Snapshot 126425

Document
Security page
URL
https://www.3cx.com/pbx/security/
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
1603158 bytes
SHA-256 (raw)
446d3e5a6b52741388ba15eea12ecde74137feb3693d5a8cd72fc6b53991e5a9
SHA-256 (normalized text)
793c992169baec43126a6abfc0b067c9b0e0b3df02d194674074f24b8b74270b

Normalized text

Scripts and page chrome removed; this is what change detection compares.

ENTERPRISE AI PHONE SYSTEM
NO ONE RESPONDS FASTER
3CX BUILT FOR SECURITY
Try it FREE
Start your free trial Talk to Sales
Easy set up
Have your IT team deploy 3CX in a matter of days or even hours Pre-configured SIP trunks.
Do-it-yourself admin
3CX is so easy to manage your IT team can set up - or delegate to department Admins.
Cut call costs
Break free from expensive multi-year fixed contracts with a flat annual fee - no per user/per month.
Hosted or DIY
We let you choose - Windows or Linux, hosted by 3CX or self-hosted on Amazon, Digital Ocean, Azure or Google.
Always up to date and security checked
Up to date security
Always running the latest OS and software to respond quickly to vulnerabilities.
Built in protection
Security integrated into 3CX architecture to minimize risks and facilitate rapid updates.
Expert verification
Mandiant, ReversingLabs, Coverity and HackerONE help ensure checks are comprehensive.
Rapid threat response
3CX detects and resolves security threats quickly, ensuring your system stays protected.
Enabling a fast response to security vulnerabilities
3CX is a modern compact platform with security built in. Our simple, up-to-date web framework, native apps on iOS, Android, and Windows, and minimal reliance on third-party libraries help reduce risks and allow for rapid updates.
When choosing a PBX, it’s essential to ensure the operating system and software are up to date and not EOL. This allows security updates to be applied, enabling a fast response to any vulnerabilities.
With the hosted edition of 3CX, we handle updates for you. SMBs and multi-tenant users can also rely on an easy upgrade process, taking the responsibility off administrators while keeping their systems secure.
You can download a full V20 Product Security Assessment from Mandiant here.
ReversingLabs Binary Checks
Every version of 3CX software is checked at the binary level by ReversingLabs to identify any hidden malware. This ensures that malicious code cannot compromise your communication system.
Coverity Source code check
Each release is analyzed by Coverity to detect potential vulnerabilities at the source code level. This proactive approach strengthens our platform before it reaches users.
HackerONE
3CX partners with HackerONE, engaging ethical hackers to identify and fix vulnerabilities before they can be exploited and ensuring continuous improvement to safeguard our customers’ systems and communications.
Your security questions answered...
Why is it important to keep PBX software up to date?
Keeping your PBX software up to date ensures that security updates can be applied promptly. This helps address vulnerabilities as they are discovered and prevents potential security risks. With 3CX, administrators can easily update the system or rely on the hosted edition, which automates the update process.
What steps does 3CX take to ensure a secure architecture?
Security is built into the core of 3CX. By using a simple, modern web framework and minimizing third-party libraries, vulnerabilities are reduced. Apps are hosted on trusted platforms like iOS, Android, and Windows stores, and updates can be deployed quickly to address potential threats.
What components are included in the 3CX system?
3CX bundles the latest versions of critical components such as Nginx, OpenSSL, PostgreSQL, Angular, and .NET Core. The Linux edition of 3CX is based on Debian 12. These up-to-date components are essential for a secure and reliable communication system.
How does 3CX verify the security of its software?
Mandiant, Google’s Security Division, conducts penetration testing on major updates and architectural changes to ensure robust security. ReversingLabs scans software versions at the binary level to detect malware and protect against potential threats. Each release undergoes thorough source code analysis by Coverity to identify vulnerabilities before deployment. Additionally, 3CX partners with HackerONE’s ethical hackers to proactively find and resolve vulnerabilities, offering bug bounties to foster continuous security enhancements.
