Comodo Group

Comodo Group. Founded in 1998 by entrepreneur Melih Abdulhayoğlu, the company established itself as a significant player in the cybersecurity and digital trust sectors. Headquartered in Clifton, New Jersey, its operations have grown to encompass a wide range of security software and certificate authority services. The organization is particularly noted for its SSL/TLS certificates and its freemium model for consumer security products.

History

The company was launched by Melih Abdulhayoğlu, who previously worked in the telecom industry in Turkey. Its initial focus was on developing Public Key Infrastructure (PKI) solutions and establishing itself as a certificate authority (CA). A major early milestone was achieving WebTrust for CAs accreditation, which allowed its root certificates to be trusted by major web browsers like Internet Explorer and Mozilla Firefox. Throughout the 2000s, it expanded its portfolio by acquiring several technology firms and launching its flagship Comodo Antivirus. The company also played a role in industry initiatives, such as the CA/Browser Forum, which sets standards for the SSL certificate ecosystem.

Products and services

Its core offerings are divided into certificate authority services and cybersecurity software. As a global certificate authority, it issues a wide array of digital certificates, including Extended Validation SSL, Organization Validation SSL, and Domain Validation SSL certificates. The cybersecurity suite for consumers and businesses includes Comodo Internet Security, which bundles antivirus, a personal firewall, and containment technology. Other notable products are the Comodo Dragon web browser, based on the Chromium project, and secure cloud storage solutions. For enterprises, it provides advanced endpoint protection platforms and managed security services.

Corporate structure and acquisitions

The organization operates through several subsidiaries and acquired entities under its corporate umbrella. Key acquisitions have included the certificate authority InstantSSL and the desktop virtualization firm Comodo Security Solutions, Inc.. In 2017, a significant restructuring led to the creation of a new holding company, Comodo CA Limited, to oversee its certificate authority business, while the cybersecurity products division continued under the original entity. The founder, Melih Abdulhayoğlu, has remained the chief executive officer throughout these changes. Its global footprint includes research and development offices in Ukraine, India, and China.

Security incidents and controversies

The organization has faced several notable security challenges and public disputes. In 2011, an incident involving a subsidiary, Comodo Certificate Authority, resulted in the fraudulent issuance of nine certificates for domains including mail.google.com and login.yahoo.com, an event attributed to an attacker from Iran. In 2018, a critical vulnerability was discovered in its Comodo Internet Security software that could allow local privilege escalation. The company has also been involved in legal and public relations controversies, including a high-profile dispute with the U.S. Department of Homeland Security over the DNS-over-HTTPS protocol and criticism from some within the security community regarding its marketing practices for certain certificate products.

Recognition and industry standing

It has received various forms of industry recognition and holds influential positions in the cybersecurity market. Independent testing labs like AV-Comparatives and AV-TEST have consistently awarded its antivirus engine high ratings for malware detection and low system impact. The company's CA division is regularly audited for compliance with standards set by the CA/Browser Forum and maintains WebTrust certification. Its founder, Melih Abdulhayoğlu, received the Economist Innovation Award in the category of computing for his work on PKI. According to market analyses from firms like Gartner and IDC, it is frequently cited as a major provider in both the endpoint security and SSL certificate sectors.

Category:Computer security companies Category:Companies based in New Jersey Category:Certificate authorities