Comodo

Comodo Comodo Group is a private cybersecurity company founded in 1998 by Melih Abdulhayoglu that provides digital certificate products, endpoint protection, and internet security services. The firm has operated in markets alongside entities such as Microsoft, Google, Mozilla, Apple Inc., and Amazon (company), and its offerings have been integrated into infrastructures used by organizations like Verizon, VeriSign, Symantec Corporation, and Cisco Systems. Over time the company has engaged with standards bodies including the Internet Engineering Task Force, the CA/Browser Forum, and the World Wide Web Consortium while competing with firms such as DigiCert, Let's Encrypt, and Entrust.

History

The company was established in 1998 by entrepreneur Melih Abdulhayoglu and initially focused on security products similar to those from McAfee, NortonLifeLock, and Kaspersky Lab. During the 2000s it expanded into certificate authority services, interacting with stakeholders such as Thawte, GeoTrust, RapidSSL, and Comodo-affiliated resellers while responding to events like the adoption of SSL/TLS by major platforms including Facebook, eBay, and PayPal. In the 2010s the firm navigated industry shifts influenced by decisions from Google Chrome, Mozilla Firefox, and Apple Safari about certificate trust and browser security, and by initiatives such as the launch of Let's Encrypt and policy changes by the CA/Browser Forum.

Products and Services

The company's portfolio has included SSL/TLS certificates, code signing certificates, email security, antivirus software, endpoint protection, firewalls, DNS services, and vulnerability assessment tools. Its certificate services competed with offerings from DigiCert, Entrust, Symantec Corporation, and GlobalSign' while its endpoint and antivirus products sat alongside solutions from Sophos, Trend Micro, Bitdefender, and ESET NOD32 Antivirus. The firm provided managed PKI services that interfaced with platforms such as Microsoft Azure, Amazon Web Services, Google Cloud Platform, and enterprise directories like Active Directory, and delivered browser-related integrations resonant with Internet Explorer, Mozilla Firefox, and Google Chrome.

Security Technologies and Standards

The company implemented cryptographic technologies based on standards promulgated by bodies like the Internet Engineering Task Force, the National Institute of Standards and Technology, and the CA/Browser Forum. Its certificate issuance and revocation mechanisms related to protocols such as X.509, OCSP, CRL, and TLS versions governed by RFCs referenced in IETF documents. The firm participated in industry discussions involving WebTrust audits, FIPS guidelines, and cross-industry compatibility with platforms from Microsoft, Apple Inc., Google, and Mozilla. It also developed endpoint protection modules implementing signature-based detection, sandboxing approaches similar to those discussed in AV-TEST and AV-Comparatives evaluations, and network security features comparable to offerings from Palo Alto Networks and Fortinet.

Controversies and Criticism

The company has faced controversies related to certificate issuance, trust relationships with browser vendors such as Mozilla and Google, and publicized security incidents that drew attention from media outlets like Wired, The New York Times, The Guardian, and The Register. Disputes involved interactions with industry actors including Symantec Corporation during the period of scrutiny over certificate practices, and with audits overseen by organizations such as WebTrust and national authorities. Critics compared aspects of its business model to competitors including DigiCert and to free automated services like Let's Encrypt, and regulatory or policy responses referenced standards from the CA/Browser Forum and guidance from NIST.

Corporate Structure and Ownership

The company has been privately held with key leadership by founder Melih Abdulhayoglu and executive teams that engaged with corporate partners including Accenture, IBM, HP Enterprise, and consulting firms such as Deloitte and PwC for audit, compliance, and business strategy. Its corporate strategy aligned with alliances and channel partnerships involving resellers, system integrators, and distributors commonly seen in the cybersecurity supply chain alongside firms like Ingram Micro and Tech Data. The company's governance and audit practices referenced compliance frameworks and assessments by entities including WebTrust and standards bodies such as ISO.

Category:Computer security companies