What is the official website of 3CX ?

The official website of 3CX is http://www.3cx.com.

What is 3CX's cybersecurity risk score?

3CX has an AI-generated cybersecurity risk score of 742 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has 3CX experienced?

According to Rankiteo, 3CX currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has 3CX been affected by any supply chain cyber incidents ?

According to Rankiteo, 3CX has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does 3CX have SOC 2 Type 1 certification ?

According to Rankiteo, 3CX is not certified under SOC 2 Type 1.

Does 3CX have SOC 2 Type 2 certification ?

According to Rankiteo, 3CX does not hold a SOC 2 Type 2 certification.

Does 3CX comply with GDPR ?

According to Rankiteo, 3CX is not listed as GDPR compliant.

Does 3CX have PCI DSS certification ?

According to Rankiteo, 3CX does not currently maintain PCI DSS compliance.

Does 3CX comply with HIPAA ?

According to Rankiteo, 3CX is not compliant with HIPAA regulations.

Does 3CX have ISO 27001 certification ?

According to Rankiteo,3CX is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does 3CX operate in ?

3CX operates primarily in the Software Development industry.

How many employees does 3CX have ?

3CX employs approximately 184 people worldwide.

Does 3CX own any subsidiaries ?

3CX presently has no subsidiaries across any sectors.

How many LinkedIn followers does 3CX have ?

3CX's official LinkedIn profile has approximately 67,540 followers.

What is the NAICS classification code for 3CX ?

3CX is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does 3CX have a Crunchbase profile ?

No, 3CX does not have a profile on Crunchbase.

Does 3CX have a LinkedIn profile ?

Yes, 3CX maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/3cx.

How many cybersecurity incidents has 3CX experienced ?

As of October 18, 2026, Rankiteo reports that 3CX has experienced 1 cybersecurity incidents.

How many peer or competitor companies does 3CX have ?

3CX has an estimated 31,131 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

3CX

Boost Score +25 with badge (5 left)

742

/1000

Moderate

767

/1000

Fair

3CX Vendor Cyber Rating & Cyber Score

3cx.com

Add Your Compliance Badge

3CX is the developer of an open standards communications solution which innovates business connectivity and collaboration, replacing proprietary PBXs. The award-winning software enables companies of all sizes to cut telco costs, boost employee productivity, and enhance the customer experience. With integrated video conferencing, apps for Android and iOS, website live chat, SMS and WhatsApp Messaging Integration, 3CX offers companies a complete communications package out of the box.

3CX

3CX CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

3CX

Cyber Attack

100

6/2023

3CX283242811112...

Loading…

A.I.

3CX Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for 3CX

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for 3CX in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for 3CX in 2026.

Incident Types 3CX vs Software Development Industry Avg (This Year)

No incidents recorded for 3CX in 2026.

Incident History - 3CX (X = Date, Y = Severity)

Loading…

SUBSIDIARY

3CX Subsidiaries

3CX

Software Development

Website: http://www.3cx.com

Company Size: 51-200 employees

3CX DACHSoftware Development

Loading…

3CX Similar Companies

IDEMIA

cb idemia.com

IDEMIA Secure Transactions (IST) is a leading provider of payment, connectivity, and cybersecurity solutions, serving billions of people worldwide. With decades of expertise in cryptography and credential issuance, IST is trusted by over 2000 financial institutions, mobile operators, automotive manufacturers, and IoT providers worldwide. IST is a division of IDEMIA Group. IDEMIA Public Security, another division of IDEMIA Group, is the premium provider of convenient and trusted biometric-based solutions, transforming public and private organizations across the globe. Follow them here: https://www.linkedin.com/company/idemia-public-security/

