Always up to date and security checked

Up to date security

Always running the latest OS and software to respond quickly to vulnerabilities.

Built in protection

Security integrated into 3CX architecture to minimize risks and facilitate rapid updates.

Expert verification

Mandiant, ReversingLabs, Coverity and HackerONE help ensure checks are comprehensive.

Rapid threat response

3CX detects and resolves security threats quickly, ensuring your system stays protected.
3CX security - web client
3CX security - blackduck
3CX security - hackerone
3CX security - mandiant
3CX security - reversinglabs
3CX security - web client thumbnail
3CX security - blackduck thumbnail
3CX security - hackerone thumbnail
3CX security - mandiant thumbnail
3CX security - reversinglabs thumbnail

Enabling a fast response to security vulnerabilities

3CX is a modern compact platform with security built in. Our simple, up-to-date web framework, native apps on iOS, Android, and Windows, and minimal reliance on third-party libraries help reduce risks and allow for rapid updates.

When choosing a PBX, it’s essential to ensure the operating system and software are up to date and not EOL. This allows security updates to be applied, enabling a fast response to any vulnerabilities.

With the hosted edition of 3CX, we handle updates for you. SMBs and multi-tenant users can also rely on an easy upgrade process, taking the responsibility off administrators while keeping their systems secure.

You can download a full V20 Product Security Assessment from Mandiant here.

ReversingLabs Binary Checks

Every version of 3CX software is checked at the binary level by ReversingLabs to identify any hidden malware. This ensures that malicious code cannot compromise your communication system.

Coverity Source code check

Each release is analyzed by Coverity to detect potential vulnerabilities at the source code level. This proactive approach strengthens our platform before it reaches users.

HackerONE

3CX partners with HackerONE, engaging ethical hackers to identify and fix vulnerabilities before they can be exploited and ensuring continuous improvement to safeguard our customers’ systems and communications.

Your security questions answered...

Keeping your PBX software up to date ensures that security updates can be applied promptly. This helps address vulnerabilities as they are discovered and prevents potential security risks. With 3CX, administrators can easily update the system or rely on the hosted edition, which automates the update process.

Security is built into the core of 3CX. By using a simple, modern web framework and minimizing third-party libraries, vulnerabilities are reduced. Apps are hosted on trusted platforms like iOS, Android, and Windows stores, and updates can be deployed quickly to address potential threats.

3CX bundles the latest versions of critical components such as Nginx, OpenSSL, PostgreSQL, Angular, and .NET Core. The Linux edition of 3CX is based on Debian 12. These up-to-date components are essential for a secure and reliable communication system.

Mandiant, Google’s Security Division, conducts penetration testing on major updates and architectural changes to ensure robust security. ReversingLabs scans software versions at the binary level to detect malware and protect against potential threats. Each release undergoes thorough source code analysis by Coverity to identify vulnerabilities before deployment. Additionally, 3CX partners with HackerONE’s ethical hackers to proactively find and resolve vulnerabilities, offering bug bounties to foster continuous security enhancements.

Mandiant, part of Google’s Security Division, works closely with 3CX to conduct penetration testing on major architectural changes and new releases. They review thousands of lines of code to identify vulnerabilities, reinforcing 3CX’s commitment to security.

3CX uses ReversingLabs to analyze software at the binary level, ensuring that malware cannot infiltrate the system. This provides an additional layer of protection for all releases.

HackerONE is a platform that connects ethical hackers with organizations. 3CX collaborates with HackerONE to identify and fix vulnerabilities before they can be exploited. By engaging with the hacker community and offering bug bounties, 3CX continuously improves its security posture.

3CX simplifies updates through an easy-to-use update system. For businesses that want to offload update responsibilities, the 3CX hosted edition manages updates and monitoring automatically. This ensures that IT managers and administrators can focus on other priorities while maintaining a secure PBX system.

Yes, 3CX supports Single Sign-On (SSO) with both Google and Microsoft 365. This allows users to log in securely using their existing credentials, reducing the need for separate passwords and improving security. SSO simplifies access management and enhances authentication controls for IT administrators.

