ComSignTrust Secure Code Signing Platform (ASCS)

comsigntrust.com

WebAPI

Visit comsigntrust.com

Spec score 7.5 #17 of 28 in Code Signing Software

Spec sheet

Purpose: ASCS signs code files to authenticate their origin and integrity and the identity of the developing organization.Read 4 Oct 2026 · comsigntrust.com
Support: ComSignTrust offers remote administration, configuration and installation guidance, onsite installation and organization-specific feature development.Read 4 Oct 2026 · comsigntrust.com
Headquarters: Tel Aviv, IsraelRead 28 Sep 2026 · comsigntrust.com
Founded: 2009Read 28 Sep 2026 · comsigntrust.com
Access controls: Access control can be configured by organizational policy using passcodes, OTP, biometric authentication, certificates and other methods.Read 4 Oct 2026 · comsigntrust.com
Access management: Organizations can define which users may access a code-signing certificate and what authentication method is required, including OTP-based 2FA.Read 4 Oct 2026 · comsigntrust.com
Audit logging: The system provides detailed event logs identifying who made each signing request, when it was made and what it concerned.Read 4 Oct 2026 · comsigntrust.com
Certificates and trust: Comsign says its code-signing certificates are recognized by Microsoft, Google, Adobe and Apple, and include timestamping, CRLs and OCSP.Read 4 Oct 2026 · comsigntrust.com
File formats: The system supports signing CAB, COS, EXE, DLL and other files in MS Authenticode format.Read 4 Oct 2026 · comsigntrust.com
Hardware security: The product uses FIPS/CC-certified cryptographic hardware to secure encryption keys.Read 4 Oct 2026 · comsigntrust.com
Integration: Comsign says its code-signing solution can be integrated through an API and provides a web service for the process.Read 4 Oct 2026 · comsigntrust.com
Intended customers: The page lists government, education, finance, insurance, energy, high-tech, communications, real estate, pharmaceutical, aviation, security and service organizations among its clients.Read 4 Oct 2026 · comsigntrust.com
Qualified trust provider: The product page states that Comsign is an eIDAS Qualified Trust Service Provider (QTSP).Read 4 Oct 2026 · comsigntrust.com
Service levels: Its Standard SLA includes business-hours telephone support and minor-release upgrades, while Extended adds around-the-clock telephone support and major-release upgrades.Read 4 Oct 2026 · comsigntrust.com
Signing capacity: The code-signing system is described as capable of handling tens of thousands of requests simultaneously.Read 4 Oct 2026 · comsigntrust.com
Signing workflow: After an authorized user is authenticated, the Strong Authentication Gateway forwards the request to the cryptographic device to perform signing.Read 4 Oct 2026 · comsigntrust.com