Xcitium

The company was founded in 1998 in the United Kingdom{{cite news|url=http://www.thetelegraphandargus.co.uk/news/11449076.Global_internet_security_firm_s_Bradford_roots/|title=How US entrepreneur's global internet security firm started life in Bradford|date=3 September 2014|access-date=3 September 2014|newspaper=Telegraph & Argus}} by Melih Abdulhayoğlu. The company relocated to the United States in 2004. Its products are focused on computer and internet security. The firm operates a certificate authority that issues SSL certificates. The company also helped set standards by contributing to the IETF (Internet Engineering Task Force) DNS Certification Authority Authorization (CAA) Resource Record.{{cite web|url=https://tools.ietf.org/html/rfc6844|title=DNS Certification Authority Authorization – Comodo |year=2013 |doi=10.17487/RFC6844 |access-date=14 January 2013|last1=Hallam-Baker |first1=P. |last2=Stradling |first2=R. |s2cid=46132708 |doi-access=free}}

In October 2017, Francisco Partners acquired Comodo Certification Authority (Comodo CA) from Comodo Security Solutions, Inc. Francisco Partners rebranded Comodo CA in November 2018 to Sectigo.{{Cite web|url=https://www.securityweek.com/francisco-partners-acquires-comodo-ca|title=Comodo Sells Certificate Business to Private Equity Firm |website=SecurityWeek.com|date=31 October 2017 |access-date=2019-10-29}}{{Cite web|url=https://www.enterprisetimes.co.uk/2018/11/02/comodo-ca-becomes-sectigo-and-expands-to-cover-iot/|title=Comodo CA becomes Sectigo and expands to cover IoT |last=Murphy|first=Ian|date=2018-11-02|website=Enterprise Times|language=en-GB|access-date=2019-11-21}}

On June 28, 2018, the new organization announced that it was expanding from TLS/SSL certificates into IoT security with the announcement of its IoT device security platform.{{Cite web|url=https://betanews.com/2018/06/28/comodo-iot-security/|title=Comodo CA launches IoT security platform|date=2018-06-28|website=BetaNews|language=en|access-date=2019-10-29}} The company announced its new headquarters in Roseland, New Jersey on July 3, 2018{{Cite web|url=https://njbiz.com/comodo-ca-global-hq-coming-to-roseland/|title=Comodo CA global HQ coming to Roseland|last=Perry|first=Jessica|date=2018-07-03|website=NJBIZ|language=en-US|access-date=2019-10-29}} and its acquisition of CodeGuard, a website maintenance and disaster recovery company, on August 16, 2018.{{Cite web|url=https://www.crn.com/news/security/comodo-ca-buys-website-disaster-recovery-startup-codeguard|title=Comodo CA Buys Website Disaster Recovery Startup CodeGuard|last=Novinson|first=Michael|date=2018-08-16|website=CRN|access-date=2019-10-29}}

On June 29, 2020, Comodo announced its partnership with CyberSecOp.{{cn||date=May 2024}} The firm has partnered with Comodo in the past, and seeks to provide a range of cybersecurity products and consulting services.

• Comodo Security Solutions, Inc: Based in Clifton, New Jersey, US, develops security software for commercial and consumer use.{{cite web|url=https://www.icsalabs.com/vendor/comodo-security-solutions-inc|title=Comodo Security Solutions, Inc.|work=Icsalabs.com|access-date=30 March 2015}}
• DNS.com: Based in Louisville, Kentucky, US, the company provides managed DNS services.{{cite web|url=http://www.domainersmagazine.com/Jul-Aug-Issue-22/DNS.com-The-Next-Geo-Targeting-Solution.html|title=Domainers Magazine – DNS.com : The Next Geo-Targeting Solution – Jul–Aug (Issue 22)|author=Joe Callan|work=Domainersmagazine.com|access-date=30 March 2015|url-status=dead|archive-url=https://web.archive.org/web/20150412125418/http://www.domainersmagazine.com/Jul-Aug-Issue-22/DNS.com-The-Next-Geo-Targeting-Solution.html|archive-date=12 April 2015}}

