What Comodo CA does

Sectigo Limited, operating commercially as Sectigo and formerly known as Comodo CA, is a UK-domiciled private certificate authority providing digital trust and certificate lifecycle management solutions. The company's core offering is the cloud-native Sectigo Certificate Manager (SCM), a platform that automates the discovery, issuance, deployment, renewal, and replacement of digital certificates across enterprise environments. The platform addresses the structural challenges created by shorter certificate lifespans (moving toward 47-day and 6-month cycles), the proliferation of machine and human identities, and the upcoming post-quantum cryptography migration.

The product portfolio spans a full certificate taxonomy — Domain Validation (DV), Organization Validation (OV), Extended Validation (EV) TLS/SSL certificates, Code Signing certificates, Email Security (S/MIME) certificates, Verified Mark Certificates (VMC/CMC), and a Sectigo Private PKI offering — alongside complementary security services including SiteLock website security, CodeGuard backup/recovery, HackerGuardian PCI scanning, and eIDAS-compliant trust services for the European market. Sectigo holds multiple WebTrust certifications, ISO/IEC 27001, and EU Trust (eIDAS) accreditation, and operates 50+ technology integrations across F5, Apple, Google, Microsoft, Akamai, GoDaddy, HashiCorp Terraform, and Apache.

The business model combines one-time certificate license sales with recurring subscription revenue from the SCM platform and partner programs. Go-to-market is executed through three channels: direct enterprise field sales for Fortune 500 deployments, a self-serve e-commerce storefront (store.sectigo.com) for SMB and individual buyers, and a PartnerConnect channel program offering Certificate as a Service (CaaS) and CLM white-label arrangements. Sectigo reports serving 700,000+ customers globally (including 65% of Fortune 500 companies), having issued over 1 billion certificates, and a 98% customer retention rate, with international support coverage across the US, UK, France, Spain, Germany, Italy, and Australia.

Name

Comodo CA

Legal name

Sectigo Limited

Website

https://comodoca.com

Company type

Private

Operating status

Operating

Short description

Sectigo (formerly Comodo CA) is a UK-domiciled certificate authority providing cloud-native certificate lifecycle management and digital certificates to 700,000+ global customers, including 65% of Fortune 500 companies. The platform automates discovery, issuance, renewal, and replacement of TLS/SSL, code signing, S/MIME, and private PKI certificates.

Ownership category

akta.pro rank

Product category

Certificate Management and SSL/TLS Security

NAICS

Software Publishers (5132)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers) (HDAEAJAB)

akta.pro secondary industries

Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI), Federation & Identity Standards (SAML/OIDC/OAuth, Federation Hubs) (HDADAAAG)

Keywords

• Certificate lifecycle management
• SSL/TLS certificates
• Digital certificate authority
• Public key infrastructure
• Code signing certificates

Headquarters

HQ city

Clifton

HQ country

United States

HQ region

North America

Offices7 records

Markets served

GTM type

B2B and B2C

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations

Revenue model

1. TLS/SSL Certificate Sales: Sale of digital certificates including Domain Validation (DV), Organization Validation (OV), and Extended Validation (EV) SSL certificates. Certificates sold as one-time purchases with annual validity.
2. Certificate Lifecycle Management (CLM) Platform: Subscription-based enterprise platform for automated certificate lifecycle management. Includes discovery, automation, renewal, and compliance features.
3. Code Signing Certificates: Certificates for software code signing to verify authenticity and integrity of software.
4. Email Security (S/MIME) Certificates: Email encryption and signing certificates for secure communications.
5. VMC/CMC Certificates: Verified Mark Certificates for email authentication and brand verification.
6. Enterprise Partner Programs: Partner portal for Certificate as a Service (CaaS) and CLM platform partnerships, generating revenue through partner referrals and white-label arrangements.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels7 records

Core offering

Comodo CA (operating as Sectigo) is a Certificate Authority that sells digital certificates (DV, OV, EV TLS/SSL, code signing, S/MIME, VMC/CMC) and the Sectigo Certificate Manager (SCM), a cloud-native enterprise platform for automated discovery, issuance, renewal, and replacement of certificates across environments. The portfolio also includes Sectigo Private PKI, SiteLock website security, Code Guard backup, HackerGuardian PCI scanning, and eIDAS-compliant trust services.

Product overview

Sectigo operates as a certificate authority offering a unified certificate lifecycle management platform alongside a comprehensive portfolio of digital certificates. The core product, Sectigo Certificate Manager (SCM), provides cloud-native automated discovery, issuance, renewal, and replacement of certificates across enterprise environments. This platform integrates with specialized certificate types including DV, OV, and EV SSL certificates, code signing certificates, email security (S/MIME) certificates, and Verified Mark Certificates (VMC/CMC). Additional security offerings include SiteLock website security, Code Guard website backup and recovery, and HackerGuardian PCI scanning services. The company also provides private PKI capabilities and eIDAS-compliant solutions for EU digital trust requirements. The architecture combines the central SCM platform with modular add-on security services.

