And I don't think they have a big market share on Enterprises. I usually see Symantec, Trend Micro, Kaspersky or Eset in the enterprise.
Well, they sell SSL certificates but I don't think that's all they sell...
They don’t. Their website as well is a hot mess and parts of it look really unprofessional. It doesn’t look like businesses are queuing in front of Comodo headquarters to speak to sales.
Comodo no longer sells certificates. After Symantec had the mismanagement and issues with Google (as well as several other businesses), Comodo used that (their misfortune) to form a cheap marketing campaign. Later on it turned out Comodo certification business is just as bad and it was sold to Sectigo.
Coming back to Comodo itself, I would like them to improve the anti-malware engine because it is terribly lagging behind.
I know that Comodo fanboys will say "Yes, but you have the Sandbox, who cares" NO! A Sandbox can't protect a PC by itself!
That anti-malware engine that Melih has said is there just to stop old malware is a joke. Apparently for the xcitium products this engine has been reworked and is more oriented to cloud-detonation through Valkyrie. My worry here is that competitive approaches like Avast CyberCapture and Eset LiveGuard are notoriously bad with evasive malware, slapping safe verdicts left and right. I am not aware if this is the case with Valkyrie but maybe if you have slated the product for a test could have a look instead of me.
Some malware once virtualized will either do simple calculations or just close itself... This is the case for example of some samples of GuLoader that refuse to run on a VMware...
Not just GuLoader, a lot of malware families, if configured by the attacker, would attempt to evade emulation and virtualisation. Although emulators and containers will normally be configured to “trick” malware, many malware writers are good at evasion.
As for the firewall, I don’t believe firewall is of extreme importance (by not using Comodo Firewall the world is not ending). Simple code injection is a good workaround for the firewall’s abilities to block dodgy apps, more important are techniques that block access to FUQDN/IPS. Only Norton/Symantec have a quality software-based IPS, other vendors require an appliance.
