Hot Take Comodo is discontinued product its officialy said by Xcitium Staff

[Trident]

Right off the bat, the product offers no phishing/web protection, which is how most of the attacks start. Someone correct me if I’m wrong…?

 

[Nikola Milanovic]

Right off the bat, the product offers no phishing/web protection, which is how most of the attacks start. Someone correct me if I’m wrong…?

They do offer but you have to eneable that in settings in ur profile

 

[Nikola Milanovic]

I personally do not use the web filter nor DLP Monitoring i use all of these which are on and of course Xcitium Valkyrie

 

[Pico]

Right off the bat, the product offers no phishing/web protection, which is how most of the attacks start. Someone correct me if I’m wrong…?

Web protection did not work in CIS for browsers other than Firefox.
You should not rely on that feature.

 

[Nikola Milanovic]

@Trident for VirusScope by default its eneabled to automatically quarantine a file i turned that off so i can see the alert but you can leave it on if you want

Do not show popups alerts is automatically on for VirusScope in Xcitium but i turned that off on my profile in endpoint manager

@Trident my bad actually 1 year of Xcitium AEP for 1 device is 64 $

Also notifications sounds are turned off by default on Xcitium so if you want notifications you will need to eneable them on endpoint manager at ur profile

 

[ForgottenSeer 114717]

@bazang are you aware how Valkyrie works, all these analysis, are they proprietary or is Xcitium using third-party APIs (like Sophos, Avira)?

If my recall is correct, Valkyrie was originally built bottom-up by Comodo back in the day (as CAMAS).

The infos is buried somewhere on that old Comodo forum. I never venture there.

 

[Nikola Milanovic]

If my recall is correct, Valkyrie was originally built bottom-up by Comodo back in the day (as CAMAS).

The infos is buried somewhere on that old Comodo forum. I never venture there.

Now Valkyrie is called Xcitium Cloud Verdict

 

[Nikola Milanovic]

If my recall is correct, Valkyrie was originally built bottom-up by Comodo back in the day (as CAMAS).

The infos is buried somewhere on that old Comodo forum. I never venture there.

CAMAS(Comodo Automated Malware Analysis System)

 

[ForgottenSeer 114717]

Perhaps Xcitium will be better, but I have my doubts. One can only go by the historical record until proven otherwise.

It is software. All software has bugs. This is just an inherent fact of software.

 

[Nikola Milanovic]

Perhaps Xcitium will be better, but I have my doubts. One can only go by the historical record until proven otherwise.

It is software. All software has bugs. This is just an inherent fact of software.

you mean every antivirus has bugs?

 

[annaegorov]

I am not near as smart as you guys, but my thermometer reads room temperature... I think the headstone will read, "here lays Comodo" a once promising product.

Just so sad.

 

[outlawxtorn]

Take from it what you will.

 

[Andy Ful]

It would be interesting to find evidence on the Comodo, MT, and Wilderssecurity forums if some users were infected.
From known tests (SE Labs), it follows that Comodo Antivirus at default settings can be compromised in targeted attacks:

https://selabs.uk/wp-content/uploads/2024/07/endpoint-security-eps-home-2024-07.pdf

This probably follows from two settings:

1. Contained files in Comodo AV can call home (it is blocked in CIS).
2. Script Analysis settings are not hardened.

 

[Parkinsond]

 

[Shadowra]

I don't understand Xcitium's desire to abandon Comodo.
Comodo is a brand known by everyone, but Xcitium? Apart from the Pro version, I didn't know it before...
For me, Comodo has every interest in keeping CIS, but why not make a smooth transition to Xcitium as the name

 

[ForgottenSeer 114717]

I don't understand Xcitium's desire to abandon Comodo.
Comodo is a brand known by everyone, but Xcitium? Apart from the Pro version, I didn't know it before...

Nobody pays for Comodo. At least with Xcitium there is a prospect of some enterprises paying for it.

Free software is not sustainable, not even by a one man shop.

 

[Andy Ful]

Let's look closely at the Melih advertisement:

We can see that the first two columns always sum up to 100%. (Contained + No unknowns). However, this skips some possible attacks via abusing or exploiting Trusted files (DLL hijacking, exploits, Office Macros, ClickFix methods with some LOLBins, etc.). So, this advertising should not be taken seriously in targeted attacks. It simply shows that Comodo Sandbox is very strong.

The SE Labs are probably more reliable for Comodo than for popular AVs. Those tests are conducted with a several-hour delay, which is not significant for Comodo (a few-hour EXE malware will be contained), but is important for popular AVs. For example, some few-hour EXE malware can compromise popular AVs in the wild but will be detected in the test.

Currently, there are no convincing tests that could reliably compare the overall effectiveness of Comodo vs. popular AVs.
However, in businesses, the combination of better bug management, anti-phishing, web filtering, email protection, and other next-gen features may give popular business AVs an advantage over Comodo.

 

[ForgottenSeer 123960]

Currently, there are no convincing tests that could reliably compare the overall effectiveness of Comodo vs. popular AVs.
However, in businesses, the combination of better bug management, anti-phishing, web filtering, email protection, and other next-gen features may give popular business AVs an advantage over Comodo.

Love how you make us read a 16-page dissertation before dropping this important fact. Is this for home users or corporate lawyers?

 

[Andy Ful]

Love how you make us read a 16-page dissertation before dropping this important fact. Is this for home users or corporate lawyers?

The "16-page dissertation" and some other threads already include this fact. For example, I posted there:

If CIS was maintained at the high level, we should have detailed information about fixed and unfixed bugs.

Better than Comodo bug management (1) does not mean "no bug management" by Comodo (2). The first can be confirmed; the second is untrue.

 

[Abnormal]

what is the best comodo alternative ?
a free 0day / hips / zero trust software ?
comodo has a lot of bugs / vulnerbilities which render it unsecure against targeted attacks
in the old days we Had Online armor / outpost / private firewall /zone alarm

i see a big opportunity for Online armor comeback