Freedom251 › Code Signing Software
ComSignTrust Secure Code Signing Platform (ASCS)
Visit ComSignTrust Secure Code Signing Platform (ASCS) Alternatives Pricing
What ComSignTrust Secure Code Signing Platform (ASCS) is
ComSignTrust Secure Code Signing Platform (ASCS) signs code files to authenticate their origin and integrity and identify the organization that developed them. It is offered through web access and an API, with pricing available on request. The service protects encryption keys in FIPS/CC-certified cryptographic hardware. Organizations can set which users may access a signing certificate and choose authentication requirements, including OTP-based two-factor authentication. After authenticating an authorized user, the Strong Authentication Gateway forwards the signing request to the cryptographic device.
ASCS supports CAB, COS, EXE, DLL, and other Microsoft Authenticode files. The listed capabilities include cloud signing, CI/CD signing, and approval workflows. ComSign says its code-signing certificates are recognized by Microsoft, Google, Adobe, and Apple, and include timestamping, CRLs, and OCSP. Detailed event logs record who made each signing request, when it was made, and what it concerned. The system is described as able to handle tens of thousands of simultaneous requests. The product page states that ComSign is an eIDAS Qualified Trust Service Provider. Its listed support includes remote administration, configuration and installation guidance, onsite installation, and organization-specific feature development. Standard SLA includes business-hours telephone support and minor-release upgrades; Extended SLA adds around-the-clock telephone support and major-release upgrades.
Who it suits
ASCS suits organizations that need to authenticate code signatures while controlling certificate access and recording signing activity. Its API and web service, CI/CD signing, and stated support options may fit teams integrating signing into organizational or software delivery processes.
What it does well
- Protects signing keys with FIPS/CC-certified cryptographic hardware.
- Supports OTP, passcodes, biometrics, certificates, and other access controls.
- Signs CAB, COS, EXE, DLL, and other Authenticode files.
- Provides detailed logs of signing requests.
- Lists cloud signing, CI/CD signing, and approval workflows.
- Offers remote and onsite installation support.
What to know first
- Pricing is available only on request.
- Access is listed for web and API.
- Standard SLA telephone support is limited to business hours.
- Extended SLA is required for around-the-clock telephone support.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Access Secured Code Signing (ASCS) | Pricing not stated; contact ComSignTrust for details | On request |
As comsigntrust.com lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Visit https://www.comsigntrust.com/access-secured-code-signing/.
- Contact ComSignTrust for pricing details.
- Choose web or API access for the signing process.
- Arrange remote administration, configuration and installation guidance, or onsite installation with ComSignTrust.
Verdict
Choose ASCS if your organization needs controlled code signing with hardware-protected keys, configurable authentication, and request logs. Its stated formats, API access, and CI/CD signing are relevant to signing workflows integrated with organizational systems. Contact ComSignTrust for pricing and to determine which service level fits your support needs.
Questions
What does ASCS cost?
Pricing is on request; contact ComSignTrust for details.
Which files can ASCS sign?
It supports CAB, COS, EXE, DLL, and other Microsoft Authenticode files.
How are signing keys protected?
The product uses FIPS/CC-certified cryptographic hardware to secure encryption keys.
Does ASCS support API or CI/CD signing?
ComSign says the solution can be integrated through an API and provides a web service. CI/CD signing is listed as a capability.
What support is included in the service levels?
Standard SLA includes business-hours telephone support and minor-release upgrades. Extended SLA adds around-the-clock telephone support and major-release upgrades.
Who provides ASCS?
ComSignTrust provides the platform. The product page states that ComSign is an eIDAS Qualified Trust Service Provider.
Facts from ComSignTrust Secure Code Signing Platform (ASCS)'s own pages
- Access controls
- Access control can be configured by organizational policy using passcodes, OTP, biometric authentication, certificates and other methods. · comsigntrust.com, 4 Oct 2026
- Access management
- Organizations can define which users may access a code-signing certificate and what authentication method is required, including OTP-based 2FA. · comsigntrust.com, 4 Oct 2026
- Audit logging
- The system provides detailed event logs identifying who made each signing request, when it was made and what it concerned. · comsigntrust.com, 4 Oct 2026
- Certificates and trust
- Comsign says its code-signing certificates are recognized by Microsoft, Google, Adobe and Apple, and include timestamping, CRLs and OCSP. · comsigntrust.com, 4 Oct 2026
- File formats
- The system supports signing CAB, COS, EXE, DLL and other files in MS Authenticode format. · comsigntrust.com, 4 Oct 2026
- Founded
- 2009 · comsigntrust.com, 28 Sept 2026
- Hardware security
- The product uses FIPS/CC-certified cryptographic hardware to secure encryption keys. · comsigntrust.com, 4 Oct 2026
- Headquarters
- Tel Aviv, Israel · comsigntrust.com, 28 Sept 2026
- Integration
- Comsign says its code-signing solution can be integrated through an API and provides a web service for the process. · comsigntrust.com, 4 Oct 2026
- Intended customers
- The page lists government, education, finance, insurance, energy, high-tech, communications, real estate, pharmaceutical, aviation, security and service organizations among its clients. · comsigntrust.com, 4 Oct 2026
- Purpose
- ASCS signs code files to authenticate their origin and integrity and the identity of the developing organization. · comsigntrust.com, 4 Oct 2026
- Qualified trust provider
- The product page states that Comsign is an eIDAS Qualified Trust Service Provider (QTSP). · comsigntrust.com, 4 Oct 2026
- Service levels
- Its Standard SLA includes business-hours telephone support and minor-release upgrades, while Extended adds around-the-clock telephone support and major-release upgrades. · comsigntrust.com, 4 Oct 2026
- Signing capacity
- The code-signing system is described as capable of handling tens of thousands of requests simultaneously. · comsigntrust.com, 4 Oct 2026
- Signing workflow
- After an authorized user is authenticated, the Strong Authentication Gateway forwards the request to the cryptographic device to perform signing. · comsigntrust.com, 4 Oct 2026
- Support
- ComSignTrust offers remote administration, configuration and installation guidance, onsite installation and organization-specific feature development. · comsigntrust.com, 4 Oct 2026
Where ComSignTrust Secure Code Signing Platform (ASCS) stands on Freedom251
- Code Signing Software#18 of 28
- Electronic Signature Software#29 of 33