Komodia Inc.

Komodia is an Israel‑based company that develops SSL interception technology. Its core product is a software development kit (SDK) that enables applications to decrypt and inspect HTTPS traffic. The SDK works by installing a self‑signed root certificate authority on the host system. This root certificate uses a universal private key that is identical across all installations. By presenting this certificate to browsers, the SDK can perform man‑in‑the‑middle decryption of secure connections. The technology is marketed to third‑party developers for use in products such as adware and parental‑control suites. Komodia’s headquarters are located in Israel.

The company gained widespread attention in February 2015 when its SDK was bundled with the Superfish adware pre‑installed on consumer laptops. The universal private key in Komodia’s root certificate allowed attackers to impersonate any HTTPS site, compromising passwords and other sensitive data. Because the SDK was licensed to multiple vendors, the vulnerability extended beyond Superfish to a broader range of applications. Following public disclosure, Komodia’s website was subjected to a distributed denial‑of‑service attack amid heightened scrutiny. The incident underscored risks associated with supply‑chain dependencies and the security implications of SSL interception technologies. Komodia’s specialization in SSL decryption distinguishes it within the cybersecurity niche, though its approach has been criticized for weakening end‑to‑end encryption. No further details about the company’s size, ownership structure, or subsidiary relationships are publicly available in the provided sources.