NetSuite

netsuite.com

Founded in 1998, Oracle NetSuite is the world’s first cloud computing company and the leader in AI-powered cloud enterprise resource planning (ERP) and business management software. NetSuite provides an AI-powered, unified cloud business system that helps organizations manage core business functions in a single system. These include financial management, inventory and supply chain management, CRM, field service management, human resources (HR), professional services automation (PSA), and omnichannel commerce. Businesses use NetSuite to gain real-time visibility into operations, automate financial processes, improve reporting and analytics, and make faster, data-driven decisions using built-in AI capabilities. With more than 25 years of experience in cloud software, NetSuite supports over 43,000 organizations in 220 countries and territories, ranging from startups to global enterprises. NetSuite is commonly used by entrepreneurs, executives, finance operations leaders, and more who need scalable, flexible, and integrated business management solutions to drive efficiency and growth.

Autodesk

autodesk.com

Autodesk is changing how the world is designed and made. Our technology spans architecture, engineering, construction, product design, manufacturing, and media and entertainment. We empower innovators everywhere to solve challenges, big and small. From greener buildings to smarter products and more mesmerizing blockbusters, Autodesk software helps our customers design and make a better world for all. Over 100 million people use Autodesk software, like AutoCAD, Revit, Maya, 3ds Max, Fusion 360, SketchBook, and more, to unlock their creativity and solve important design, business, and environmental challenges. Our software runs on both personal computers and mobile devices. It taps the infinite computing power of the cloud to help teams around the world collaborate, design, simulate, and fabricate their ideas in 3D. We provide exceptional compensation and benefit packages, and we’d love for you to join us. We’re proud to be an equal opportunity employer, and we consider all qualiﬁed applicants without regard to race, gender, disability, veteran status, or other protected category. To see our culture in action, check out #AutodeskLife. We are headquartered in the San Francisco Bay Area and have over 10,000 employees worldwide.

Bosch Global Software Technologies

bosch-softwaretechnologies.com

With our unique ability to offer end-to-end solutions that connect the three pillars of IoT - Sensors, Software, and Services, we enable businesses to move from the traditional to the digital, or improve businesses by introducing a digital element in their products and processes. Now more than ever, companies across the world are becoming rapidly aware of the potential and impact of modern-day digital technologies on customers, people, and organisational processes. We aim to empower and translate this realisation into a new reality for enterprises, leveraging our in-depth understanding of global business complexities, the risk of disruption that digital technologies bring, and the technology thought leadership that we have built over decades of experience at Bosch. Founded in 1997, we are a 100% owned subsidiary of Robert Bosch GmbH, with over 35,000 associates across the globe. [Data protection notice: www.bosch-softwaretechnologies.com/en/terms-of-use/data-protection-notice/ ]

[24]7.ai

cb 247.ai

[24]7.ai™ customer engagement solutions use conversational artificial intelligence to understand customer intent, enabling companies to create personalized, predictive, and effortless customer experiences across all channels; attract and retain customers; boost agent productivity and satisfaction; and drive revenues while lowering costs. The world’s largest and most recognizable brands use [24]7.ai intent-driven technologies to serve several hundred million visitors through billions of conversations annually, most of which are automated. The result is an order of magnitude improvement in digital adoption, customer satisfaction, and revenue growth. For more information, visit: www.247.ai. [24]7.ai is based in Campbell, California. [24]7.ai is a registered trademark of 24/7 Customer, Inc.

Siemens Digital Industries Software

siemens.com

We help organizations of all sizes digitally transform using software, hardware and services from the Siemens Xcelerator business platform. Our software and the comprehensive digital twin enable companies to optimize their design, engineering and manufacturing processes to turn today's ideas into the sustainable products of the future. From chips to entire systems, from product to process, across all industries. We help transform the everyday as part of @Siemens, To learn more, visit http://sw.siemens.com.

