Xcitium

Xcitium is a privately held cybersecurity company formerly known as Comodo Group and Comodo Security Solutions. Its business developed from the Comodo security portfolio established by Melih Abdulhayoğlu in the United Kingdom in 1998. The company initially built a broad identity around computer and internet security, combining endpoint protection, consumer security software, browser products, system utilities, mobile security, managed DNS, and digital certificate services. The company moved its base of operations to the United States in 2004 and became particularly visible through its role in online trust infrastructure. Its former certificate-authority business operated Comodo Certification Authority, issuing SSL and other digital certificates used to authenticate websites and secure communications. Comodo also participated in industry efforts intended to establish common standards for certificate authorities, browser vendors, and digital identity providers. It was a founding participant in the CA/Browser Forum in 2005, helped establish the Common Computing Security Standards Forum in 2009, and became a founding member of the Certificate Authority Security Council in 2013. The group expanded beyond traditional endpoint and certificate products through corporate transactions. In February 2011 it acquired DNS.com LLC, a provider of managed Domain Name System services. In 2017, Francisco Partners acquired the certificate-authority business from Comodo Security Solutions. That business was subsequently rebranded Sectigo in 2018, separating the certificate operation from the remaining Comodo security activities. Comodo’s certificate business also made the company a prominent participant in debates about trust in the public-key infrastructure. In March 2011, an affiliate registration-authority account was compromised and used to issue fraudulent certificate requests for several domains. The company revoked the certificates, investigated the incident, and introduced additional controls. A later attempted intrusion into a reseller account did not result in fraudulent certificate issuance or compromise of the company’s certificate-authority keys, according to Comodo’s incident updates. The events led to security advisories and continuing scrutiny of certificate issuance practices. The company’s consumer and small-business security portfolio included Comodo Internet Security, Comodo Antivirus, Comodo Firewall, Comodo Dragon and IceDragon browsers, Comodo System Utilities, and Comodo Mobile Security. Following the divestiture of the certificate authority and a broader repositioning toward zero-trust cybersecurity, the company adopted the Xcitium name in 2022. Xcitium’s current identity is therefore distinct from the former Comodo certificate business, now associated with Sectigo, while retaining continuity with the Comodo security organization and its cybersecurity heritage.

The company now known as Xcitium originated as Comodo, a cybersecurity business founded in the United Kingdom in 1998 by Melih Abdulhayoğlu. Its early activities centered on computer and internet security, with products intended to protect personal computers, networks, browsers, and mobile devices. The organization also operated a certificate authority, Comodo Certification Authority, making it both a provider of security software and a participant in the public infrastructure used to authenticate websites and encrypt online communications. Comodo relocated to the United States in 2004. During the following years it broadened its product family and developed a substantial presence in online trust services. Its software portfolio included Comodo Internet Security, Comodo Antivirus, Comodo Firewall, Comodo Dragon, Comodo IceDragon, Comodo System Utilities, and Comodo Mobile Security. The company also entered adjacent infrastructure markets, including managed DNS services. Industry standardization became an important part of Comodo’s history. In 2005, the company was a founding member of the CA/Browser Forum, an organization bringing together certificate authorities and browser vendors to develop common requirements and practices for internet certificates. Comodo was also involved in the creation of the Common Computing Security Standards Forum in 2009 and the Certificate Authority Security Council in 2013. These affiliations reflected the company’s role in discussions about certificate issuance, browser trust, and baseline security expectations. In February 2011, Comodo acquired DNS.com LLC, a managed DNS provider. The same year, the company experienced a serious incident affecting its certificate ecosystem. A user account belonging to an affiliate registration authority was compromised, and the account was used to generate certificate requests and obtain certificates for multiple domains. Comodo revoked the unauthorized certificates after discovering the breach. The company initially described the event as state-driven, while later commentary and investigation left the precise identity and motivation of the attacker less certain. A subsequent attempted intrusion into a reseller account was detected and blocked; Comodo stated that its certificate-authority infrastructure and hardware security module keys had not been compromised and that no fraudulent certificates resulted from the later attempt. The certificate business was separated from the rest of the Comodo organization in a major ownership transaction. In 2017, Francisco Partners acquired Comodo Certificate Authority from Comodo Security Solutions. The operation was renamed Sectigo in 2018, ending the Comodo name’s direct association with that certificate-authority business while leaving the broader Comodo security portfolio under its existing organization. Comodo also faced criticism in connection with its 2015 applications for trademarks containing the name Let's Encrypt, despite the name already being used publicly by the Internet Security Research Group’s certificate initiative. In June 2016, Comodo said it had filed for express abandonment of the applications and described the trademark matter as resolved after collaboration with the Let's Encrypt team. In 2022, the company rebranded as Xcitium. The new identity placed greater emphasis on zero-trust cybersecurity. Xcitium therefore represents the continuation of the former Comodo security organization, but not the certificate-authority business that became Sectigo. Its history combines consumer and enterprise security software, internet infrastructure services, participation in cybersecurity standards bodies, and a significant role in the evolution and controversy of public certificate trust.

