Citadel Security Software Selected By Federal Computer Week as One of the 10 Hot Companies to Watch for 2003.

Business Editors/High-Tech Writers

DALLAS--(BUSINESS WIRE)--Sept. 16, 2003

Citadel's Hercules Solution Recognized for Bringing Timely Automated

Resolution of IT Security Vulnerabilities to Government Agencies

Citadel Security Software, Inc. (OTCBB:CDSS), a leader in automated vulnerability remediation (AVR) and policy compliance solutions, today announced that Federal Computer Week has selected Citadel as one of the "10 Hot Companies to Watch." To compile the list Federal Computer Week surveyed market watchers to uncover 10 hot companies that are offering innovative products and deserve close attention, with a focus on firms targeting homeland security initiatives.

"This year, Federal Computer Week's list of the top 10 companies to watch demonstrates the persistence of security as a concern in the federal information technology community...Citadel is pushing its software to higher levels of security. The company has registered Hercules to undergo Common Criteria evaluation and certification, an important security standard, especially in the Defense Department." Excerpts taken from the Federal Computer Week article, "Ten Hot Companies to Watch." To view the article in full please visit www.fcw.com/supplements/fedlist/2003/fed-10com-09-15-03.asp

"Government agencies are under extreme demands to reduce risk to their networks as seen by the recent mandates outlining that agencies must demonstrate effective vulnerability remediation," said Steve Solomon, CEO of Citadel Security Software. "By recognizing Citadel as one of 10 hot companies to watch, Federal Computer Week has validated Citadel's ongoing efforts to help government agencies secure their networks and reduce risk through our Hercules solution."

Citadel has dedicated its resources to ensure that Hercules is in compliance with the highest government standards worldwide. Hercules is currently undergoing Common Criteria EAL 3 certification, making it the only vulnerability remediation tool to pursue CC EAL 3 certification for federal agency purchase. By achieving Common Criteria EAL 3 certification, Citadel's Hercules will further meet the needs of government lettered agencies and security conscious commercial enterprises, which are only permitted to purchase security products that receive the maximum assurance from Common Criteria guidelines.

Citadel's Hercules is the first vulnerability remediation solution to automate the resolution of all five classes of vulnerabilities, including software defects, misconfigurations, unsecured user accounts, unnecessary services and backdoors. With the largest library of remediation signatures across Windows, Sun Solaris and Linux Red Hat platforms and interoperability with industry leading network scanners and vulnerability assessment tools, Hercules allows users to import and aggregate data from multiple sources, review, approve and customize resolutions, and systematically deploy vulnerability fixes.

About Citadel

Citadel Security Software, Inc., a leader in automated vulnerability remediation and policy enforcement solutions, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. Winshield(R) SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as HIPAA and Gramm-Leach-Bliley legislation. For more information on Citadel, visit www.citadel.com, or contact the company at 214-520-9292.

Except for the historical information contained herein, this press release contains forward looking statements that are subject to risks and uncertainties, including the current economic and geopolitical environment, information technology spending trends, lack of Citadel operating history, uncertainty of product acceptance, uncertainty of ability to compete effectively in a new market and the uncertainty of profitability and cash flow of Citadel. These risks and uncertainties may cause actual outcomes and results to differ materially from expectations in this presentation. These and other risks are detailed in Citadel's current report on Form 10-QSB for the quarter ended June 30, 2003 and on Form 10-KSB for the year ended December 31, 2002 on file with the SEC.

Editors Note: Citadel is a trademark and Hercules is a registered trademark of Citadel Security Software.