SignMyCode VS Imperva Cloud Application Security

• Wide Certificate Authority Support
  SignMyCode supports code signing certificates from major Certificate Authorities like Sectigo (Comodo), DigiCert, and Certum, giving users flexibility in choosing their preferred CA and certificate type.
• Affordable Pricing
  SignMyCode offers competitive pricing on code signing certificates, often at discounted rates compared to purchasing directly from Certificate Authorities, making it a cost-effective option for developers and organizations.
• Support for Multiple Platforms
  The service supports code signing for various platforms and file types including Microsoft Authenticode, Java, Adobe AIR, macOS, and more, allowing developers to sign code across different ecosystems.
• EV Code Signing Available
  SignMyCode offers Extended Validation (EV) code signing certificates which provide enhanced trust, immediate SmartScreen reputation with Microsoft, and stronger security assurances compared to standard code signing certificates.
• Easy Purchase and Renewal Process
  The platform provides a straightforward purchasing process with clear guidance on certificate selection, validation requirements, and renewal options, simplifying the often complex certificate acquisition workflow.

Possible disadvantages

• Reseller, Not a Certificate Authority
  SignMyCode is a reseller rather than a direct Certificate Authority, meaning customers are adding a middleman which could potentially complicate support issues or certificate management compared to buying directly from the CA.
• Validation Process Can Be Slow
  Like most code signing certificate providers, the validation process — especially for EV certificates — can take several days to complete, which may delay developers who need to sign code urgently.
• Limited Advanced Tooling
  SignMyCode primarily focuses on selling certificates rather than providing advanced signing tools, CI/CD integrations, or automated signing workflows that some competing platforms offer as part of their service.
• Support Availability Concerns
  Some users have reported that customer support response times can vary, and the level of technical assistance may not always match what is available directly from larger Certificate Authorities.
• Less Brand Recognition
  Compared to well-established providers like DigiCert or GlobalSign, SignMyCode has less brand recognition and a smaller track record, which may make some enterprise customers hesitant to use the service.

• Comprehensive Threat Protection
  Imperva Cloud Application Security offers advanced threat protection, including DDoS protection, bot mitigation, and web application firewall (WAF) capabilities, ensuring robust security for applications.
• Ease of Deployment
  The cloud-based nature of Imperva's solution allows for quick and easy deployment, reducing the time and resources needed to implement comprehensive security measures.
• Real-time Monitoring and Alerts
  Imperva provides real-time monitoring, enabling instant detection and response to potential threats. Customizable alerts ensure that security teams are promptly informed of any suspicious activities.
• Compliance Support
  Imperva helps organizations meet various compliance requirements, such as GDPR, PCI-DSS, and SOC 2. This is particularly beneficial for businesses operating in highly regulated industries.
• Scalability
  As a cloud-based solution, Imperva Cloud Application Security can easily scale to meet the demands of growing businesses, ensuring consistent performance and protection as your needs evolve.

Possible disadvantages

• Cost
  Imperva's solutions can be expensive, especially for small to medium-sized businesses, potentially making it a less accessible option for those with limited budgets.
• Complexity
  While the deployment might be straightforward, the full utilization of all features and customization options can be complex, requiring substantial expertise and potentially additional training for staff.
• Potential Latency
  Being a cloud-based service, there may be added latency compared to on-premise solutions, which could affect application performance, especially for users in regions far from Imperva's data centers.
• Support Limitations
  Some users have reported that customer support can be slow to respond and may require multiple follow-ups to resolve issues effectively.
• Limited Offline Capability
  As a cloud-based solution, Imperva relies on internet connectivity. In situations where internet access is limited or unreliable, the protection capabilities may be compromised.

• EV Code Signing

  I used https://signmycode.com/ they were very helpful. Source: over 3 years ago

Tracking Imperva Cloud Application Security since Mar 2021.