Comodo Advanced Endpoint Protection

Comodo Advanced Endpoint Protection is an endpoint protection platform built on zero trust architecture. The product uses Auto Containment Technology to virtualize and encapsulate unknown files when they execute on endpoints, allowing users to run files without write access to critical system components while the files undergo analysis.

The platform integrates with Comodo's Valkyrie Verdicting Engine for cloud-based file analysis, combining machine learning and human expert analysis to provide verdicts within 45 seconds. Unknown executables are automatically contained and analyzed without interrupting end user productivity.

The solution includes antivirus capabilities for detecting and quarantining suspicious files, a host intrusion prevention system for monitoring operating system activities, and a host firewall for protection against inbound and outbound threats. The Virus Scope Behavior Analyzer monitors process behaviors to identify harmful actions.

Files are checked against Comodo's File Lookup System, which maintains whitelist and blacklist databases. The platform provides fileless malware protection and uses cloud-native architecture for automatic signature updates. More sophisticated threats receive 24-hour expert human analysis.

The product can be paired with add-on modules including Endpoint Detection and Response for increased visibility, Managed Detection and Response for outsourced security management, and Valkyrie Threat Intelligence for monitoring dark web and intelligence feeds.