Expedia Group

expediagroup.com

At Expedia Group (NASDAQ: EXPE), we believe travel is a force for good – it opens minds, builds connections, and bridges divides. We create transformative tech that enables unforgettable experiences for all travelers, everywhere. Our trusted family of brands are known and loved by millions, and we power more trips than anyone else. To learn more about our vision of a more open world through travel, visit www.expediagroup.com. We’re committed to providing an inclusive and accessible recruiting experience for candidates with disabilities, or other physical or mental health conditions. If you require an accommodation or adjustment for any part of the application or recruitment process, please let us know by completing our Accommodation Request Form or contacting your recruiter. Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident about who they are. We do not send job offers via email, or any other messaging tools, to individuals we have not had prior contact with. Our email domain is @expediagroup.com. Our official careers website, where you can to find and apply for job openings, is careers.expediagroup.com/jobs. If you require customer service support to cancel, change or ask about a refund for your trip, you can connect with our 24/7 Virtual Agent through the following links: Expedia: https://www.expedia.com/helpcenter Hotels.com: https://service.hotels.com/en-us/ Vrbo: https://help.vrbo.com/ For additional assistance, direct message us on Twitter @ExpediaHelp with your itinerary number and email address: https://twitter.com/ExpediaHelp

Snowflake

snowflake.com

**Snowflake is proud to be the Official Data Collaboration Provider for LA28 and Team USA.** Snowflake delivers the AI Data Cloud — a global network where thousands of organizations mobilize data with near-unlimited scale, concurrency, and performance. Inside the AI Data Cloud, organizations unite their siloed data, easily discover and securely share governed data, and execute diverse analytic workloads. Wherever data or users live, Snowflake delivers a single and seamless experience across multiple public clouds. Snowflake’s platform is the engine that powers and provides access to the AI Data Cloud, creating a solution for data warehousing, data lakes, data engineering, data science, data application development, and data sharing. Join Snowflake customers, partners, and data providers already taking their businesses to new frontiers in the AI Data Cloud.

Pitney Bowes

cb pitneybowes.com

Pitney Bowes is a technology-driven company that provides digital shipping solutions, mailing innovation, and financial services to clients around the world – including more than 90 percent of the Fortune 500. Small businesses to large enterprises, and government entities rely on Pitney Bowes to reduce the complexity of sending mail and parcels.

Loading…

NEWS

3CX CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 15, 2026 08:00 AM

The 3CX Supply Chain Attack: When Trusted Software Turns Malicious

Cortex XDR's AI stopped the 3CX supply chain attack days before the security industry knew it existed. See how behavioral detection caught...

Read Article

January 13, 2026 08:00 AM

10 Most Notable Cyber Attacks of 2026

Top 10 Hacks of 2026. Malware. Phishing. Denial of Service (DoS). Distributed Denial of Service (DDoS). Man-in-the-Middle (MitM).

Read Article

November 21, 2025 08:00 AM

Norrenberger Pensions grows client base to 164,619, revenue hits ₦2.5b

Norrenberger Pensions Limited has announced its financial performance for the 2024 financial year. It has expanded its Retirement Savings...

Read Article

August 18, 2025 07:00 AM

The new administration’s cyber strategy: A shifting landscape for enterprise security

Cyberattacks are exploding, AI is fueling the fire, and budget cuts to CISA couldn't come at a worse time for America's digital defenses.

Read Article

July 03, 2025 07:00 AM

3CX’s Software Supply Chain Compromise: Lessons Learned

3CX has transformed its software security in the two years since a damaging compromise — and RL was there to help. Here are key takeaways.

Read Article

December 23, 2024 08:00 AM

Top 10 Tech Internships Offered in Cyprus

Discover the top 10 tech internships in Cyprus. From leading companies like Wargaming to PrimeTel, enhance your career with these...

Read Article

January 25, 2024 08:00 AM

Assessing and mitigating cybersecurity risks lurking in your supply chain

Blindly trusting your partners and suppliers on their security precautions is not sustainable – it's time to take control through effective...

Read Article

December 15, 2023 08:00 AM

3CX warns customers to disable SQL database integrations

VoIP communications company 3CX warned customers today to disable SQL database integrations due to potential risks associated with what it...

