Citadel Security Software Endorses ``The National Strategy to Secure Cyberspace'' - Best Practices.

Business Editors & High Tech Writers

DALLAS--(BUSINESS WIRE)--Sept. 19, 2002

Citadel Security Software Inc. (OTCBB:CDSS), a leader in vulnerability remediation and network security solutions supports and embraces the draft report on The National Strategy to Secure Cyberspace and specifically the best practices outlined for creating a regular process to assess, remediate and proactively manage network vulnerabilities.

In addition, Citadel endorses the recommendations in the report to expand the use of automated enterprise wide security assessment and security policy enforcement tools, and actively deploy threat management tools to preempt attacks.

"Citadel is pleased with the release of the report and the detailed security recommendations that are outlined for home, enterprise and government sectors," said Steve Solomon, CEO and President of Citadel Security Software. "The report recognizes that in today's environment there is no way an organization can use manual remediation to keep up with the increasing number vulnerabilities. Automated solutions must be implemented for immediate protection and as a continuous strategy to defend against future security breaches."

The report states, that "while the nation must deal with specific threats, waiting to fix any important vulnerability in the critical infrastructure until learning of an impending attack...is an unacceptably risky strategy for potential victims." Citadel's vulnerability remediation solution, Hercules, combined with assessment tools from our scanning partners, expedites and increases the accuracy of vulnerability remediation and allows the organization to keep up with the accelerating number of vulnerabilities identified by CERT/CC(R) and other organizations.

About Citadel Security Software

Citadel Security Software Inc. (OTCBB:CDSS) develops, markets and licenses computer security and privacy software for one of the fastest growing software industry segments today -- security inside the firewall. Citadel's products enable companies to enforce security policies from a single point of control across Windows and NetWare platforms. These products remediate vulnerabilities and secure confidential information, applications and systems from the five classes of security vulnerabilities: insecure accounts, unnecessary services, mis-configurations, back doors and software bugs. Hercules' open architecture design allows the import and aggregation of assessment data from many sources. Citadel is interoperable with industry leading vulnerability assessment tools allowing customers to address the real world issues of vulnerability assessment and remediation. The products also address the mandates of HIPAA and Gramm-Leach-Bliley legislation for the health care and financial industries. Further information about Citadel Security Software and its products can be accessed at its website, www.citadel.com.

Safe Harbor/Forward-Looking Statements:

Except for the historical information contained herein, this news release contains forward looking statements that are subject to risks and uncertainties, including lack of Citadel operating history, uncertainty of product acceptance and the uncertainty of profitability and cash flow of Citadel. These and other risks are detailed from time to time in CT Holdings' and Citadel's SEC reports, including CT's report on Form 1O-KSB for the year ended December 31, 2001 and most recent Form 10-QSBs, as well as Citadel's Registration Statement on Form 10-SB and amendments and most recent Form 10-QSBs.