For the modern user, look to Comodo’s current offerings (CIS 2024). For the historian, the power user, or the owner of an air-gapped legacy PC, remains a lightweight, ferociously effective, and historically significant piece of software. Just remember to turn on that Auto-Sandbox—and don’t leave home without it.
Comodo Internet Security (CIS) version 6.1.276867.2813 Final, released in early 2013, marked a significant shift from traditional signature-based antivirus to a “Default Deny” approach, relying heavily on an auto-sandboxing mechanism and a host intrusion prevention system (HIPS). This paper systematically evaluates the effectiveness of this specific version against contemporary (2013–2014) and modern (retrospective) malware samples. Using a controlled virtual machine environment, we measure the detection rate of the signature engine, the accuracy of the cloud-based behavior analysis, and the robustness of the auto-sandbox in containing unknown executables. Results indicate that while signature-based detection was below industry leaders at the time (≈82%), the default deny policy with sandboxing successfully contained over 96% of zero-day payloads, albeit with notable usability trade-offs, including false positives on legitimate software installers. We conclude that CIS 6.1.276867.2813 represents a pioneering, if imperfect, implementation of proactive endpoint security. Comodo Internet Security 6.1.276867.2813 Final
Comodo Internet Security 6.1.276867.2813 was ahead of its time in implementing a default deny policy with auto-sandboxing. It provided near-complete protection against unknown malware from its era, but at the cost of usability and with residual sandbox escape vulnerabilities. For contemporary security, this version serves as a historical benchmark rather than a viable protection layer. Future work should compare CIS 6 with modern containment solutions (e.g., Microsoft Defender Application Guard, Comodo’s current Containment technology). For the modern user, look to Comodo’s current
The takeaway: If you encountered a brand-new virus, Comodo wouldn't necessarily recognize it, but it would contain it. This "fail-closed" design was revolutionary. Comodo Internet Security (CIS) version 6