Comodo Group
Long-running New Jersey cybersecurity vendor offering website security, WAF/DDoS, and endpoint protection, whose corporate structure has been muddied since its 2022 Xcitium spinoff.
Visit Website ↗ + Add to CompareOverview
Comodo Group is a veteran cybersecurity vendor offering a bundle of website and endpoint security products: daily malware scanning and remediation for websites, a web application firewall with DDoS protection, premium DNS/CDN services, consumer antivirus and firewall software (Comodo Internet Security), and an enterprise “Dragon Platform” covering endpoint detection and response, managed detection and response, digital forensics, and threat hunting. Founded in 1998 and long based in the Clifton/Bloomfield, New Jersey area, Comodo built its early reputation on SSL certificates and free antivirus software before expanding into a broader security portfolio.
The company’s corporate structure has become genuinely confusing to evaluate: in 2017 its certificate authority business was sold and became Sectigo, and in July 2022 Comodo Security Solutions rebranded its flagship endpoint “zero threat” containment technology as Xcitium. Yet as of this research, Comodo’s own homepage still markets an “Xcitium Enterprise Platform” as part of its current Dragon Enterprise offering, suggesting the relationship between the Comodo and Xcitium brands is not cleanly separated even in the company’s own materials. Comodo is currently backed by Francisco Partners, a private equity firm, and reports roughly 680 employees as of 2026.
Comodo operates in the crowded, mature website-security-and-endpoint-protection category against much larger and more clearly positioned competitors. Its main news event in 2026 was a $1.625 million class-action settlement over Telephone Consumer Protection Act (TCPA) violations, rather than a product or growth milestone. Buyers should treat the Comodo/Xcitium brand overlap as a real due-diligence flag when evaluating exactly which entity and product roadmap they would be buying into.
Innovation Matrix Assessment
Community reports indicate the flagship Comodo Internet Security consumer product has seen limited meaningful updates in recent years, and the company's most differentiated endpoint containment technology was spun off to Xcitium in 2022, leaving Comodo's remaining independent product velocity unclear.
With roughly 680 employees and 27+ years of continuous operation, Comodo has real operational scale, though its post-2022 corporate structure relative to Xcitium introduces genuine ambiguity about which entity owns which roadmap.
The most prominent 2026 news involving Comodo was a $1.625 million TCPA class-action settlement rather than a growth, funding, or product milestone; private-equity ownership under Francisco Partners typically signals consolidation rather than aggressive growth investment.
Website security, WAF/DDoS, and consumer antivirus are mature, commoditized categories, and Comodo's most technically distinctive asset (zero-threat containment) now sits under the Xcitium brand rather than Comodo itself.
The company's own homepage conflates Comodo and Xcitium branding for its enterprise platform, which itself signals unresolved product/efficacy positioning; no independent third-party test (e.g., AV-Test, MITRE ATT&CK evaluation) results specific to current Comodo-branded products were found in this research.
Basic website security and consumer/SMB endpoint protection remain relevant needs, but Comodo's offering is less relevant to enterprise-grade security architecture than dedicated modern EDR/XDR and cloud-native WAF vendors.
Why CISOs Should Care
Comodo may suit small businesses needing basic, affordably-priced website security (malware scanning, WAF, DNS/CDN) bundled together, but enterprise CISOs should scrutinize the Comodo/Xcitium brand relationship carefully before treating this as a strategic platform vendor.
What Makes It Different
Comodo's differentiator is mainly bundling (website security, DNS/CDN, WAF, and basic endpoint protection under one legacy brand) rather than any distinctly advanced detection technology, especially after ceding its most novel containment tech to Xcitium.
The Matrix Verdict
38/100 — EMERGING / UNRANKED
A long-tenured but no longer clearly differentiated vendor whose most innovative technology and brand identity have partially migrated to Xcitium since 2022, leaving Comodo itself as a mature, PE-owned bundle of commoditized website and basic endpoint security products.
Editorial Note: Claims vs. Verified Findings
Independently verifiable: 1998 founding, the 2022 Xcitium rebrand of Comodo Security Solutions, Francisco Partners ownership, and the 2026 TCPA settlement are corroborated by Wikipedia, industry press, and court-settlement reporting. Vendor-sourced and unverified: the ~680 employee figure and specific product efficacy claims come from third-party estimate sites and Comodo's own materials respectively, and the exact current relationship between Comodo's and Xcitium's product lines could not be independently clarified beyond what each company's own site states (which are themselves inconsistent with each other).
Sources
Alternatives to Comodo Group
Forward
CISO ReviewedBuilds a mathematically accurate 'digital twin' of enterprise networks, letting teams verify network and security changes before they…
Zscaler
A cloud-native security-service-edge pioneer that routes all user traffic through a global proxy cloud instead of backhauling it…
Claroty
Cyber-physical systems protection platform securing industrial, healthcare and enterprise IoT devices for critical infrastructure operators.
Tailscale
A zero-configuration mesh VPN built on WireGuard that applies Google's BeyondCorp zero-trust model to make secure networking accessible…
TXOne Networks Inc.
OT and industrial control system cybersecurity built for zero operational disruption, protecting legacy manufacturing and critical infrastructure devices…
Zero Networks
An automated, agentless microsegmentation platform that learns network behavior and generates least-privilege access policies without manual rule-writing.