What is the role of Mandiant in securing 3CX?
Mandiant, part of Google’s Security Division, works closely with 3CX to conduct penetration testing on major architectural changes and new releases. They review thousands of lines of code to identify vulnerabilities, reinforcing 3CX’s commitment to security.
How does 3CX protect against malware?
3CX uses ReversingLabs to analyze software at the binary level, ensuring that malware cannot infiltrate the system. This provides an additional layer of protection for all releases.
What is HackerONE and how does 3CX work with it?
HackerONE is a platform that connects ethical hackers with organizations. 3CX collaborates with HackerONE to identify and fix vulnerabilities before they can be exploited. By engaging with the hacker community and offering bug bounties, 3CX continuously improves its security posture.
How easy are updates for IT Managers & System Admins?
3CX simplifies updates through an easy-to-use update system. For businesses that want to offload update responsibilities, the 3CX hosted edition manages updates and monitoring automatically. This ensures that IT managers and administrators can focus on other priorities while maintaining a secure PBX system.
Can I Use Google or Microsoft Single Sign-On (SSO) with 3CX?
Yes, 3CX supports Single Sign-On (SSO) with both Google and Microsoft 365. This allows users to log in securely using their existing credentials, reducing the need for separate passwords and improving security. SSO simplifies access management and enhances authentication controls for IT administrators.
Has 3CX been tested by external security experts?
Yes. Mandiant, Google’s Security Division, has reviewed 3CX’s apps, services, and devices. Their team carried out source code reviews and penetration tests. All critical and high-risk issues identified were resolved.
TEST DRIVE
More on 3CX
3CX for Enterprises
3CX Contact Center
3CX for SMB
Integrated AI
Managed & Hosted by 3CX
Easy to manage self-hosted
Most secure PBX on the market
Cut phone bills by 80%
World class mobile apps
Live Chat, SMS, WhatsApp
Free video conferencing
Call center reporting
Industries We Work With
Healthcare Automotive Education Technology Government Services Hospitality Finance
Healthcare
Automotive
Education
Technology
Government
Services
Hospitality
Finance
Learn more about 3CX in the Healthcare sector
Healthcare Case Study Bringing NHS Surgeries’ Communications Back from Critical Condition
3CX’s Call Recording & UC Features Meet Surgery Requirements. "The new system dispelled our previous hang ups about hosted telephony and new technologies. With our dedicated internet line we've had a consistent and reliable service. The call quality has been great." Peter McIntyre, Practice Manager, NHS Read the case study.
Learn more about 3CX in the Automotive industry
A Case Study in the Automotive Industry - Buckle Up! Porsche Inter Auto Takes 3CX for a Spin
Thanks to advanced 3CX call center features, gearing up customer service was no issue. "3CX proved instrumental in helping take customer satisfaction to a higher level. We look forward to exploring new product features in upcoming 3CX updates." Željko Hitrec, Communication Manager, Porsche Inter Auto Read the case study
Learn more about 3CX in the Education sector
A Case Study in Education: Douglas County School District Enjoys Increased Security and Significant Savings
3CX was chosen above Jive®* and Cisco®* as most cost effective: “This was one of the best decisions we made. The 3CX system is easy to configure and manage and runs on hardware we already owned. ROI will be less than three years." John Endter, IT Director, Douglas County School District Read the case study
Learn more about 3CX in the Technology sector
Our Case Study in Technology Showcases Benefits to Brazil’s Largest Data Center Provider
With company telephony costs reduced by 20% and increased employee mobility: "We gained high availability VoIP, easy system admin and advanced communications features. Our teams have quality communication capabilities to respond quickly to our customers." Fábio Trimarco, IT Governance Manager, Ascenty Read the case study