Comodo is a member of the following industry organizations:

• Certificate Authority Security Council (CASC): In February 2013, Comodo became a founding member of this industry advocacy organization dedicated to addressing industry issues and educating the public on internet security.{{cite web|url=http://www.networkworld.com/news/2013/021413-council-digital-certificate-266728.html |title=Multivendor power council formed to address digital certificate issues |author=Ellen Messmer |date=14 February 2013 |work=Network World |url-status=dead |archive-url=https://web.archive.org/web/20130728114851/http://www.networkworld.com/news/2013/021413-council-digital-certificate-266728.html |archive-date=28 July 2013 }}{{cite web|url=http://www.darkreading.com/authentication/167901072/security/news/240148546/major-certificate-authorities-unite-in-the-name-of-ssl-security.html|title=Authentication Security News, Analysis, Discussion, & Community|work=Darkreading.com|access-date=30 March 2015|url-status=dead|archive-url=https://archive.today/20130410174711/http://www.darkreading.com/authentication/167901072/security/news/240148546/major-certificate-authorities-unite-in-the-name-of-ssl-security.html|archive-date=10 April 2013}}
• Common Computing Security Standards Forum (CCSF): In 2009 Comodo was a founding member of the CCSF, an industry organization that promotes industry standards that protect end users. Comodo CEO Melih Abdulhayoğlu is considered the founder of the CCSF.{{cite web|url=http://www.securitypark.co.uk/|title=SecurityPark|access-date=30 March 2015|archive-url=https://web.archive.org/web/20150402184331/http://www.securitypark.co.uk/|archive-date=2 April 2015|url-status=dead}}
• CA/Browser Forum: In 2005, Comodo was a founding member of a new consortium of certificate authorities and web browser vendors dedicated to promoting industry standards and baseline requirements for internet security.{{cite web | url=https://www.cabforum.org/ | title=CA/Browser Forum|publisher=Cabforum.org | access-date=23 April 2013}}{{cite web | url=http://docbox.etsi.org/workshop/2012/201201_CA_DAY/5_Wilson_CAB-Forum.pdf | title=CA/Browser Forum History | last = Wilson | first = Wilson | publisher = DigiCert | access-date=23 April 2013}} Melih Abdulhayoğlu invited top browser providers and certification authorities to a round table to discuss the creation of a central authority responsible for delivering digital certificate issuance best practice guidelines.{{cite web|url=https://cabforum.org/pipermail/public/attachments/20150511/65e05471/attachment.pdf|title=Industry Round Table May 17th 2005 – New York|access-date=17 May 2005}}

• Comodo Dragon (web browser)
• Comodo Ice Dragon (web browser)
• Comodo Internet Security
• Comodo System Utilities
• Comodo Mobile Security
• Comodo Endpoint Protection
• Xcitium EDR{{Cite web|url=https://www.xcitium.com/edr-security/edr-endpoint-detection-and-response/ |title=Xcitium EDR}}

In response to Symantec's comment asserting paid antivirus is superior to free antivirus, the CEO of Comodo Group, Melih Abdulhayoğlu had challenged Symantec on 18 September 2010 to see whether paid or free products can better defend the consumer against malware.{{cite web

|url = http://www.melih.com/2010/09/18/challenge-to-symantec-from-comodo-ceo/

|title = Challenge to Symantec from Comodo CEO

|first = Melih

|last = Abdulhayoğlu

|author-link = Melih Abdulhayoğlu

|date = 18 September 2010

|publisher = Comodo Group

|access-date = 22 September 2010

|archive-url = https://web.archive.org/web/20110125203635/http://www.melih.com/2010/09/18/challenge-to-symantec-from-comodo-ceo/

|archive-date = 25 January 2011

|url-status = dead

}} GCN'S John Breeden understood Comodo's stance on free Antivirus software and challenging Symantec: "This is actually a pretty smart move based on previous reviews of AV performance we've done in the GCN Lab. Our most recent AV review this year showed no functional difference between free and paid programs in terms of stopping viruses, and it's been that way for many years. In fact you have to go all the way back to 2006 to find an AV roundup where viruses were missed by some companies."{{Cite web|url=https://gcn.com/articles/2010/09/27/antivirus-paid-vs-free.aspx |title=Is free virus protection inferior? | author=John Breeden II |work=gcn.com |date=27 September 2010 |access-date=23 December 2016}}

