Citadel Security Software Names Craig DeAngelis Vice President of Professional Services.

Business Editors/High-Tech Writers

DALLAS--(BUSINESS WIRE)--May 5, 2004

Industry Veteran to Expand Professional Services Organization of

Fast-Growing Vulnerability Management Leader

Citadel Security Software Inc. (NASDAQ:CDSS), a leader in full lifecycle vulnerability management and policy enforcement solutions through its automated vulnerability remediation (AVR) technology, today announced the addition of Craig DeAngelis to the Citadel team as Vice President of Professional Services. DeAngelis brings to the company more than 14 years of experience in professional services management, sales, and solutions development. At Citadel, DeAngelis will manage all aspects of the professional services operation and expand on Citadel's service delivery capability of industry leading best practices.

"I am excited to join the industry leader in vulnerability management solutions and to have the opportunity to support our clients and partners with a best of breed portfolio of service and training offerings," said DeAngelis. "Citadel's innovative spirit and technical expertise are unmatched, and I look forward to delivering our unique security solutions in the marketplace."

"Both the commercial and government markets have recognized the need to implement an end-to-end vulnerability management process and align that process with supporting technology," said Steve Solomon, CEO, Citadel Security Software. "Craig's expertise in delivering both process and technology consulting services will help us expand our offerings to meet our growing customer demand."

DeAngelis joins Citadel from Fujitsu Consulting, the global management and technology consulting arm of Fujitsu Ltd., where he was Senior Vice President for the U.S. Division's Commercial Business Unit. Before joining Fujitsu, DeAngelis served as a Regional Director for Cardinal Health, a Fortune 50 healthcare services provider, and as General Manager and Area Vice President of Netigy, a leading security and infrastructure consulting company. While with Netigy, DeAngelis worked to build this startup services firm to 800 associates in North America and Europe over a two year period, and in establishing Netigy's south central and southeast business, produced $11M in revenues in the first 18 months of operations. Prior to Netigy, DeAngelis served at Platinum technology as a Regional Vice President and Practice Director in its global consulting and product support organization.

About Citadel

Citadel Security Software Inc., a leader in full lifecycle vulnerability management solutions powered by AVR technology, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending, Common Criteria EAL 3 certified Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as FISMA, HIPAA and Gramm-Leach-Bliley legislation. For more information on Citadel, visit www.citadel.com, or contact the company at [phone].

Safe Harbor/Forward-looking Statements:

This press release contains forward looking statements that are subject to risks and uncertainties, including the current economic and geopolitical environment, the current information technology spending trend, the uncertainty of funding of government information technology security projects, a lack of Citadel operating history, uncertainty of product acceptance, uncertainty of ability to compete effectively in a new market and the uncertainty of profitability and cash flow of Citadel, competition, intellectual property rights and dependence on key personnel. These risks and uncertainties may cause actual outcomes and results to differ materially from expectations in this press release. These and other risks are detailed in Citadel's annual report on Form 10-KSB filed for the year ended December 31, 2003.

Editors Note: Citadel is a trademark and Hercules is a registered trademark of Citadel Security Software.