.

-- Improved Tracking and Reporting - The Hercules administrative

console tracks and updates the device status mitigation

throughout the remediation process. A new "Heartbeat"

capability provides current status of each client managed by

Hercules.

-- Additional RedHat Support - Hercules 2.2 now also supports

remediation on RedHat 8 & 9.

Availability

Hercules 2.2 is available now.

About Citadel

Citadel Security Software Inc., a leader in vulnerability management solutions through automated vulnerability remediation and policy enforcement, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. Winshield(R) SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as HIPAA and Gramm-Leach-Bliley legislation. For more information on Citadel, visit www.citadel.com, or contact the company at 214-520-9292.

Safe Harbor/Forward-looking Statements:

This press release contains forward looking statements that are subject to risks and uncertainties, including the current economic and geopolitical environment, the current information technology spending trend, the uncertainty of funding of government information technology security projects, a lack of Citadel operating history, uncertainty of product acceptance, uncertainty of ability to compete effectively in a new market and the uncertainty of profitability and cash flow of Citadel. These risks and uncertainties may cause actual outcomes and results to differ materially from expectations in this presentation. These and other risks are detailed in Citadel's quarterly report on Form 10-QSB filed for the quarter ended September 30, 2003 and Citadel's annual report on Form 10-KSB filed for the year ended December 31, 2002.

Editors Note: Citadel is a trademark and Hercules is a registered trademark of Citadel Security Software.