ComSignTrust Secure Code Signing Platform (ASCS)
ComSignTrust Secure Code Signing Platform (ASCS) signs code files to authenticate their origin and integrity and identify the organization that developed them.
What ComSignTrust Secure Code Signing Platform (ASCS) is
ComSignTrust Secure Code Signing Platform (ASCS) signs code files to authenticate their origin and integrity and identify the organization that developed them. It is a paid service delivered through web access and an API, with pricing available on request. Encryption keys are protected by FIPS/CC-certified cryptographic hardware. Organizations can control certificate access and require passcodes, OTP-based two-factor authentication, biometrics, certificates, or other methods. After authentication, the Strong Authentication Gateway sends a signing request to the cryptographic device. ASCS supports CAB, COS, EXE, DLL, and other Microsoft Authenticode files, with cloud signing, CI/CD signing, and approval workflows. Detailed logs identify who made each request, when it occurred, and what it concerned. ComSign says its certificates are recognized by Microsoft, Google, Adobe, and Apple, with timestamping, CRLs, and OCSP. The system is described as handling tens of thousands of simultaneous requests, and ComSign identifies itself as an eIDAS Qualified Trust Service Provider.
Good
- FIPS/CC-certified hardware protects encryption keys
- Supports CAB, COS, EXE, DLL, and Authenticode files
- Configurable authentication and approval workflows
- Detailed signing event logs
- Cloud, CI/CD, and API integration
Watch out
- Pricing is available only on request
- Some support and upgrades depend on the selected SLA
Who it suits
ASCS suits organizations that need controlled code signing through web or API access. The listed customer sectors include government, education, finance, insurance, energy, technology, communications, and other service organizations.
Verdict
ASCS provides centralized signing with hardware key protection, configurable access policies, and audit records. It is designed for organizations managing certificates and signing workflows across supported file formats.
Plans and prices
From ComSignTrust Secure Code Signing Platform (ASCS)'s own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Access Secured Code Signing (ASCS) | Priced on request | Pricing not stated; contact ComSignTrust for details |
The facts
Each one read from ComSignTrust Secure Code Signing Platform (ASCS)'s own pages, with the date it was checked.
What it does
- Access controls
- Access control can be configured by organizational policy using passcodes, OTP, biometric authentication, certificates and other methods.checked 4 Oct 2026
- Access management
- Organizations can define which users may access a code-signing certificate and what authentication method is required, including OTP-based 2FA.checked 4 Oct 2026
- Audit logging
- The system provides detailed event logs identifying who made each signing request, when it was made and what it concerned.checked 4 Oct 2026
- Certificates and trust
- Comsign says its code-signing certificates are recognized by Microsoft, Google, Adobe and Apple, and include timestamping, CRLs and OCSP.checked 4 Oct 2026
- File formats
- The system supports signing CAB, COS, EXE, DLL and other files in MS Authenticode format.checked 4 Oct 2026
- Hardware security
- The product uses FIPS/CC-certified cryptographic hardware to secure encryption keys.checked 4 Oct 2026
- Integration
- Comsign says its code-signing solution can be integrated through an API and provides a web service for the process.checked 4 Oct 2026
- Intended customers
- The page lists government, education, finance, insurance, energy, high-tech, communications, real estate, pharmaceutical, aviation, security and service organizations among its clients.checked 4 Oct 2026
- Purpose
- ASCS signs code files to authenticate their origin and integrity and the identity of the developing organization.checked 4 Oct 2026
- Qualified trust provider
- The product page states that Comsign is an eIDAS Qualified Trust Service Provider (QTSP).checked 4 Oct 2026
- Service levels
- Its Standard SLA includes business-hours telephone support and minor-release upgrades, while Extended adds around-the-clock telephone support and major-release upgrades.checked 4 Oct 2026
- Signing capacity
- The code-signing system is described as capable of handling tens of thousands of requests simultaneously.checked 4 Oct 2026
- Signing workflow
- After an authorized user is authenticated, the Strong Authentication Gateway forwards the request to the cryptographic device to perform signing.checked 4 Oct 2026
- Support
- ComSignTrust offers remote administration, configuration and installation guidance, onsite installation and organization-specific feature development.checked 4 Oct 2026
The company
- Founded
- 2009checked 28 Sep 2026
- Headquarters
- Tel Aviv, Israelchecked 28 Sep 2026
Alternatives to ComSignTrust Secure Code Signing Platform (ASCS)
- 1
Sigstore
Free planOpen sourceWebAPILinuxmacOS7.6Free plan - 2
SignPath
Free planWebAPILinuxmacOS7.2Free plan - 3
AWS Signer
Free planWebAPILinuxmacOS7.1Free plan - 4
Cosign
Free planLinuxmacOSSelf-hostedWindows6.6Free plan - 5
OpenPubkey
Free planAPILinuxmacOSSelf-hosted6.6Free plan - 6
SignServer
Free planWebAPILinuxmacOS6.5Free plan