SignMyCode VS Appknox

• Wide Certificate Authority Support
  SignMyCode supports code signing certificates from major Certificate Authorities like Sectigo (Comodo), DigiCert, and Certum, giving users flexibility in choosing their preferred CA and certificate type.
• Affordable Pricing
  SignMyCode offers competitive pricing on code signing certificates, often at discounted rates compared to purchasing directly from Certificate Authorities, making it a cost-effective option for developers and organizations.
• Support for Multiple Platforms
  The service supports code signing for various platforms and file types including Microsoft Authenticode, Java, Adobe AIR, macOS, and more, allowing developers to sign code across different ecosystems.
• EV Code Signing Available
  SignMyCode offers Extended Validation (EV) code signing certificates which provide enhanced trust, immediate SmartScreen reputation with Microsoft, and stronger security assurances compared to standard code signing certificates.
• Easy Purchase and Renewal Process
  The platform provides a straightforward purchasing process with clear guidance on certificate selection, validation requirements, and renewal options, simplifying the often complex certificate acquisition workflow.

Possible disadvantages

• Reseller, Not a Certificate Authority
  SignMyCode is a reseller rather than a direct Certificate Authority, meaning customers are adding a middleman which could potentially complicate support issues or certificate management compared to buying directly from the CA.
• Validation Process Can Be Slow
  Like most code signing certificate providers, the validation process — especially for EV certificates — can take several days to complete, which may delay developers who need to sign code urgently.
• Limited Advanced Tooling
  SignMyCode primarily focuses on selling certificates rather than providing advanced signing tools, CI/CD integrations, or automated signing workflows that some competing platforms offer as part of their service.
• Support Availability Concerns
  Some users have reported that customer support response times can vary, and the level of technical assistance may not always match what is available directly from larger Certificate Authorities.
• Less Brand Recognition
  Compared to well-established providers like DigiCert or GlobalSign, SignMyCode has less brand recognition and a smaller track record, which may make some enterprise customers hesitant to use the service.

• Comprehensive Security Testing
  Appknox provides exhaustive security analysis, including static, dynamic, and API testing, which ensures that applications are evaluated for vulnerabilities from multiple angles.
• Automation
  The platform offers automated scanning capabilities, allowing for quick and consistent assessments without the need for significant manual intervention.
• User-Friendly Interface
  The platform features a clean and intuitive user interface, making it easier for users to navigate and utilize the various tools offered.
• Prompt Reporting
  Appknox generates detailed reports quickly, providing actionable insights and recommendations for resolving security vulnerabilities in a timely manner.
• Compliance Support
  The tool helps organizations meet compliance requirements by aligning its scanning and reporting features with industry standards such as OWASP, PCI-DSS, and GDPR.
• Integration Capabilities
  Appknox can be integrated with various CI/CD pipelines and development tools, making it easier to incorporate security into the development lifecycle.

Possible disadvantages

• Cost
  The comprehensive features and high-quality service come at a price, which may be steep for small businesses or startups with limited budgets.
• Learning Curve
  Despite the user-friendly interface, the broad range of features and in-depth security options can initially be overwhelming for new users.
• Dependency on Internet
  As a SaaS platform, its functionalities are heavily dependent on an active internet connection, making offline work impossible.
• Customization Limitations
  While it offers a robust set of features, the scope for customizing the scanning process to cater to specific, niche requirements might be limited.
• False Positives
  Like many automated security testing tools, there is a chance of false positives, which can lead to unnecessary remediation efforts.

No analysis of Appknox yet.

No SignMyCode videos yet. You could help us improve this page by suggesting one.

Appknox Webinar: How to Pentest Mobile Apps Live 🔥

More videos

• EV Code Signing

  I used https://signmycode.com/ they were very helpful. Source: over 3 years ago

Tracking Appknox since Mar 2021.