Whitelist our application at the big antivirus companies
Budget: €36 – €0 EUR
We developed an application (see https://embeetle.com). To avoid false positives, all our executables and dll's are code-signed with an Extended Verification Code Signing Certificate from Sectigo. Despite this, our users complain that Norton and other antivirus programs flag and delete our executables and dlls immediately when they try to launch the software.
Take for example Norton. It deletes our executables and dlls solely based on them being "Very New" and having "Very Few Users". The threat is labeled as "WS.Reputation.1".
SOLUTION 1: WHITELISTING EXECUTABLES
====================================
The solution most people present is to submit the executables and dlls as False Positives to the antivirus companies. These companies typically have online submission forms. Unfortunately, this is not a sustainable solution:
- Our software consists of many executables and dlls interacting with each other. Submitting them one-by-one in online forms would take many hours, especially if we'd have to do it for all the big antivirus vendors.
- We push out new executables and dlls at every update. This means we'd have to repeat the online submissions everytime.
- How long do these online submission forms take to be completely processed? If we push out a new update (eg. for an important bugfix), we don't want to wait for months.
SOLUTION 2: WHITELISTING OUR CODE SIGNING CERTIFICATE
====================================================
If we can get our Code Signing Certificate to be trusted by the big antivirus vendors, our business is saved. I've read that big software corporations already practice this. The executables and dlls they release are automatically trusted by the Antivirus companies.
Large corporations can achieve this - how can a small software business like ours achieve it too?
YOUR JOB
=========
Are you a Cybersecurity expert? Do you have a network in the industry? If you can help us to get our application (preferrably our Code Signing Certificate) whitelisted in an effective way, contact us for the job.
Take for example Norton. It deletes our executables and dlls solely based on them being "Very New" and having "Very Few Users". The threat is labeled as "WS.Reputation.1".
SOLUTION 1: WHITELISTING EXECUTABLES
====================================
The solution most people present is to submit the executables and dlls as False Positives to the antivirus companies. These companies typically have online submission forms. Unfortunately, this is not a sustainable solution:
- Our software consists of many executables and dlls interacting with each other. Submitting them one-by-one in online forms would take many hours, especially if we'd have to do it for all the big antivirus vendors.
- We push out new executables and dlls at every update. This means we'd have to repeat the online submissions everytime.
- How long do these online submission forms take to be completely processed? If we push out a new update (eg. for an important bugfix), we don't want to wait for months.
SOLUTION 2: WHITELISTING OUR CODE SIGNING CERTIFICATE
====================================================
If we can get our Code Signing Certificate to be trusted by the big antivirus vendors, our business is saved. I've read that big software corporations already practice this. The executables and dlls they release are automatically trusted by the Antivirus companies.
Large corporations can achieve this - how can a small software business like ours achieve it too?
YOUR JOB
=========
Are you a Cybersecurity expert? Do you have a network in the industry? If you can help us to get our application (preferrably our Code Signing Certificate) whitelisted in an effective way, contact us for the job.