Read Article

August 01, 2023 07:00 AM

Supply Chain Attacks: One of The Biggest Cybersecurity Threats of 2023

As a result of a supply chain attack, cyber-criminals exploit vulnerabilities in an organization's supply chain, including third-party software, hardware, and...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-111865

SUMMARY

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt_shape results in improper neutralization of directives in dynamically evaluated code. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-111934

SUMMARY

Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmost, client-supplied X-Forwarded-For value instead of the client IP appended by a reverse proxy. Attackers can send forged X-Forwarded-For values through appending proxies to bypass per-IP rate limits on login, one-time passcode, and password validation endpoints, enabling brute-force attacks, and to falsify IP addresses recorded in audit logs.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-111933

SUMMARY

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration vulnerability because userpassword.Compare() substitutes a placeholder hash derived from the string "hunter2" when a stored password hash is empty. Unauthenticated attackers can submit logins with the password "hunter2" and distinguish HTTP 403 from 401 responses to enumerate valid accounts and reveal the authentication provider of SSO-only users.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 6.3

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-111932

SUMMARY

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML injection vulnerability because the ApplicationName and LogoURL appearance settings are rendered into HTML output without sufficient escaping. Attackers with the Owner role can store HTML markup in these settings that renders in the Coder dashboard and in SMTP notification emails sent to other deployment users.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 3.4)

cvss3

Base Score: 3.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.7

REFERENCES

CVE-2026-111931

SUMMARY

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Path values. Attackers can craft links on trusted workspace app subdomains with paths beginning with double slashes, which become scheme-relative redirects to attacker sites for phishing.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

3CX Vendor Cyber Rating & Cyber Score

3CX A.I CyberSecurity Scoring

3CX CyberSecurity News & History

3CX Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for 3CX

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types 3CX vs Software Development Industry Avg (This Year)

Incident History - 3CX (X = Date, Y = Severity)

3CX Subsidiaries

3CX

3CX Similar Companies

IDEMIA

NetSuite

Autodesk

Bosch Global Software Technologies

[24]7.ai

Siemens Digital Industries Software

Expedia Group

Snowflake

Pitney Bowes

3CX CyberSecurity News

The 3CX Supply Chain Attack: When Trusted Software Turns Malicious

10 Most Notable Cyber Attacks of 2026

Norrenberger Pensions grows client base to 164,619, revenue hits ₦2.5b

The new administration’s cyber strategy: A shifting landscape for enterprise security

3CX’s Software Supply Chain Compromise: Lessons Learned

Top 10 Tech Internships Offered in Cyprus

Assessing and mitigating cybersecurity risks lurking in your supply chain

3CX warns customers to disable SQL database integrations

Supply Chain Attacks: One of The Biggest Cybersecurity Threats of 2023

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

3CX CyberSecurity News & History

3CX Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for 3CX

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types 3CX vs Software Development Industry Avg (This Year)

Incident History - 3CX (X = Date, Y = Severity)

3CX Subsidiaries

3CX

3CX Similar Companies

IDEMIA

NetSuite

Autodesk

Bosch Global Software Technologies

[24]7.ai

Siemens Digital Industries Software

Expedia Group

Snowflake

Pitney Bowes

3CX CyberSecurity News

The 3CX Supply Chain Attack: When Trusted Software Turns Malicious

10 Most Notable Cyber Attacks of 2026

Norrenberger Pensions grows client base to 164,619, revenue hits ₦2.5b

The new administration’s cyber strategy: A shifting landscape for enterprise security

3CX’s Software Supply Chain Compromise: Lessons Learned

Top 10 Tech Internships Offered in Cyprus

Assessing and mitigating cybersecurity risks lurking in your supply chain

3CX warns customers to disable SQL database integrations

Supply Chain Attacks: One of The Biggest Cybersecurity Threats of 2023

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo