Xcitium

Xcitium is a privately held cybersecurity company formerly known as Comodo Group and Comodo Security Solutions. Its business developed from the Comodo security portfolio established by Melih Abdulhayoğlu in the United Kingdom in 1998. The company initially built a broad identity around computer and internet security, combining endpoint protection, consumer security software, browser products, system utilities, mobile security, managed DNS, and digital certificate services. The company moved its base of operations to the United States in 2004 and became particularly visible through its role in online trust infrastructure. Its former certificate-authority business operated Comodo Certification Authority, issuing SSL and other digital certificates used to authenticate websites and secure communications. Comodo also participated in industry efforts intended to establish common standards for certificate authorities, browser vendors, and digital identity providers. It was a founding participant in the CA/Browser Forum in 2005, helped establish the Common Computing Security Standards Forum in 2009, and became a founding member of the Certificate Authority Security Council in 2013. The group expanded beyond traditional endpoint and certificate products through corporate transactions. In February 2011 it acquired DNS.com LLC, a provider of managed Domain Name System services. In 2017, Francisco Partners acquired the certificate-authority business from Comodo Security Solutions. That business was subsequently rebranded Sectigo in 2018, separating the certificate operation from the remaining Comodo security activities. Comodo’s certificate business also made the company a prominent participant in debates about trust in the public-key infrastructure. In March 2011, an affiliate registration-authority account was compromised and used to issue fraudulent certificate requests for several domains. The company revoked the certificates, investigated the incident, and introduced additional controls. A later attempted intrusion into a reseller account did not result in fraudulent certificate issuance or compromise of the company’s certificate-authority keys, according to Comodo’s incident updates. The events led to security advisories and continuing scrutiny of certificate issuance practices. The company’s consumer and small-business security portfolio included Comodo Internet Security, Comodo Antivirus, Comodo Firewall, Comodo Dragon and IceDragon browsers, Comodo System Utilities, and Comodo Mobile Security. Following the divestiture of the certificate authority and a broader repositioning toward zero-trust cybersecurity, the company adopted the Xcitium name in 2022. Xcitium’s current identity is therefore distinct from the former Comodo certificate business, now associated with Sectigo, while retaining continuity with the Comodo security organization and its cybersecurity heritage.

The company now known as Xcitium originated as Comodo, a cybersecurity business founded in the United Kingdom in 1998 by Melih Abdulhayoğlu. Its early activities centered on computer and internet security, with products intended to protect personal computers, networks, browsers, and mobile devices. The organization also operated a certificate authority, Comodo Certification Authority, making it both a provider of security software and a participant in the public infrastructure used to authenticate websites and encrypt online communications. Comodo relocated to the United States in 2004. During the following years it broadened its product family and developed a substantial presence in online trust services. Its software portfolio included Comodo Internet Security, Comodo Antivirus, Comodo Firewall, Comodo Dragon, Comodo IceDragon, Comodo System Utilities, and Comodo Mobile Security. The company also entered adjacent infrastructure markets, including managed DNS services. Industry standardization became an important part of Comodo’s history. In 2005, the company was a founding member of the CA/Browser Forum, an organization bringing together certificate authorities and browser vendors to develop common requirements and practices for internet certificates. Comodo was also involved in the creation of the Common Computing Security Standards Forum in 2009 and the Certificate Authority Security Council in 2013. These affiliations reflected the company’s role in discussions about certificate issuance, browser trust, and baseline security expectations. In February 2011, Comodo acquired DNS.com LLC, a managed DNS provider. The same year, the company experienced a serious incident affecting its certificate ecosystem. A user account belonging to an affiliate registration authority was compromised, and the account was used to generate certificate requests and obtain certificates for multiple domains. Comodo revoked the unauthorized certificates after discovering the breach. The company initially described the event as state-driven, while later commentary and investigation left the precise identity and motivation of the attacker less certain. A subsequent attempted intrusion into a reseller account was detected and blocked; Comodo stated that its certificate-authority infrastructure and hardware security module keys had not been compromised and that no fraudulent certificates resulted from the later attempt. The certificate business was separated from the rest of the Comodo organization in a major ownership transaction. In 2017, Francisco Partners acquired Comodo Certificate Authority from Comodo Security Solutions. The operation was renamed Sectigo in 2018, ending the Comodo name’s direct association with that certificate-authority business while leaving the broader Comodo security portfolio under its existing organization. Comodo also faced criticism in connection with its 2015 applications for trademarks containing the name Let's Encrypt, despite the name already being used publicly by the Internet Security Research Group’s certificate initiative. In June 2016, Comodo said it had filed for express abandonment of the applications and described the trademark matter as resolved after collaboration with the Let's Encrypt team. In 2022, the company rebranded as Xcitium. The new identity placed greater emphasis on zero-trust cybersecurity. Xcitium therefore represents the continuation of the former Comodo security organization, but not the certificate-authority business that became Sectigo. Its history combines consumer and enterprise security software, internet infrastructure services, participation in cybersecurity standards bodies, and a significant role in the evolution and controversy of public certificate trust.

