Citadel Security Software Releases Version 1.5 of Hercules, The Security Industry's Only Automated Vulnerability Remediation System.

Business Editors

DALLAS--(BUSINESS WIRE)--June 4, 2002

Citadel Security Software

Hercules 1.5 Delivers Expanded Scanner Integration

and Enterprise Capabilities

Citadel Security Software Inc. (OTCBB: CDSS), announced the availability of the newest version of its flagship vulnerability remediation product, Hercules 1.5.

Hercules, which was initially released earlier this year, is the only solution available today that helps organizations implement the five best practices of vulnerability assessment and remediation:

1. Identification - Identifying the systems that could be at risk.

2. Vulnerability Assessment - Assessing the vulnerabilities on

systems that are at risk.

3. Vulnerability Review - Reviewing the vulnerabilities that

should be remediated on each system.

4. Vulnerability Remediation - Remediating the vulnerabilities to

make systems vulnerability free.

5. Vulnerability Management - A system that manages the assessment

and remediation process.

Hercules also provides comprehensive integration with industry leading vulnerability assessment tools ISS, HfNetCheck, CyberCop and now Nessus, and is the only automated solution that can provide remediation for all five common vulnerability classes which include software bugs, unnecessary services, unsecure accounts, back doors and misconfigurations.

Hercules 1.5 includes the following new features and enhancements:

- Support for importing and remediating vulnerability assessment

data from Nessus, an open source vulnerability assessment tool.

- Enhanced reporting capabilities with export to Adobe PDF and

Microsoft Word format.

- Expanded remediation signature coverage.

- Usability improvements for improved management of large

computing environments.

- New server architecture that provides enhanced scalability for

supporting Hercules clients.

"Today's security administrators face increasingly enormous amounts of threats and vulnerabilities throughout their networks with no remediation system in place to combat today's challenges," said Steven B. Solomon, Chief Executive Officer of Citadel Security Software. "This new version of Hercules will provide customers with a powerful security solution. We believe it will set the standard for which vulnerability remediation will be done in the future. We plan to announce support for additional vulnerability assessment solutions over the coming months."

For more information on Hercules and Vulnerability Assessment and Remediation best practices, go to www.citadel.com.

About Citadel Security Software

Citadel Security Software develops, markets and licenses computer security and privacy software for one of the fastest growing segments today -- security inside the firewall. These products enable companies to enforce security policies from a single point of control across all Windows and NetWare platforms. Citadel security software remediates vulnerabilities and secures confidential information, applications, and systems from unauthorized access, worms, and other security vulnerabilities. The products specifically enforce policies recently mandated by HIPAA and Gramm-Leach-Bliley legislation for the health care and financial industries. Citadel's clients include IBM Global Services, Merrill Lynch, the U.S. Navy and several large health care companies.

Safe Harbor/Forward-looking Statements:

Except for the historical information contained herein, this news release contains forward looking statements that are subject to risks and uncertainties, including lack of Citadel Security operating history and the uncertainty of profitability of Citadel Security. These and other risks are detailed from time to time in CT Holdings' and Citadel's SEC reports, including CT's report on Form 1O-KSB for the year ended December 31, 2001 and most recent Form 10-QSBs, as well as Citadel's Registration Statement on Form 10-SB and amendments and most recent Form 10-QSBs.