Citadel Security Software and Internet Security Systems Close the Loop on Vulnerabilities.

Business Editors/High-Tech Writers

DALLAS--(BUSINESS WIRE)--Sept. 4, 2003

Citadel's Hercules to Automate the Resolution of

Vulnerabilities for ISS Customers

Citadel Security Software, Inc. (OTCBB:CDSS), a leader in automated vulnerability remediation (AVR) and policy compliance solutions, and Internet Security Systems, Inc. (ISS) (Nasdaq:ISSX) today announced an alliance to deliver combined scanning and remediation solutions to their customers. These solutions will enable organizations to dramatically reduce the time needed to resolve vulnerabilities, reduce the cost of remediation, perform more frequent assessments and comply with corporate and government security requirements.

By combining Internet Security Systems' Virtual Patch(TM) process and Internet Scanner(R) vulnerability detection tool with Citadel's Hercules(R) automated remediation solution, customers will have dynamic blocking and automated remediation of vulnerabilities. This approach provides customers with the advantage of exploit detection and protection while vulnerabilities are prioritized for automated remediation.

"Most organizations require patches to be tested and rolled out within certain windows. ISS' Virtual Patch process isolates and blocks exploits before they can enter a customer's network," said Greg Adams, vice president of product management at ISS. "Citadel's Hercules augments our solution to provide administrators time to follow the appropriate remediation steps and automatically remediate vulnerabilities. By working with Citadel, we will continue to offer our customers the most complete security solutions on the market."

"While billions of dollars are being spent each year on vulnerability management, recent threats such as the Blaster worm have proven once again that the current process of manual remediation and patching is failing to timely secure our organizations," said Steve Solomon, CEO of Citadel. "By bringing the two market leaders' products together, this alliance delivers the most comprehensive vulnerability assessment and remediation solution available."

Citadel's Hercules is the first vulnerability remediation solution to automate the resolution of all five classes of vulnerabilities, including software defects, misconfigurations, unsecured user accounts, unnecessary services and backdoors. With the largest library of remediation signatures across Windows, Sun Solaris and Linux Red Hat platforms and interoperability with industry leading network scanners and vulnerability assessment tools, Hercules allows users to import and aggregate data from multiple sources, review, approve and customize resolutions, and systematically deploy vulnerability fixes.

About Internet Security Systems

Internet Security Systems, Inc. (ISS) (Nasdaq:ISSX) is a world leader in products and services that protect critical information assets from an ever-changing spectrum of threats and misuse. Products from Internet Security Systems dynamically detect, prevent and respond to sophisticated threats to networks, servers and desktops. Services include 24/7 system monitoring, emergency response and access to the X-Force, Internet Security Systems' renowned research and development team. Internet Security Systems is the trusted security provider for more than 11,000 corporate customers, including all of the Fortune 50, the top 10 largest U.S. securities firms, 10 of the world's largest telecommunications companies and major agencies and departments within U.S. local, state and federal governments. Headquartered in Atlanta, Internet Security Systems has additional operations throughout the Americas, Asia, Australia, Europe and the Middle East. For more information, visit the Internet Security Systems Web site at www.iss.net or call 800-776-2362.

About Citadel

Recently cited by the Dallas Business Journal as the 7th fastest growing public company in DFW, Citadel Security Software, Inc., a leader in automated vulnerability remediation and policy enforcement solutions, helps enterprises effectively neutralize security vulnerabilities. Citadel's patent-pending Hercules(R) technology provides users with full control over the automated remediation process, enabling efficient aggregation, prioritization and resolution of vulnerabilities detected by industry-standard vulnerability assessment tools. Winshield(R) SecurePC(TM) and NetOFF(TM) products enable companies to enforce security policies from a single point of control. Citadel's solutions enable organizations to ensure the confidentiality of information, reduce the time and costs associated with the inefficient manual remediation process, and facilitate compliance with organizational security policies and government mandates such as HIPAA and Gramm-Leach-Bliley legislation. For more information on the Citadel, visit www.citadel.com, or contact the company at 214-520-9292.

Except for the historical information contained herein, this press release contains forward looking statements that are subject to risks and uncertainties, including the current economic and geopolitical environment, information technology spending trends, lack of Citadel operating history, uncertainty of product acceptance, uncertainty of ability to compete effectively in a new market and the uncertainty of profitability and cash flow of Citadel. These risks and uncertainties may cause actual outcomes and results to differ materially from expectations in this presentation. These and other risks are detailed in Citadel's current report on Form 10-QSB for the quarter ended March 31, 2003 and on Form 10-KSB for the year ended December 31, 2002 on file with the SEC.

Editors Note: Citadel is a trademark and Hercules is a registered trademark of Citadel Security Software. Internet Security Systems and Virtual Patch are trademarks, and Internet Scanner a registered trademark of Internet Security Systems, Inc. All other companies and products mentioned are trademarks and property of their respective owners.