PBXGuard documentation

This page and your account

This page is the overview and the answers. Once you sign in, your account holds the detailed, step-by-step guide for every screen.

Getting help

• Documentation — this page and the in-app guides, on every plan and during the free trial.
• Starter — email support, best effort.
• Pro — email support, first response within 24 business hours.
• Premium — priority email support, first response within 4 business hours.
• Support is in English, by email, Monday to Friday, 9:00–18:00 (UTC+4). Your support contact is shown in your account. Before you sign up, write to contact@pbxguard.com.

What you need

A 3CX PBX running 3CX V20 or later — in the cloud or on-premises — reachable over HTTPS, and a System Owner account on it — System Owner rights are required for full monitoring and remote actions. If that account uses two-factor authentication, you'll also need its authenticator secret. Nothing is installed on the 3CX PBX: PBXGuard is agentless and connects to its management interface over HTTPS.

Allow our IP first

PBXGuard connects from a fixed public IP. It's shown to you when you add a 3CX PBX or import a CSV file. Allow it in the 3CX Console Restrictions before you add the 3CX PBX — and in any external firewall in front of it. A blocked IP is the most common reason a connection fails.

Adding a 3CX PBX

Enter the 3CX PBX's management URL and the System Owner login (plus the authenticator secret if needed), test the connection, and save. Monitoring starts right away.

Your fleet

Add 3CX PBXs one by one, or import many at once from a CSV file.

Your free trial

Sign-up gives you the full Pro plan on up to 3 3CX PBXs for 7 days, with no credit card. When it ends, nothing is charged — see Billing & plans.

What PBXGuard watches

Every 3CX PBX in one live view: availability and last-seen, latency, CPU, RAM and disk, 3CX services, trunks, SBCs, bridges, extensions and system extensions, active and simultaneous calls, SSL and license expiry, 3CX version, backup age and recording storage — across the Dashboard, the Monitored Systems table, a World Map colour-coded by health, and Wall View, a full-screen NOC display for the wall screens of your operations centre.

How often data refreshes

Standard on Starter, Frequent on Pro, High-frequency on Premium. You can also refresh a 3CX PBX on demand.

History & reports

History is kept for 7 days on Starter, 1 month on Pro and 6 months on Premium. Pro and Premium add PDF reports.

Alerts you control

PBXGuard ships with 17 built-in rules (one coming in Q4 2026) covering health, telephony, SSL and backups — the full list is on the Features page. For each rule you set the threshold, the severity (Info, Warning, Critical) and the duration: how long the condition must last before the rule fires, so a brief spike never wakes you. Rules apply fleet-wide on every plan; Pro and Premium also let you tune any rule for a specific 3CX PBX.

Fixes itself, or fixes on command

A rule can carry an automatic action — restart a service or a trunk, reboot the 3CX PBX or run a backup — that runs when the problem persists. The same actions, plus version update and blocked-IP management, are available by hand. Pro and Premium add bulk actions; Premium adds scheduled actions.

Where alerts reach you

By email — you choose the recipients and which severities are emailed, and a resolved notice follows when the problem clears — and in the Alerts Center, where you acknowledge and resolve alerts. Pro and Premium add webhooks to your PSA, Slack or RMM.

Pausing alerts

Planned work on a 3CX PBX? Pause alerts on it for the duration you choose. Monitoring keeps running, only notifications stop, the pause is recorded in the audit log, and alerts resume on their own.

A tool with this much access has to earn it

To monitor and control your 3CX PBXs, PBXGuard stores their System Owner credentials and can reboot them remotely. Security is the foundation, not an option.

How your account and data are protected

Two-factor authentication — available to every user, on every plan. Encrypted credentials — 3CX PBX logins and authenticator secrets are encrypted at rest and never shown in clear text. Encrypted connections — everything travels over HTTPS, between you and PBXGuard and between PBXGuard and your 3CX PBXs. Audit log, on every plan — every action, manual or automatic, with who or which rule did what, and when. Pauses are recorded too. Team roles — on Pro, teammates and sub-accounts each have a role, with access to all your 3CX PBXs. On Premium, you also choose, one by one, which 3CX PBXs each teammate or client sub-account can see.

Where your data lives

Shared hosting is fully isolated and runs in the region you choose — Europe, North America, Asia or South Africa. When a client needs infrastructure shared with no one, a dedicated server keeps your fleet on a server that's yours alone.

Deleting your account

From your account settings, you can delete your account yourself. After you confirm, deletion is immediate and permanent: your account, every 3CX PBX and its stored credentials, your sub-accounts, your history and your reports are erased. Invoices and payment records are kept, as the law requires — download your invoices first, as you'll lose access to them. Removing one or several 3CX PBXs deletes those 3CX PBXs and their data without closing your account.

One server. Yours alone.

A dedicated server runs your monitoring data and stored 3CX PBX credentials on single-tenant infrastructure — no shared tenancy, no neighbours.

What you get

Single-tenant by design — a server that's only yours, with room to grow. The region you choose — Europe, North America, Asia or South Africa, selected when you add the server. A fixed IP of your own — one stable address, used by your server only, to allow in your 3CX Console Restrictions and firewalls.

Price and set-up

$15/mo flat, whatever the size of your fleet, and one dedicated server per account. It's available on any paid plan, not during the free trial. It's set up for you and live within 48 business hours.

Removing it

Remove the dedicated server from your account and it ends on your next billing date; your 3CX PBXs move back to shared hosting.

How billing works

One flat rate per 3CX PBX, per month, with no tax added. All your 3CX PBXs bill together on one monthly date, in USD, as a single charge. You're billed on your Paid quantity — the number of 3CX PBXs you pay for — not on the number connected. A change that raises your monthly amount applies immediately; one that lowers it applies from your next billing date. Plans, prices and the full comparison are on the Pricing page.

A 3CX PBX won't connect

Check, in this order: our IP is allowed in the 3CX Console Restrictions and in any external firewall; the management URL is correct, over HTTPS, on the right port; the login is a System Owner account; and, if that account uses 2FA, the authenticator secret is entered. Test connection confirms the fix. The in-app guide walks through each check.

"Last seen" is lagging, or a 3CX PBX shows offline

Usually connectivity: the 3CX PBX is down or unreachable, or a firewall or Console Restrictions change now blocks our IP. Once it's reachable again, refresh it on demand.

License, SSL or backup alerts

They come from the built-in rules — a license or certificate nearing expiry, or a backup older than your threshold. Fix the cause on the 3CX PBX and the alert resolves on its own.

Paused or greyed out?

Alerts paused — someone paused alerts on the 3CX PBX. Monitoring is still running; only notifications are off. Resume anytime, or let the pause end. Not monitored — a billing cause: trial ended, payment missing, or more 3CX PBXs connected than paid for. The 3CX PBX is greyed out at its last readings. Resolve the cause and it comes back.