Comodo Group

From Wikipedia, the free encyclopedia
Jump to: navigation, search
Comodo Group, Inc.
Founded United Kingdom (1998 (1998))[1]
Headquarters 1255 Broad Street, Clifton, New Jersey, United States
Key people
Melih Abdulhayoğlu (President and CEO)
Number of employees
Slogan Creating Trust Online

Comodo Group, Inc. is a privately held group of companies providing computer software and SSL digital certificates, based in Clifton, New Jersey[not verified in body] in the United States. It has offices in the United Kingdom, Ukraine, Romania, China, India, Turkey and Clifton, NJ.[not verified in body]

As of 24 February 2015, Comodo was the largest issuer of SSL certificates with a 34% market share on 5.4% of all web domains.[2]


The company was founded in 1998 in the United Kingdom,[1] by Melih Abdulhayoğlu, who remains its CEO. The company relocated to the United States in 2004. Its product line is focused on computer and internet security.[3] The firm operates a Certificate Authority that issues SSL certificates, offers a computer security suite that includes antivirus and firewall protection and offers other web and network protection services.[citation needed]


  • Comodo CA Lmtd: Based in Manchester UK, is a digital certificate authority that issues SSL and other digital certificates. According to, Comodo is the second most used provider of SSL digital certificates.[4][5]
  • Comodo Security Solutions, Inc: Based in Clifton, NJ, develops and markets security software for commercial and consumer use. This includes web site vulnerability and penetration scannng, corporate and consumer pc security systems and other networks security products. Comodo AntiVirus Labs support all versions of their security systems.[6]
  • Based in Louisville Ky, provides managed DNS services.>[7]


  • Comodo SSL - Comodo was founded as a Certificate Authority selling Comodo SSL and digital certificates. Its primary source of revenue comes from related products to business and enterprises. Related E-Commerce products include PCI Compliance Scanning and Web Site Vulnerability Scanning.[citation needed]
  • Comodo Internet Security (CIS) is a suite of security products for the desktop, provided free.[8] but additional features are available for a fee.[9] Support requires a subscription. It includes a personal firewall, Host-based intrusion detection system and antivirus program.[10]
  • Comodo Mobile Security - A free Android application that protects mobile devices against viruses, worms and scripts. In addition, it also features SMS & Call Blocking, a software & process manager, data and apps backup and data traffic Monitor.
  • Comodo Dragon - A Chromium-based browser with enhanced privacy and security features. CNET reviewed the product concluding "For those who are extra cautious about their online security, or for those who are worried about Google's data-mining, this fast browser is a great choice."[clarification needed][opinion][11]
  • Comodo IceDragon - A Firefox-based browser with enhanced privacy and security features
  • Comodo Endpoint Security Manager (CESM) is a centralized device management system that includes the ability to distribute PC security software. The software used includes a version of the same firewall, antivirus systems and sandbox containment technology that comprise Comodo Internet Security.[12][13]
  • Comodo Securebox was released in July 2014 and was jointly developed with Western Union with the intention of solving the problem of an application needing to conduct sensitive activities such as financial transactions from an already compromised system. Securebox containment technology protects the application and its activities even if the computer is infected with malware[14][15]
  • Comodo System Utilities - PC Magazine reviewed the product concluding "it is an effective system-enhancing utility that is as potent, if not more so in certain cases, as paid apps".[16]
  • MyDLP - In May 2014, the Comodo Group had acquired MyDLP, an open source data loss prevention system. Comodo has begun marketing the Enterprise version through its Comodo Security Solutions subsidiary.[citation needed]
  • SurGate Labs - In 2014 Comodo acquired SurGate Labs, a Turkish Software company that specializes in secure email an messaging systems. SurGate only recently began marketing its products outside if Turkey and Eastern Europe.[17][18][19]
  • Comodo Korugan - In 2014 Comodo introduced the Korugan line of Unified Threat Management Appliances that provide a bundle of network security solutions such as firewall, gateway antivirus and end security management.[20][21]

Industry affiliations[edit]

Comodo is a member of the following industry organizations:

  • Certificate Authority Security Council (CASC): In February 2013, Comodo became a founding member of this industry advocacy organization dedicated to addressing industry issues and educating the public on internet security.[22][23]
  • Common Computing Security Standards Forum(CCSF): In 2009 Comodo was a founding member of the CCSF, an industry organization that promotes industry standards that protect end users. Comodo CEO Melih Abdulhayoğlu is considered the founder of the CCSF.[24]
  • CA/Browser Forum: In 2005, Comodo was a founding member of a new consortium of Certificate Authorities and web browser vendors dedicated to promoting industry standards and baseline requirements for internet security.[25][26]



In response to Symantec's comment over the effectiveness of free Antivirus software, on September 18, 2010, the CEO of Comodo Group challenged Symantec to see which products can defend the consumer better against malware.[27] Symantec responded saying that if Comodo is interested they should have their product included in tests by independent reviewers.[28]

Norton AntiVirus[edit]

On 29 September 2010, Neil J. Rubenking, the lead analyst for security of PC Magazine, published an article on Comodo Antivirus 5.0 that[29][30] concluded that Comodo Antivirus 5.0 blocked a higher percentage of malware than Norton AntiVirus, but was less effective than the Norton solution when it came to malware removal. Rubenking's review also noted that the Comodo malware blocking gave a number of false positives which he felt tarnished Comodo's results.[citation needed]

Certificate hacking[edit]

On March 15, 2011, Comodo reported that a user account with an affiliate registration authority had been compromised which was used to create a new user account that issued nine certificate signing requests.[31] Nine certificates for seven domains were issued.[31] The attack was traced to IP address, which originates in Tehran, Iran.[31] Though the firm initially reported that the breach was the result of a "state-driven attack", it subsequently stated that the origin of the attack may be the "result of an attacker attempting to lay a false trail."[31][32]