1. 2022Rebrand to Xcitium

   The remaining Comodo security organization adopted the Xcitium name and highlighted zero-trust cybersecurity.

   Source
2. 2018Certificate business becomes Sectigo

   The divested certificate-authority business was rebranded as Sectigo.

   Source
3. 2017Certificate authority business sold

   Francisco Partners acquired Comodo Certificate Authority from Comodo Security Solutions.

   Source
4. 2013Founding of the Certificate Authority Security Council

   Comodo became a founding member of the CASC, an advocacy and educational organization concerning certificate-authority security.

   Source
5. 2011DNS.com acquisition and certificate incident

   The company acquired DNS.com and disclosed the unauthorized issuance of certificates after an affiliate account compromise.

   Source
6. 2009Founding of the Common Computing Security Standards Forum

   Comodo helped establish the CCSF, an industry organization focused on standards intended to protect end users.

   Source
7. 2005Founding of the CA/Browser Forum

   Comodo became a founding member of the CA/Browser Forum, which develops common practices for certificate authorities and browser vendors.

   Source
8. 2004Relocation to the United States

   The company moved its base from the United Kingdom to the United States.

   Source
9. 1998Company founded in the United Kingdom

   Melih Abdulhayoğlu founded the business that became Comodo and later Xcitium.

   Source

Cybersecurity provider focused on zero-trust protection, endpoint and internet security, and formerly digital certificate infrastructure.

• Comodo Internet SecurityInternet security suite

  A Comodo security suite combining protective functions for computers and internet use. It represented the company’s broad consumer and small-business security approach rather than a single-purpose security utility.

• Comodo AntivirusAntivirus software

  Antivirus software from the Comodo product family intended to detect and block malicious software on supported devices.

• Comodo FirewallFirewall

  A software firewall designed to control network activity and provide an additional defensive layer for personal computers.

• Comodo DragonWeb browser

  A web browser developed and distributed under the Comodo name as part of the company’s effort to extend security positioning into everyday web use.

• Comodo IceDragonWeb browser

  A second Comodo-branded browser product included in the company’s historical software portfolio.

• Comodo System UtilitiesSystem utility software

  A collection of utilities intended to support computer maintenance and system management within the wider Comodo consumer software range.

• Comodo Mobile SecurityMobile security

  A mobile-device security offering that extended Comodo’s protection portfolio beyond desktop computers and traditional endpoint environments.

• Comodo Certification AuthorityDigital certificates

  The former Comodo certificate-authority operation issued digital certificates used to authenticate websites and support encrypted communications. It was sold in 2017 and became Sectigo in 2018.

• 2022Rebrand to XcitiumStrategy

  Following the separation of the certificate-authority business, the company repositioned its remaining activities around cybersecurity and zero-trust protection.

  What changed. The company changed its name from Comodo to Xcitium.

  Aftermath. Xcitium became the identity of the continuing cybersecurity business, while the former certificate operation continued separately as Sectigo.

  Source
• 2017Sale of the certificate-authority businessM&A

  The certificate-authority operation was separated from the wider Comodo security organization.

  What changed. Francisco Partners acquired Comodo Certificate Authority from Comodo Security Solutions.

  Aftermath. The business was renamed Sectigo in 2018, separating the Sectigo certificate identity from the remaining Comodo security portfolio.

  Source
• 2011Acquisition of DNS.comM&A

  Comodo sought to expand its cybersecurity portfolio into managed DNS infrastructure.

  What changed. The company acquired DNS.com LLC in February 2011.

  Aftermath. Managed DNS became part of Comodo’s broader internet security and infrastructure activities.

  Source

• 2015Let's Encrypt trademark applicationsControversy

  Comodo filed trademark applications involving the Let's Encrypt name, which was already publicly associated with the Internet Security Research Group’s certificate initiative. In 2016, Comodo announced that it had requested express abandonment of the applications.

  Source
• 2011Fraudulent certificate issuance after affiliate account compromiseControversy

  A compromised affiliate registration-authority account was used to issue unauthorized certificates for several domains. Comodo revoked the certificates, investigated the event, and reported additional controls. A later attempted reseller-account intrusion was blocked without compromise of the certificate-authority keys or fraudulent issuance.

  Source
• 2009Certificates issued to known malware distributorsControversy

  Comodo was accused of issuing digital certificates to parties associated with known malware. After being notified, the company revoked the certificates in question.

  Source

• 2022Comodo adopts the Xcitium name

  The company rebranded as Xcitium as it emphasized its cybersecurity and zero-trust identity following the separation of the former certificate-authority business.

  Leadership changeOther
  Source
• 2017Comodo certificate authority business is acquired and later becomes Sectigo

  Francisco Partners acquired Comodo Certificate Authority from Comodo Security Solutions. The certificate business adopted the Sectigo name the following year.

  M&A
  Source
• 2011Comodo acquires DNS.com

  Comodo Group acquired DNS.com LLC, expanding its portfolio into managed Domain Name System services.

  M&A
  Source

1. Xcitium