What is the official website of Sangoma ?

The official website of Sangoma is http://www.sangoma.com.

What is Sangoma's cybersecurity risk score?

Sangoma has an AI-generated cybersecurity risk score of 652 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has Sangoma experienced?

According to Rankiteo, Sangoma currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Sangoma been affected by any supply chain cyber incidents ?

According to Rankiteo, Sangoma has been affected by a supply chain cyber incident involving FreePBX, with the incident ID YASFRE1769690560.

Does Sangoma have SOC 2 Type 1 certification ?

According to Rankiteo, Sangoma is not certified under SOC 2 Type 1.

Does Sangoma have SOC 2 Type 2 certification ?

According to Rankiteo, Sangoma does not hold a SOC 2 Type 2 certification.

Does Sangoma comply with GDPR ?

According to Rankiteo, Sangoma is not listed as GDPR compliant.

Does Sangoma have PCI DSS certification ?

According to Rankiteo, Sangoma does not currently maintain PCI DSS compliance.

Does Sangoma comply with HIPAA ?

According to Rankiteo, Sangoma is not compliant with HIPAA regulations.

Does Sangoma have ISO 27001 certification ?

According to Rankiteo,Sangoma is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Sangoma operate in ?

Sangoma operates primarily in the Telecommunications industry.

How many employees does Sangoma have ?

Sangoma employs approximately 622 people worldwide.

Does Sangoma own any subsidiaries ?

Sangoma presently has no subsidiaries across any sectors.

How many LinkedIn followers does Sangoma have ?

Sangoma's official LinkedIn profile has approximately 47,352 followers.

What is the NAICS classification code for Sangoma ?

Sangoma is classified under the NAICS code 517, which corresponds to Telecommunications.

Does Sangoma have a Crunchbase profile ?

Yes, Sangoma has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/sangoma-technologies.

Does Sangoma have a LinkedIn profile ?

Yes, Sangoma maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/sangoma.

How many cybersecurity incidents has Sangoma experienced ?

As of August 14, 2026, Rankiteo reports that Sangoma has experienced 5 cybersecurity incidents.

How many peer or competitor companies does Sangoma have ?

Sangoma has an estimated 10,288 peer or competitor companies worldwide.

What types of cybersecurity incidents has Sangoma faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Ransomware and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Sangoma

Boost Score +25 with badge (5 left)

652

/1000

Weak

677

/1000

Weak

Sangoma Vendor Cyber Rating & Cyber Score

sangoma.com

cb in

Add Your Compliance Badge

Sangoma Technologies Corporation (TSX: STC; Nasdaq: SANG) is a global leader in essential business communications. For more than 40 years, Sangoma has provided secure, reliable, and cost-effective solutions to over 100,000 customers in more than 180 countries. Sangoma is a full-suite partner for all communications needs, offering unified communications, networking, SIP trunking, wholesale voice, and security. Its UC platform is developed fully in-house and available in cloud, hybrid, or on-premises models. Sangoma delivers vertical-specific communications solutions for healthcare, education, hospitality, retail, restaurants, and manufacturing. These services can be bundled, giving organizations one trusted source for voice, data, and

Sangoma A.I CyberSecurity Scoring

Scoring History

Sangoma

Sangoma CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

FreePBX

Vulnerability

100

12/2025

FreePBX

YASFRE176969056...

Sangoma

Vulnerability

8/2025

SAN537082825

Sangoma

Breach

10/2024

SAN233080525

Sangoma

Vulnerability

1/2021

SAN1779287064

Sangoma

Ransomware

100

12/2020

SAN3019222

Loading…

A.I.

Sangoma Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Sangoma

Incidents vs Telecommunications Industry Avg (This Year)

No incidents recorded for Sangoma in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Sangoma in 2026.

Incident Types Sangoma vs Telecommunications Industry Avg (This Year)

No incidents recorded for Sangoma in 2026.

Incident History - Sangoma (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Sangoma Subsidiaries

Sangoma

Telecommunications

Website: http://www.sangoma.com

Company Size: 201-500 employees

Sangoma InternationalTelecommunications

Sangoma (LATAM)Telecommunications

FreePBXTelecommunications

Asterisk PBXTelecommunications

Loading…

Sangoma Similar Companies

Telecom Egypt

cb te.eg

Since its establishment in 1854, Telecom Egypt has played a pivotal role in driving growth within the local ICT market capitalizing on its vast infrastructure, which is one of the largest in the region. Its vast domestic and international infrastructure has helped it serve various customer groups including consumers, enterprises, domestic and international carriers. Through its five business units Telecom Egypt boasts a consolidated top-line of EGP 22.8bn. In September 2017, Telecom Egypt introduced its new retail brand “WE” with the launch of its mobile services. In a year from launch, “WE” offered the market’s first fully integrated bundle combining all of its consumer services fixed and mobile, voice and data in one bill taking its first step towards full convergence and demonstrating its agility as a key player in the telecommunications industry. By end of 2018, Telecom Egypt fixed voice customers grew to 7.9mn of which 5.2mn enjoyed fixed broadband connectivity, while mobile customers reached 3.9mn. Telecom Egypt’s wholesale unit provides infrastructure, transmission and international voice services to local mobile operators and internet service providers. In addition, it provides international carries capacities on one of the largest submarine cable networks in the world.