Symantec responded saying that if Comodo is interested they should have their product included in tests by independent reviewers.{{cite news

|url = https://www.pcmag.com/article2/0,2817,2369524,00.asp

|title = Comodo Challenges Symantec to Antivirus Showdown

|first = Neil J.

|last = Rubenking

|work = PC Magazine

|publisher = Ziff Davis, Inc.

|date = 22 September 2010

|access-date = 22 September 2010

}}

Comodo volunteered to a Symantec vs. Comodo independent review.{{Cite web |url=https://www.melih.com/2010/09/18/challenge-to-symantec-from-comodo-ceo/ |title=Challenge to Symantec from Comodo CEO! |access-date=23 December 2016 |archive-date=15 August 2016 |archive-url=https://web.archive.org/web/20160815054509/http://www.melih.com/2010/09/18/challenge-to-symantec-from-comodo-ceo/ |url-status=dead }} Though this showdown did not take place, Comodo has since been included in multiple independent reviews with AV-Test,{{Cite web|url=http://www.networkworld.com/article/2989137/linux/av-test-lab-tests-16-linux-antivirus-products-against-windows-and-linux-malware.html|archive-url=https://web.archive.org/web/20151007235204/http://www.networkworld.com/article/2989137/linux/av-test-lab-tests-16-linux-antivirus-products-against-windows-and-linux-malware.html|url-status=dead|archive-date=7 October 2015| title=AV-test Lab tests 16 Linux antivirus products against Windows and Linux malware | author=Ms. Smith|work=www.networkworld.com |access-date=23 December 2016}} PC World,{{cite web |url=http://www.pcworld.com/article/170640/comodo_internet_security.html |title=Comodo Internet Security Free Antivirus Software |author=Erik Larkin |work=www.pcworld.com |date=24 August 2009 |access-date=23 December 2016}} Best Antivirus Reviews,{{cite web |url=https://bestantivirus.reviews/review/comodo |title=Comodo 2016 Review: Malware Protection & Online Security |author=Daniele P. |work=www.bestantivirus.com |access-date=23 December 2016 |archive-url=https://web.archive.org/web/20161228233750/https://bestantivirus.reviews/review/comodo |archive-date=28 December 2016 |url-status=dead }} AV-Comparatives,{{Cite web|url=https://www.av-comparatives.org/av-vendors/ |title=Independent Tests of Anti-Virus Software |work=www.av-comparatives.org |access-date=23 December 2016}} and PC Mag.{{Cite web |url=https://www.pcmag.com/article2/0.2817.2388652.00.asp |title=The Best Free Antivirus Protection of 2016 |author=Neil P. Rubenking |work=www.pcmag.com |access-date=23 December 2016 }}{{Dead link|date=December 2023 |bot=InternetArchiveBot |fix-attempted=yes }}

On 23 March 2011, Comodo posted a report that 8 days earlier, on 15 March 2011, a user account with an affiliate registration authority had been compromised and was used to create a new user account that issued nine certificate signing requests.{{cite web|url=https://www.comodo.com/Comodo-Fraud-Incident-2011-03-23.html |title=Report of incident on 15-MAR-2011: Update 31-MAR-2011 |publisher=Comodo group |access-date=24 March 2011 }} Nine certificates for seven domains were issued. The attack was traced to IP address 212.95.136.18, which originates in Tehran, Iran. Moxie Marlinspike analyzed the IP address on his website the next day and found it to have English localization and Windows operating system.{{Cite web|title=DEF CON 19 - Moxie Marlinspike - SSL And The Future Of Authenticity - YouTube|url=https://www.youtube.com/watch?v=UawS3_iuHoA |archive-url=https://ghostarchive.org/varchive/youtube/20211213/UawS3_iuHoA |archive-date=2021-12-13 |url-status=live|access-date=2021-01-13|website=www.youtube.com| date=2 November 2013 }}{{cbignore}} Though the firm initially reported that the breach was the result of a "state-driven attack", it subsequently stated that the origin of the attack may be the "result of an attacker attempting to lay a false trail.".{{cite web|title=The Recent RA Compromise|url=http://blog.comodo.com/it-security/data-security/the-recent-ca-compromise/|first=Phillip|last=Hallam-Baker|date=23 March 2011|access-date=24 March 2011|publisher=Comodo Blog}}{{Dead link|date=December 2023 |bot=InternetArchiveBot |fix-attempted=yes }}