Yes. Mandiant, Google’s Security Division, has reviewed 3CX’s apps, services, and devices. Their team carried out source code reviews and penetration tests. All critical and high-risk issues identified were resolved.

TEST DRIVE

More on 3CX

3CX for Enterprises

3CX Contact Center

3CX for SMB

Integrated AI

Managed & Hosted by 3CX

Easy to manage self-hosted

Most secure PBX on the market

Cut phone bills by 80%

World class mobile apps

Live Chat, SMS, WhatsApp

Free video conferencing

Call center reporting

Industries We Work With

Healthcare Automotive Education Technology Government Services Hospitality Finance
  • Healthcare
  • Automotive
  • Education
  • Technology
  • Government
  • Services
  • Hospitality
  • Finance

Healthcare Case Study Bringing NHS Surgeries’ Communications Back from Critical Condition

3CX’s Call Recording & UC Features Meet Surgery Requirements. "The new system dispelled our previous hang ups about hosted telephony and new technologies. With our dedicated internet line we've had a consistent and reliable service. The call quality has been great." Peter McIntyre, Practice Manager, NHS Read the case study.

A Case Study in the Automotive Industry - Buckle Up! Porsche Inter Auto Takes 3CX for a Spin

Thanks to advanced 3CX call center features, gearing up customer service was no issue. "3CX proved instrumental in helping take customer satisfaction to a higher level. We look forward to exploring new product features in upcoming 3CX updates." Željko Hitrec, Communication Manager, Porsche Inter Auto Read the case study

A Case Study in Education: Douglas County School District Enjoys Increased Security and Significant Savings

3CX was chosen above Jive®* and Cisco®* as most cost effective: “This was one of the best decisions we made. The 3CX system is easy to configure and manage and runs on hardware we already owned. ROI will be less than three years." John Endter, IT Director, Douglas County School District Read the case study

Our Case Study in Technology Showcases Benefits to Brazil’s Largest Data Center Provider

With company telephony costs reduced by 20% and increased employee mobility: "We gained high availability VoIP, easy system admin and advanced communications features. Our teams have quality communication capabilities to respond quickly to our customers." Fábio Trimarco, IT Governance Manager, Ascenty Read the case study

3CX Government Implementation Case Study in Bavaria's Landkreis Rhön-Grabfeld Across 31 Municipalities

“3CX was a replacement for Avaya. Existing VOIP infrastructure was expanded to transition from simple telephony to company-wide unified comms. 3CX apps and Web Client gave users a powerful, easy-to-use softphone." Stephen Johannes, Network Telecoms Manager, Landkreis Rhön-Grabfeld Read the case study

A Service Industry Case Study On How Argus Group Insures Themselves Against Communications Failure with 3CX

On replacing their outdated, analog Mitel®* PBX: "The 3CX project allowed us to re-examine our telephony operations. We optimized call flows, shortened wait times for clients and have granular reporting on the nature of calls in the short and long term.” Tory Richard, Head of IT, Argus Group Read the case study

3CX Leads in Club Med Hospitality Case Study - A Globally Recognized Brand Serving Guests Since the 1950’s

3CX checks in to Club Med's all-inclusive resort with a 5 star communication solution: “The integration of 3CX with our global service system (NICE In Contact / Verizon) in the USA, helped increase productivity in a cost-efficient way. Right solution deployed by right partner!” Claudio Cavalcanti, Head of IT South America, Club Med Read the case study

A Case Study in Finance - Adding Value to Phillips Securities Group with Free Interoffice Telephony for 700+ Employees

Rising telephone maintenance costs and operational deficiency over the PSTN: “3CX has cut Phillip’s phone costs sharply. Voice calls go out over the IP phone system, and are routed over the PSTN at the lowest cost. Eight offices are bridged, and interoffice calls are free with IP telephony." Terence Tung, Network Manager, Phillips Read the case study

More than 350,000 businesses globally trust 3CX to
power their everyday communications