Ooredoo Group

ooredoo.com

We are an award-winning international communications company operating across the Middle East, North Africa and Southeast Asia. Serving consumers and businesses in 10 countries, we deliver a leading data experience through a broad range of content and services via our advanced, data-centric mobile and fixed networks. With a customer base of more than 138 million people, we work hard to provide the best customer and network experience we can. We believe in the power of mobile technology to bring about social and economic progress.

Idea Cellular Ltd

cb ideacellular.com

Idea Cellular is an Aditya Birla Group Company, India's first truly multinational corporation. Idea is a pan-India integrated GSM operator offering 2G and 3G services, and has its own NLD and ILD operations, and ISP license. With revenue in excess of $4 billion; revenue market share of 18%; and subscriber base of over 150 million, Idea is India’s 3rd largest mobile operator. Idea ranks among the Top 10 country operators in the world with a traffic of over 1.5 billion minutes a day. Idea’s robust pan-India coverage is built on a network of over 100,000 2G and 3G cell sites, spread across over 55,000 towns in India. Using the latest in technology, Idea provides world-class service delivery through the most extensive network of customer touch points, comprising of nearly 4,500 exclusive Idea outlets, and over 7,000 call centre seats. Idea’s customer service delivery platform is ISO 9001:2008 certified, making it the only operator in the country to have this standard certification for all 22 service areas and the corporate office Idea won the ‘Best Brand Campaign’ at the esteemed World Communication Awards 2011. It also recently won 3 Awards at the ET Telecom Awards 2012, in the following categories Customer Experience Enhancement, Excellence in Marketing and Innovative products, respectively.

EchoStar Corporation

cb echostar.com

EchoStar Corporation (Nasdaq: SATS) is a premier provider of technology, networking services, television entertainment and connectivity, offering consumer, enterprise, operator and government solutions worldwide under its EchoStar®, Boost Mobile®, Sling TV, DISH TV, Hughes®, HughesNet®, HughesON™ and JUPITER™ brands. Tune into the innovation, collaboration and culture that our team members bring to the office every day. We want you to be a part of our journey to build the next generation of technology that transforms the way the world communicates. Our team members are the key to our history of groundbreaking innovation and our continued progress. If you bring an inquisitive curiosity, a sense of pride in your work, an openness to adventure and a drive to win, we’ll provide the structure to take the next step in your career. This is more than just another job, this is your launchpad to achieve your potential and a community dedicated to your growth.

Cox Communications

cb cox.com

Cox Communications is committed to creating more moments of real human connection. We bring people closer to family and friends through technology that’s inspired by a culture that puts people first, and we’re always working to improve life in the communities we serve. Our world-class broadband applications and services are helping create smart homes and smart cities that will bring more comfort, convenience, security, entertainment and connectivity to the lives of the people we serve. Our company is full of dreamers and doers; people who make plans and who make things happen. And, of course, people who have fun doing it. In short, people like you. Join the Cox team and make your mark!

TELUS

telus.com

At TELUS, our purpose-driven team works together every day to innovate and do good. From providing technology solutions that make our lives safer and easier, to supporting those who need it most, our inclusive, spirited and giving people are passionate about empowering our customers, communities and each other to thrive in our digital world. A company that helps you be your best self at home and at work: Find a place where you truly belong, your opinions are valued and you can be your best self. A career that ignites your full potential: Get the guidance and support you need to explore your interests, build your skills and get where you want to go. A culture that goes beyond the expected to strengthen communities and the planet: Seize the opportunity to make a difference in our communities and do good for our planet as part of our purpose-driven team. An innovative team committed to solving complex, real world problems: Join a digitally-enabled workforce that’s pushing the boundaries to create sustainable change. We're always building Canada, join us at www.telus.com/careers

T-Mobile

t-mobile.com

As the supercharged Un-carrier, T-Mobile US, Inc. (NASDAQ: TMUS) is powered by an award-winning 5G network that connects more people, in more places, than ever before. With T-Mobile’s unique value proposition of best network, best value, and best experiences, the Un-carrier is redefining connectivity and fueling competition while continuing to drive the next wave of innovation in wireless and beyond. Headquartered in Bellevue, Wash., T-Mobile provides services through its subsidiaries and operates its flagship brands, T-Mobile, Metro by T-Mobile, and Mint Mobile.

Telcel

telcel.com

Telcel (Radiomóvil Dipsa) es subsidiaria de América Móvil, uno de los mayores proveedores de comunicaciones celulares de Latinoamérica, grupo líder con inversiones en telecomunicaciones en varios países del continente americano. Telcel es la empresa de telefonía celular líder en México. Nuestra solidez y estructura nos consolidan gracias a la especialización y actualización permanente de todas las personas que trabajamos en ella. Todos nosotros estamos comprometidos a satisfacer de manera eficaz y constante todas las necesidades de comunicación inalámbrica de nuestros clientes.

Reliance Communications

rcom.co.in

Reliance Communications Limited, founded by the late Shri Dhirubhai H Ambani (1932-2002), has Corporate clientele that includes 40,000 Indian and multinational corporations, including small and medium enterprises. Reliance Communications has established a pan-India, Next-Generation, digital network that is capable of supporting best-of-class services spanning the entire communications value chain. Reliance Communications owns and operates the world's largest Next-Generation IP-enabled connectivity infrastructure, comprising fiber optic cable systems in India, the USA, Europe, Middle East and the Asia Pacific region.

Loading…

NEWS

Sangoma CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 01, 2026 10:23 AM

CVE-2025-64328 exploitation impacts 900 Sangoma FreePBX instances

About 900 Sangoma FreePBX systems were infected with web shells after attackers exploited a command injection flaw.

Read Article

February 27, 2026 05:59 PM

900+ Sangoma FreePBX Instances Compromised in Ongoing Web Shell Attacks

Over 900 FreePBX systems remain infected after CVE-2025-64328 exploitation, now listed in CISA KEV amid active attacks.

Read Article

February 27, 2026 01:24 PM

900 Sangoma FreePBX Instances Infected With Web Shells

Hackers exploited CVE-2025-64328, a FreePBX command injection vulnerability, to infect hundreds of instances with web shells.

Read Article

February 04, 2026 08:00 AM

CISA adds SolarWinds, FreePBX and GitLab vulnerabilities to KEV catalog

As reported by Security Affairs, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several critical vulnerabilities...

Read Article

February 04, 2026 08:00 AM

CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting SolarWinds Web Help...

Read Article

September 03, 2025 07:00 AM

Sangoma Patches Critical FreePBX Zero-Day Vulnerability Exploited by Hackers – In-Depth Cybersecurity Report

Recent security bulletins have drawn attention to a critical zero-day vulnerability affecting FreePBX servers, which has been actively...

Read Article

September 03, 2025 07:00 AM

Cybersecurity News: Google: Gmail is secure, Cloudflare blocks largest DDoS attack, Amazon shutters theft campaign

Placeholder. Error Retrieving Episode / Episode Does Not Exist. In today's cybersecurity news… '2.5 billion Gmail users at risk'?

Read Article

August 29, 2025 07:00 AM

FreePBX Servers Targeted by Zero-Day Flaw, Emergency Patch Now Available

The Sangoma FreePBX Security Team has issued an advisory warning about an actively exploited FreePBX zero-day vulnerability that impacts...

Read Article

April 16, 2025 07:00 AM

Meet Alaine Fulton

Today we're excited to be connecting with Alaine Fulton again. If you haven't already, we suggest you check out our prior conversation with...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19756

SUMMARY

A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjectController.java of the component Code Generator. Such manipulation of the argument outputDir/parent/projectPrefix leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-13

Updated

Date2026-08-13

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-19753

SUMMARY

A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. Affected is the function explore_url of the file src/mcp-rdf-explorer/server.py of the component MCP Server. Performing a manipulation of the argument url results in server-side request forgery. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-08-13

Updated

Date2026-08-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-73843

SUMMARY

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.2 and 1.1.2, internal/cluster-gateway/server.go served caller-facing management APIs on the externally reachable agent listener without authentication, allowing network-reachable attackers to invoke /api/proxy/ and /api/exec/ operations, proxy the data-plane Kubernetes API, and execute commands in workload pods in multi-cluster deployments. This issue is fixed in versions 1.0.2 and 1.1.2.

Published

Date2026-08-13

Updated

Date2026-08-13

RISK INFORMATION (Score: 9.6)

cvss3

Base Score: 9.6

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Impact Score

Exploitability

2.8

REFERENCES

CVE-2026-73842

SUMMARY

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.3, 1.1.3, and 1.2.0-rc.2, internal/cluster-gateway/server.go exposed /api/proxy/, /api/exec/, and /api/wirelogs/ on an internal listener without requiring a client certificate or token, allowing any network-reachable caller to read tenant Kubernetes Secrets, mutate workloads, and execute commands across connected data planes. This issue is fixed in versions 1.0.3, 1.1.3, and 1.2.0-rc.2.

Published

Date2026-08-13

Updated

Date2026-08-13

RISK INFORMATION (Score: 9)

cvss3

Base Score: 9.0

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Impact Score

Exploitability

2.3

REFERENCES

CVE-2026-73841

SUMMARY

OpenChoreo is a complete, open-source developer platform for Kubernetes. From 1.2.0-rc.1 until 1.2.0, internal/openchoreo-api/api/handlers/exec.go and internal/openchoreo-api/api/handlers/wirelogs.go authorize component:exec and wirelogs:view using the caller-supplied project query parameter instead of comp.Spec.Owner.ProjectName, allowing a user with a project-scoped grant to execute commands in and read wirelogs from components owned by other projects in the same namespace. This vulnerability is fixed in 1.2.0.

Published

Date2026-08-13

Updated

Date2026-08-13

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

https://github.com/openchoreo/openchoreo/security/advisories/GHSA-52gf-6rpq-fgmx

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…