Comodo revoked all of the bogus certificates shortly after the breach was discovered. Comodo also stated that it was actively looking into ways to improve the security of its affiliates.{{Cite news|url=https://www.bbc.com/news/technology-12847072 |title=Iran accused in 'dire' net security attack |work=BBC News |date=24 March 2011 |access-date=23 December 2016}}

In an update on 31 March 2011, Comodo stated that it detected and thwarted an intrusion into a reseller user account on 26 March 2011. The new controls implemented by Comodo following the incident on 15 March 2011, removed any risk of the fraudulent issue of certificates. Comodo believed the attack was from the same perpetrator as the incident on 15 March 2011.{{Cite web|url=https://www.comodo.com/Comodo-Fraud-Incident-2011-03-23.html |title=Update 31-MAR-2011 |access-date=23 December 2016}}

In regards to this second incident, Comodo stated, "Our CA infrastructure was not compromised. Our keys in our HSMs were not compromised. No certificates have been fraudulently issued. The attempt to fraudulently access the certificate ordering platform to issue a certificate failed."{{Cite web|url=https://www.comodo.com/Comodo-Fraud-Incident-2011-03-23.html |title=Update 31-Mar-2011 |access-date=23 December 2016}}

On 26 March 2011, a person under the username "ComodoHacker" verified that they were the attacker by posting the private keys online{{Cite web|url=https://blog.erratasec.com/2011/03/verifying-comodo-hackers-key.html|title=Verifying the Comodo Hacker's key|first=Robert|last=Graham}} and posted a series of messages detailing how poor Comodo's security is and bragging about their abilities.{{cite magazine|last=Bright|first=Peter|date=28 March 2011|title=Independent Iranian Hacker Claims Responsibility for Comodo Hack|magazine=Wired|format=WIRED|url=https://www.wired.com/threatlevel/2011/03/comodo_hack/|access-date=29 March 2011}}{{cite web|title=ComodoHacker's Pastebin|url=http://pastebin.com/u/ComodoHacker|date=5 March 2011|publisher=Pastebin.com|access-date=30 March 2015}}

As of 2016, all of the certificates remain revoked. Microsoft issued a security advisory and update to address the issue at the time of the event.{{cite web|title=Microsoft Security Advisory (2524375)|website=Microsoft |url=http://www.microsoft.com/technet/security/advisory/2524375.mspx|date=23 March 2011|access-date=24 March 2011|format=Microsoft}}{{cite web|title=Microsoft Security Advisory: Fraudulent Digital Certificates could allow spoofing|url=http://support.microsoft.com/kb/2524375|date=23 March 2011|access-date=24 March 2011|work=Microsoft}}

For Comodo's lacking response on the issue computer security researcher Moxie Marlinspike called the whole event extremely embarrassing for Comodo and rethinking SSL security. It was also implied that the attacker followed an online video tutorial and searched for basic opsec

Such attacks are not unique to Comodo – the specifics will vary from CA to CA, RA to RA, but there are so many of these entities, all of them trusted by default, that further holes are deemed to be inevitable.{{Cite magazine |date=2011-03-28 |title=Independent Iranian Hacker Claims Responsibility for Comodo Hack |url=https://www.wired.com/2011/03/comodo_hack/ |archive-url=https://web.archive.org/web/20160324172823/https://www.wired.com/2011/03/comodo_hack/ |archive-date=2016-03-24 |access-date=23 December 2016 |magazine=Wired}}