Such issues have been widely reported, and has led to criticism of how certificates are issued and revoked.[33][34][35][36] As of 2015, all of the certificates have been revoked.[31] Microsoft has issued a security advisory and update to address the issue.[37][38]

On March 26, 2011, a person under the username "ComodoHacker" made several posts to claiming to be an Iranian responsible for the attacks.[39][40]

See also[edit]


  1. ^ a b "How US entrepreneur's global internet security firm started life in Bradford". Telegraph & Argus. 3 Sep 2014. Retrieved 3 Sep 2014. 
  2. ^ "Comodo SSL leads Symantac". Retrieved 2015-02-12. 
  3. ^ Richmond, Riva (6 April 2011). "An Attack Sheds Light on Internet Security Holes". The New York Times. Retrieved 17 March 2013. 
  4. ^ "W3Techs - extensive and reliable web technology surveys". 
  5. ^ Admin TOA. "- Comodo Named Fastest Growing SSL Certificate Authority". Retrieved 2015-03-30. 
  6. ^ "Comodo Security Solutions, Inc.". Retrieved 2015-03-30. 
  7. ^ Joe Callan. "Domainers Magazine - : The Next Geo-Targeting Solution - Jul-Aug (Issue 22)". Retrieved 2015-03-30. 
  8. ^ "Best Free Windows 7 / Vista 64-bit Software". Gizmo's Freeware. 2 December 2010. Retrieved 2010-12-25. 
  9. ^ "Comodo Products - PC Security, Site Security, Prevention Software". 
  10. ^ "Proactive Security Challenge: Results and comments". Difinex Ltd. Retrieved 2010-12-25. 
  11. ^ "Comodo Dragon". CNET. CBS Interactive. 
  12. ^ Ashton Mills (26 March 2015). "Endpoint Security Products: Part 1". Retrieved 2015-03-30. 
  13. ^ "GFI EndPointSecurity - Voted Readers' Choice Award Winner - Endpoint Security". Retrieved 2015-03-30. 
  14. ^ "Comodo SecureBox always assumes the worst to strengthen endpoint security". BetaNews. Retrieved 2015-03-30. 
  15. ^ [1][dead link]
  16. ^ "Comodo System Utilities Review". Retrieved 2015-03-30. 
  17. ^ "SurGATE OutlookDAV". 14 June 2014. Retrieved 2015-03-30. 
  18. ^ "SurGATE Labs yurtdışına açılıyor!". 4 February 2014. Retrieved 2015-03-30. 
  19. ^ "Surgate Labs". Retrieved 2015-03-30. 
  20. ^ "Korugan Unified Threat Management". 
  21. ^ "Echte IT-Tiefenverteidigung: Korugan von COMODO schließt interne und externe Sicherheitslücken". Retrieved 2015-03-30. 
  22. ^ Ellen Messmer (14 February 2013). "Multivendor power council formed to address digital certificate issues". Network World. 
  23. ^ "Authentication Security News, Analysis, Discussion, & Community". Retrieved 2015-03-30. 
  24. ^ "SecurityPark". SecurityPark. Retrieved 2015-03-30. 
  25. ^ "CA/Browser Forum". Retrieved 2013-04-23. 
  26. ^ Wilson, Wilson. "CA/Browser Forum History". DigiCert. Retrieved 2013-04-23. 
  27. ^ Abdulhayoğlu, Melih (18 September 2010). "Challenge to Symantec from Comodo CEO!". Comodo Group. Retrieved 2010-09-22. 
  28. ^ Rubenking, Neil J. (22 September 2010). "Comodo Challenges Symantec to Antivirus Showdown". PC Magazine (Ziff Davis, Inc.). Retrieved 2010-09-22. 
  29. ^ Rubenking, Neil J. (29 September 2010). "Comodo Antivirus 5.0". PC Magazine (Ziff Davis, Inc.). Retrieved 2010-09-29. 
  30. ^ Neil J. Rubenking (29 September 2010). "Comodo Antivirus 5.0 malware blocking chart". PC Magazine (Ziff Davis, Inc.). Retrieved 2010-09-29. 
  31. ^ a b c d e "Report of incident on 15-MAR-2011". Comodo group. Retrieved 2011-03-24. 
  32. ^ Hallam-Baker, Phillip (March 23, 2011). "The Recent RA Compromise". Comodo Blog. Retrieved 2011-03-24. 
  33. ^ Eckersley, Peter (March 23, 2011). "Iranian hackers obtain fraudulent HTTPS certificates: How close to a Web security meltdown did we get?". EFF. Retrieved 2011-03-24. 
  34. ^ "Iran accused in 'dire' net security attack" (BBC). BBC News. March 24, 2011. Retrieved 2011-03-24. 
  35. ^ "Detecting Certificate Authority compromises and web browser collusion". TOR. March 22, 2011. Retrieved 2011-03-24. 
  36. ^ Elinor Mills and Declan McCullagh (March 23, 2011). "Google, Yahoo, Skype targeted in attack linked to Iran". CNET. Retrieved 2011-03-24. 
  37. ^ "Microsoft Security Advisory (2524375)" (Microsoft). March 23, 2011. Retrieved 2011-03-24. 
  38. ^ "Microsoft Security Advisory: Fraudulent Digital Certificates could allow spoofing". Microsoft. March 23, 2011. Retrieved 2011-03-24. 
  39. ^ Bright, Peter (March 28, 2011). "Independent Iranian Hacker Claims Responsibility for Comodo Hack" (WIRED). Wired. Retrieved 2011-03-29. 
  40. ^ "ComodoHacker's Pastebin". Retrieved 2015-03-30. 


External links[edit]