Differentiator

Problem solved

Functional benefit

Products and services

• Sectigo Certificate Manager (SCM) Cloud-native automated certificate lifecycle management platform that discovers, issues, automates, and renews certificates across enterprise environments to prevent outages and simplify management. Targets IT and security teams at large organizations managing hundreds to thousands of certificates.
• Domain Validation (DV) SSL Certificate Entry-level SSL certificate that verifies domain ownership only, providing basic browser-trusted encryption for websites. Designed for individuals, SMBs, and developers needing fast certificate issuance.
• Organization Validation (OV) SSL Certificate SSL certificate that verifies both domain ownership and organizational identity, providing enhanced trust indicators beyond DV. Targeted at businesses that need validated organization identity in their certificates.
• Extended Validation (EV) SSL Certificate Premium SSL certificate with the most rigorous verification process, historically displaying the organization name in the browser address bar for maximum trust. Aimed at enterprises and high-trust e-commerce sites.
• Code Signing Certificates Certificates that digitally sign software code to verify publisher identity and ensure integrity against tampering. Used by software developers and DevOps teams to authenticate distributed code.
• Email Security (S/MIME) Certificates Certificates for securing email communications through digital signing and encryption using the S/MIME protocol. Sold to individuals and organizations needing authenticated and confidential email.
• Verified Mark Certificates (VMC) / Commercial Mark Certificates (CMC)

Quantifiable outcome

• 98% customer retention rate demonstrating strong customer satisfaction and platform value
• +4 more outcomes

Named customers5 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

Feature7 records

Partnerships

Seven partnerships are on record, tiered core.

• F5 NetworkscoreTechnology or IntegrationIntegration partnership enabling Sectigo certificates to work with F5 BIG-IP and other F5 networking solutions for enterprise certificate management.
• ApplecoreTechnology or IntegrationTechnology integration enabling Sectigo certificates for use in Apple ecosystem and development environments.
• GooglecoreTechnology or IntegrationIntegration with Google cloud platforms and services for certificate management and security.
• MicrosoftcoreTechnology or IntegrationDeep integration with Microsoft ecosystem including Microsoft agent connectivity for Sectigo Private PKI and certificate management.
• AkamaicoreTechnology or IntegrationIntegration with Akamai content delivery and security platforms for certificate deployment and management.
• GoDaddycoreTechnology or IntegrationIntegration partnership for domain and certificate services with GoDaddy's domain registrar and hosting platforms.
• HashiCorp TerraformcoreTechnology or IntegrationInfrastructure as Code integration enabling automated certificate provisioning and management through Terraform for DevOps workflows.

Scale indicators7 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• DigiCert: DigiCert is the largest commercial certificate authority and certificate lifecycle management platform provider, directly competing with Sectigo across SSL/TLS, enterprise PKI, and CLM. It is the primary commercial peer against which Sectigo's enterprise penetration and product breadth are benchmarked.
• Entrust: Entrust is a long-standing commercial certificate authority offering SSL/TLS, PKI, and identity verification solutions to enterprises and governments. It directly competes with Sectigo in the certificate authority and PKI platform market, particularly in regulated and government segments.
• Venafi (CyberArk): Venafi is a machine identity management platform specializing in certificate lifecycle automation and cryptographic key management, now part of CyberArk. It competes directly with Sectigo in enterprise CLM and is a frequent head-to-head competitor in Fortune 500 PKI modernization deals.
• Keyfactor: Keyfactor is a pure-play certificate lifecycle management and machine identity platform serving large enterprises. It competes most directly with Sectigo Certificate Manager for enterprise CLM deals and represents the closest pure-play competitor in the automated PKI segment.
• Let's Encrypt: Let's Encrypt is the largest free, automated certificate authority issuing DV SSL/TLS certificates via the ACME protocol. While operating on a different monetization model, it directly competes with Sectigo's DV/OV SSL business and is the primary alternative pressure on low-end certificate pricing.
• GlobalSign: GlobalSign is a commercial certificate authority providing SSL, code signing, and PKI solutions, with strong presence in enterprise and IoT markets. It competes directly with Sectigo across public TLS certificates and managed PKI offerings.

Broad incumbents

• Okta: Okta is a leading identity and access management platform whose capabilities increasingly extend into machine identity and certificate-based authentication. It overlaps with Sectigo's certificate-driven identity use cases as a broader IAM incumbent.
• HashiCorp Vault: HashiCorp Vault provides secrets and certificate management as part of its infrastructure automation platform, with PKI engine capabilities for automated certificate issuance. It competes with Sectigo's CLM platform for DevOps-led certificate automation use cases in cloud-native enterprises.
• AWS Certificate Manager: AWS Certificate Manager provides free SSL/TLS certificates for AWS workloads and increasingly supports automated certificate provisioning. While not a direct commercial CA competitor, it commoditizes basic certificate issuance for the large share of enterprises running on AWS infrastructure.
• Microsoft Azure Key Vault & Certificate Services: Microsoft offers integrated certificate, key, and PKI management through Azure Key Vault, Active Directory Certificate Services, and the Microsoft Trusted Cloud Root program. As a broad incumbent, it competes with Sectigo for native enterprise certificate management, particularly within Microsoft-centric IT estates.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xtwitter.com/SectigoHQ
• YouTubeyoutube.com/c/Sectigo
• LinkedInlinkedin.com/company/comodo-ca

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Comodo CA