In February 2015, Comodo was associated with a man-in-the-middle enabling tool known as PrivDog, which claims to protect users against malicious advertising.{{Cite magazine|last=Constantin|first=Lucian|url=http://www.pcworld.com/article/2887632/secure-advertising-tool-privdog-compromises-https-security.html |title=Worse than Superfish? Comodo-affiliated PrivDog compromises web security too|accessdate=24 July 2024|magazine=PC World}}

PrivDog issued a statement on 23 February 2015, saying, "A minor intermittent defect has been detected in a third party library used by the PrivDog standalone application which potentially affects a very small number of users. This potential issue is only present in PrivDog versions, 3.0.96.0 and 3.0.97.0. The potential issue is not present in the PrivDog plug-in that is distributed with Comodo Browsers, and Comodo has not distributed this version to its users. there are potentially a maximum of 6,294 users in the USA and 57,568 users globally that this could potentially impact. The third party library used by PrivDog is not the same third party library used by Superfish....The potential issue has already been corrected. There will be an update tomorrow which will automatically update all 57,568 users of these specific PrivDog versions."{{Cite web |url=http://privdog.com/advisory.htm |title=PrivDog Security Advisory (Threat level: LOW) |access-date=23 December 2016 }}{{Dead link|date=November 2019 |bot=InternetArchiveBot |fix-attempted=yes }}

In 2009 Microsoft MVP Michael Burgess accused Comodo of issuing digital certificates to known malware distributors.{{Cite web | url=https://www.cnet.com/forums/discussions/comodo-continue-to-to-issue-certificates-to-known-malware-343022/ | title=Comodo continue to to[sic] issue certificates to known Malware - May 2009 - Forums}} Comodo responded when notified and revoked the certificates in question, which were used to sign the known malware.{{Cite web|url=http://blogs.msmvps.com/donna/2009/05/18/microsoft-mvp-mike-burgess-respond-to-comodo-s-ceo-on-comodo-certificates-issued-to-malware-distributors/|title=Microsoft MVP Mike Burgess Responds To Comodo's CEO On Comodo Certificates Issued To Malware Distributors |access-date=23 December 2016}}

In January 2016, Tavis Ormandy reported that Comodo's Chromodo browser exhibited a number of vulnerabilities, including disabling of the same-origin policy.https://code.google.com/p/google-security-research/issues/detail?id=704 |title=Comodo "Chromodo" Browser disables same origin policy, Effectively turning off web security

The vulnerability wasn't in the browser itself. Rather, the issue was with an add-on. As soon as Comodo became aware of the issue in early February 2016, the company released a statement and a fix: "As an industry, software in general is always being updated, patched, fixed, addressed, improved – it goes hand in hand with any development cycle...What is critical in software development is how companies address an issue if a certain vulnerability is found – ensuring it never puts the customer at risk." Those using Chromodo immediately received an update.{{Cite web|url=http://www.pcworld.com/article/3029690/security/comodo-to-fix-major-flaw-in-knock-off-chrome-browser.html |title=Comodo will fix major flaw in knock-off Chrome browser |date=4 February 2016 |access-date=23 December 2016}} The Chromodo browser was subsequently discontinued by Comodo.

Ormandy noted that Comodo received a "Excellence in Information Security Testing" award from Verizon despite the vulnerability in its browser, despite having its VNC delivered with a default of weak authentication, despite not enabling address space layout randomization (ASLR), and despite using access control lists (ACLs) throughout its product. Ormandy has the opinion that Verizon's certification methodology is at fault here.[https://www.tripwire.com/state-of-security/security-data-protection/cyber-security/why-antivirus-standards-of-certification-need-to-change/ Why Antivirus Standards of Certification Need to Change], tripwire, 23 March 2016.