Learn more about 3CX in the Government sector
3CX Government Implementation Case Study in Bavaria's Landkreis Rhön-Grabfeld Across 31 Municipalities
“3CX was a replacement for Avaya. Existing VOIP infrastructure was expanded to transition from simple telephony to company-wide unified comms. 3CX apps and Web Client gave users a powerful, easy-to-use softphone." Stephen Johannes, Network Telecoms Manager, Landkreis Rhön-Grabfeld Read the case study
Learn more about 3CX in the Services industry
A Service Industry Case Study On How Argus Group Insures Themselves Against Communications Failure with 3CX
On replacing their outdated, analog Mitel®* PBX: "The 3CX project allowed us to re-examine our telephony operations. We optimized call flows, shortened wait times for clients and have granular reporting on the nature of calls in the short and long term.” Tory Richard, Head of IT, Argus Group Read the case study
Learn more about 3CX in the Hospitality industry
3CX Leads in Club Med Hospitality Case Study - A Globally Recognized Brand Serving Guests Since the 1950’s
3CX checks in to Club Med's all-inclusive resort with a 5 star communication solution: “The integration of 3CX with our global service system (NICE In Contact / Verizon) in the USA, helped increase productivity in a cost-efficient way. Right solution deployed by right partner!” Claudio Cavalcanti, Head of IT South America, Club Med Read the case study
Learn more about 3CX in the Finance sector
A Case Study in Finance - Adding Value to Phillips Securities Group with Free Interoffice Telephony for 700+ Employees
Rising telephone maintenance costs and operational deficiency over the PSTN: “3CX has cut Phillip’s phone costs sharply. Voice calls go out over the IP phone system, and are routed over the PSTN at the lowest cost. Eight offices are bridged, and interoffice calls are free with IP telephony." Terence Tung, Network Manager, Phillips Read the case study
More than 350,000 businesses globally trust 3CX to
power their everyday communications
20 Years of VoIP
Industry Leadership
Founded in 2005, when VoIP was an emerging technology, 3CX has gone on to establish itself as a global leader in business communications.
Learn more
Company
About 3CX
Careers
Partners
Awards
Case Studies
Testimonials
Global Sites
Contact Us
Solutions
Enterprise PBX
Small Business
Contact Center
Multi-tenant PBX
Hotel PBX
Education
Healthcare
Automotive
Useful Links
3CX AI
Virtual PBX
Build Voice Apps
SIP Server
Free Softphone
Call Reporting
WordPress Chat Plugin
SIP Trunks
Learn More
Blog
Licensing
VOIP FAQs
Configuration Guides
Alcatel Alternative
Avaya Alternative
Mitel Alternative
Security
Copyright © 2026 Sitemap Privacy
20 Years of VoIP
Industry Leadership
Founded in 2005, when VoIP was an emerging technology, 3CX has gone on to establish itself as a global leader in business communications.
Learn more
Company
About 3CX
Careers
Partners
Awards
Case Studies
Testimonials
Global Sites
Contact Us
Solutions
Enterprise PBX
Small Business
Contact Center
Multi-tenant PBX
Hotel PBX
Education
Healthcare
Automotive
Useful Links
3CX AI
Virtual PBX
Build Voice Apps
SIP Server
Free Softphone
Call Reporting
WordPress Chat Plugin
SIP Trunks
Learn More
Blog
VOIP FAQs
Configuration Guides
Alcatel Alternative
Avaya Alternative
Mitel Alternative
Security
Copyright © 2026 Sitemap Privacy
Cookie Preferences
Functional Cookies (required)
These cookies allow you to navigate the site and use our features.
Analytics Cookies
These cookies allow us to measure and analyse how our customers use the site, to improve its functionality and the user experience.
Advertising Cookies
These cookies may be used to deliver ads relevant and personalized to our users. Google also uses personal information it receives from sites or apps that use their advertising services. You can find more information about this on Google’s business safety & privacy terms site.
Personalisation Cookies
Personalisation cookies allow us to remember your preferences and tailor website content and ads to your interests. This may involve cookies or mobile identifiers used for ads personalisation.