PBX Security

Keeping your PBX software up to date ensures that security updates can be applied promptly. This helps address vulnerabilities as they are discovered and prevents potential security risks. With 3CX, administrators can easily update the system or rely on the hosted edition, which automates the update process.

Security is built into the core of 3CX. By using a simple, modern web framework and minimizing third-party libraries, vulnerabilities are reduced. Apps are hosted on trusted platforms like iOS, Android, and Windows stores, and updates can be deployed quickly to address potential threats.

3CX bundles the latest versions of critical components such as Nginx, OpenSSL, PostgreSQL, Angular, and .NET Core. The Linux edition of 3CX is based on Debian 12. These up-to-date components are essential for a secure and reliable communication system.

Mandiant, Google’s Security Division, conducts penetration testing on major updates and architectural changes to ensure robust security. ReversingLabs scans software versions at the binary level to detect malware and protect against potential threats. Each release undergoes thorough source code analysis by Coverity to identify vulnerabilities before deployment. Additionally, 3CX partners with HackerONE’s ethical hackers to proactively find and resolve vulnerabilities, offering bug bounties to foster continuous security enhancements.

Mandiant, part of Google’s Security Division, works closely with 3CX to conduct penetration testing on major architectural changes and new releases. They review thousands of lines of code to identify vulnerabilities, reinforcing 3CX’s commitment to security.

3CX uses ReversingLabs to analyze software at the binary level, ensuring that malware cannot infiltrate the system. This provides an additional layer of protection for all releases.

HackerONE is a platform that connects ethical hackers with organizations. 3CX collaborates with HackerONE to identify and fix vulnerabilities before they can be exploited. By engaging with the hacker community and offering bug bounties, 3CX continuously improves its security posture.

3CX simplifies updates through an easy-to-use update system. For businesses that want to offload update responsibilities, the 3CX hosted edition manages updates and monitoring automatically. This ensures that IT managers and administrators can focus on other priorities while maintaining a secure PBX system.

Yes, 3CX supports Single Sign-On (SSO) with both Google and Microsoft 365. This allows users to log in securely using their existing credentials, reducing the need for separate passwords and improving security. SSO simplifies access management and enhances authentication controls for IT administrators.

Yes. Mandiant, Google’s Security Division, has reviewed 3CX’s apps, services, and devices. Their team carried out source code reviews and penetration tests. All critical and high-risk issues identified were resolved.