In October 2015, Comodo applied for "Let's Encrypt", "Comodo Let's Encrypt", and "Let's Encrypt with Comodo" trademarks.{{Cite web|url=http://tsdr.uspto.gov/#caseNumber=86790719&caseType=SERIAL_NO&searchType=statusSearch|title=Trademark Status & Document Retrieval|website=tsdr.uspto.gov|access-date=23 June 2016}}{{Cite web|url=http://tsdr.uspto.gov/#caseNumber=86790789&caseType=SERIAL_NO&searchType=statusSearch|title=Trademark Status & Document Retrieval|website=tsdr.uspto.gov|access-date=23 June 2016}}{{Cite web|url=http://tsdr.uspto.gov/#caseNumber=86790812&caseType=SERIAL_NO&searchType=statusSearch|title=Trademark Status & Document Retrieval|website=tsdr.uspto.gov|access-date=23 June 2016}} These trademark applications were filed almost a year after the Internet Security Research Group, parent organization of Let's Encrypt, started using the name Let's Encrypt publicly in November 2014,{{Cite web|url=http://www.crn.com/news/cloud/300074840/lets-encrypt-a-free-and-automated-certificate-authority-comes-out-of-stealth-mode.htm|title=Let's Encrypt, A Free And Automated Certificate Authority, Comes Out Of Stealth Mode|last=Tsidulko |first=Joseph |website=CRN |date=19 November 2014|access-date=23 June 2016}} and despite the fact Comodo's "intent to use" trademark filings acknowledge that it has never used "Let's Encrypt" as a brand.

On 24 June 2016, Comodo publicly posted in its forum that it had filed for "express abandonment" of their trademark applications.{{Cite web|url=https://forums.comodo.com/general-discussion-off-topic-anything-and-everything/trademark-registration-t115968.0.html;msg837505#msg837505|title=Topic: Trademark registration|access-date=24 June 2016|archive-date=8 November 2020|archive-url=https://web.archive.org/web/20201108141457/https://forums.comodo.com/general-discussion-off-topic-anything-and-everything/trademark-registration-t115968.0.html;msg837505#msg837505|url-status=dead}}

Comodo's Chief Technical Officer Robin Alden said, "Comodo has filed for express abandonment of the trademark applications at this time instead of waiting and allowing them to lapse. Following collaboration between Let's Encrypt and Comodo, the trademark issue is now resolved and behind us, and we'd like to thank the Let's Encrypt team for helping to bring it to a resolution."{{Cite web|url=https://www.grahamcluley.com/comodo-stands-trademark-tussle-lets-encrypt/ |title=Comodo Stands Down From Trademark Tussle with Let's Encrypt |date=27 June 2016 |access-date=23 December 2016}}

On 25 July 2016, Matthew Bryant showed that Comodo's website is vulnerable to dangling markup injection attacks and can send emails to system administrators from Comodo's servers to approve a wildcard certificate issue request which can be used to issue arbitrary wildcard certificates via Comodo's 30-Day PositiveSSL product.{{Cite web|url=https://thehackerblog.com/keeping-positive-obtaining-arbitrary-wildcard-ssl-certificates-from-comodo-via-dangling-markup-injection/index.html |title=Keeping Positive – Obtaining Arbitrary Wildcard SSL Certificates from Comodo via Dangling Markup Injection |website=thehackerblog.com |date=25 July 2016 |access-date=29 July 2016}}

Bryant reached out in June 2016, and on 25 July 2016, Comodo's Chief Technical Officer Robin Alden confirmed a fix was put in place, within the responsible disclosure date per industry standards.{{Cite web|url=https://thehackerblog.com/keeping-positive-obtaining-arbitrary-wildcard-ssl-certificates-from-comodo-via-dangling-markup-injection/index.html |title=Keeping Positive – Obtaining Arbitrary Wildcard SSL Certificates from Comodo via Dangling Markup Injection |date=25 July 2016 |access-date=23 December 2016}}

• Comparison of antivirus software
• Comparison of computer viruses
• Internet security
• Comparison of firewalls

{{Portalbar|Companies|United States}}

{{reflist}}

• {{Official website}}

{{Authority control}}

Category:Software companies established in 1998

Category:Certificate authorities

Category:Computer security software companies

Category:International information technology consulting firms

Category:Software companies based in New Jersey

Category:Software companies of the United Kingdom

Category:1998 establishments in the United Kingdom

Category:Companies based in Essex County, New Jersey

Category:Bloomfield, New Jersey

Category:Software companies of the United States