Citadel Security Software Names Edward Krupa Executive Vice President of Sales.

Business Editors/High-Tech Writers

DALLAS--(BUSINESS WIRE)--Nov. 17, 2003

Seasoned Sales Executive Leverages Extensive Knowledge of

Software Industry to Deliver Automated Vulnerability

Remediation Technology to Expanding Customer Base

Citadel Security Software, Inc. (OTCBB:CDSS), a leader in automated vulnerability remediation (AVR) and policy compliance solutions, today announced the addition of Edward Krupa to the Citadel team as Executive Vice President of Sales. Mr. Krupa brings to the company more than 18 years of experience in software sales, marketing and channel development. At Citadel, Mr. Krupa will manage all aspects of the software sales operation, ensuring that a framework is in place to effectively expand Citadel Security Software's offerings of products and services in the marketplace.

Mr. Krupa joins Citadel from BEA Systems, a leading application infrastructure software company, where he was Senior Director of Sales. Prior to BEA Systems, Mr. Krupa served as Executive Vice President of Sales for Parago, a technology-based promotional management provider, and as Senior Director of Global Enterprise Sales at Tivoli Systems, a leading systems management software company. While with Tivoli Systems, Mr. Krupa worked to grow sales in his division by more than $300 million during a three year period.

"The vulnerability management space is red hot right now, and I am excited to be joining an innovative company that is in the forefront of helping customers comprehensively secure their systems," said Edward Krupa, executive vice president, Sales at Citadel Security Software. "There continues to be a rapidly accelerating demand for a solution to automate remediation of the vulnerabilities being discovered by IT administrators, and Citadel is the first and only security company to introduce a product to the marketplace that satisfies this demand."

"We chose Edward to lead our multimillion dollar sales team through our continued growth based on his proven track record as a leader in marketing, sales and program development," said Steve Solomon, CEO of Citadel Security Software. "He brings to our organization extensive experience gained while in the employ of some of the most respected names in software, which will ensure that Citadel continues to lead the market in vulnerability remediation."

About Citadel

Citadel Security Software Inc., a leader in automated vulnerability remediation and policy enforcement solutions, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. Winshield(R) SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as HIPAA and Gramm-Leach-Bliley legislation. For more information on Citadel, visit www.citadel.com, or contact the company at 214-520-9292.

This press release contains forward looking statements that are subject to risks and uncertainties, including the current economic and geopolitical environment, the current information technology spending trend, the uncertainty of funding of government information technology security projects, a lack of Citadel operating history, uncertainty of product acceptance, uncertainty of ability to compete effectively in a new market and the uncertainty of profitability and cash flow of Citadel. These risks and uncertainties may cause actual outcomes and results to differ materially from expectations in this presentation. These and other risks are detailed in Citadel's quarterly report on Form 10-QSB filed for the quarter ended September 30, 2003 and Citadel's annual report on Form 10-KSB filed for the year ended December 31, 2002.

Editors Note: Citadel is a trademark and Hercules is a registered trademark of Citadel Security Software.