• 2022

  Rebrand to Xcitium

  [1]Xcitiumen.wikipedia.org

  The remaining Comodo security organization adopted the Xcitium name and highlighted zero-trust cybersecurity.

• 2018

  Certificate business becomes Sectigo

  [1]Xcitiumen.wikipedia.org

  The divested certificate-authority business was rebranded as Sectigo.

• 2017

  Certificate authority business sold

  [1]Xcitiumen.wikipedia.org

  Francisco Partners acquired Comodo Certificate Authority from Comodo Security Solutions.

• 2013

  Founding of the Certificate Authority Security Council

  [1]Xcitiumen.wikipedia.org

  Comodo became a founding member of the CASC, an advocacy and educational organization concerning certificate-authority security.

• 2011

  DNS.com acquisition and certificate incident

  [1]Xcitiumen.wikipedia.org

  The company acquired DNS.com and disclosed the unauthorized issuance of certificates after an affiliate account compromise.

• 2009

  Founding of the Common Computing Security Standards Forum

  [1]Xcitiumen.wikipedia.org

  Comodo helped establish the CCSF, an industry organization focused on standards intended to protect end users.

• 2005

  Founding of the CA/Browser Forum

  [1]Xcitiumen.wikipedia.org

  Comodo became a founding member of the CA/Browser Forum, which develops common practices for certificate authorities and browser vendors.

• 2004

  Relocation to the United States

  [1]Xcitiumen.wikipedia.org

  The company moved its base from the United Kingdom to the United States.

• 1998

  Company founded in the United Kingdom

  [1]Xcitiumen.wikipedia.org

  Melih Abdulhayoğlu founded the business that became Comodo and later Xcitium.

Cybersecurity provider focused on zero-trust protection, endpoint and internet security, and formerly digital certificate infrastructure.

• Internet security suite

  Comodo Internet Security

  A Comodo security suite combining protective functions for computers and internet use. It represented the company’s broad consumer and small-business security approach rather than a single-purpose security utility.

• Antivirus software

  Comodo Antivirus

  Antivirus software from the Comodo product family intended to detect and block malicious software on supported devices.

• Firewall

  Comodo Firewall

  A software firewall designed to control network activity and provide an additional defensive layer for personal computers.

• Web browser

  Comodo Dragon

  A web browser developed and distributed under the Comodo name as part of the company’s effort to extend security positioning into everyday web use.

• Web browser

  Comodo IceDragon

  A second Comodo-branded browser product included in the company’s historical software portfolio.

• System utility software

  Comodo System Utilities

  A collection of utilities intended to support computer maintenance and system management within the wider Comodo consumer software range.

• Mobile security

  Comodo Mobile Security

  A mobile-device security offering that extended Comodo’s protection portfolio beyond desktop computers and traditional endpoint environments.

• Digital certificates

  Comodo Certification Authority

  The former Comodo certificate-authority operation issued digital certificates used to authenticate websites and support encrypted communications. It was sold in 2017 and became Sectigo in 2018.

• 2015

  Let's Encrypt trademark applications

  Comodo filed trademark applications involving the Let's Encrypt name, which was already publicly associated with the Internet Security Research Group’s certificate initiative. In 2016, Comodo announced that it had requested express abandonment of the applications.

  Source

• 2011

  Fraudulent certificate issuance after affiliate account compromise

  A compromised affiliate registration-authority account was used to issue unauthorized certificates for several domains. Comodo revoked the certificates, investigated the event, and reported additional controls. A later attempted reseller-account intrusion was blocked without compromise of the certificate-authority keys or fraudulent issuance.

  Source

• 2009

  Certificates issued to known malware distributors

  Comodo was accused of issuing digital certificates to parties associated with known malware. After being notified, the company revoked the certificates in question.

  Source

Read more

• 2022

  Rebrand to XcitiumStrategy

  Background

  Following the separation of the certificate-authority business, the company repositioned its remaining activities around cybersecurity and zero-trust protection.

  Action taken

  The company changed its name from Comodo to Xcitium.

  Aftermath

  Xcitium became the identity of the continuing cybersecurity business, while the former certificate operation continued separately as Sectigo.

  Source

• 2017

  Sale of the certificate-authority businessM&A

  Background

  The certificate-authority operation was separated from the wider Comodo security organization.

  Action taken

  Francisco Partners acquired Comodo Certificate Authority from Comodo Security Solutions.

  Aftermath

  The business was renamed Sectigo in 2018, separating the Sectigo certificate identity from the remaining Comodo security portfolio.

  Source

• 2011

  Acquisition of DNS.comM&A

  Background

  Comodo sought to expand its cybersecurity portfolio into managed DNS infrastructure.

  Action taken

  The company acquired DNS.com LLC in February 2011.

  Aftermath

  Managed DNS became part of Comodo’s broader internet security and infrastructure activities.

  Source

1. 1Xcitiumen.wikipedia.org