The 3CX fleet management platform, built inside an MSP
Run every 3CX you manage. Open none of them.
Users, ring groups, digital receptionists, hold music, caller ID, updates, licenses, phones, holidays, voice prompts, backups. The daily work of every customer PBX happens in Sikurd, with roles you control, while the 3CX admin passwords stay in the vault. Flat $5 an instance, and your first 3 are free.
The demo is a real fleet. No signup, no email, resets nightly.
Instances
25 instances
Day-2 operations
The daily work, from one screen.
The things you actually do every week on customer PBXs. Not nine web consoles and a spreadsheet. One dashboard, one login, every instance.
Update manager
See every pending 3CX update across the fleet, pick a maintenance window, and push updates to one instance or fifty. Stable and beta channels per instance.
Fleet view of versions, one-click scheduling, per-instance channels
Read how it worksLicense management
Expiries, simultaneous-call usage, and edition for every customer in one table, with renewal alerts before a client goes dark and a revenue forecast across your partner book.
Renewal alerts before expiry, partner revenue forecasting
Read how it worksPhone management and updates
Every provisioned handset on every PBX, its model and firmware, in one inventory. Reboot, reprovision, or push firmware updates per model across every instance, without touching a single web console.
Yealink, Fanvil, Grandstream and more. Firmware one version behind is one click fixed.
Read how it worksHoliday scheduling
Push holiday sets to any group of PBXs at once, or send clients a no-login link so they pick their own dates and you just click approve.
Regional holiday libraries, client requests, AI holiday greetings
Read how it worksUser management
Create and edit users on any PBX from the portal. New extensions resolve to the next available number per department automatically, with voicemail, groups, and queue membership set in the same flow.
Next-available extension resolution, per-department numbering, one form
Global search
One search box over the whole fleet. Type a name, an extension, a MAC address, or a company and land on the right instance, user, or phone in two keystrokes, from anywhere in the app.
Instances, extensions, phones, and customers, all in one index
AI Voice Studio
Studio-quality prompts. No studio, no API key.
Type a script, pick a voice, hear it, push it to the PBX. ElevenLabs voices are built into Sikurd, so there is nothing to sign up for and no API key to bring. Voicemail greetings, queue intros, IVR menus, and holiday messages in minutes.
For your techs
- Generate any prompt from text, preview it, and assign it to a queue, receptionist, or extension in one flow.
- Audio converts and normalizes to 3CX's WAV format automatically. No Audacity, no format guesswork.
- Holiday greetings generate alongside the holiday itself, so the message and the schedule ship together.
For their clients
Give each customer a scoped login and they create their own voicemail messages, queue intros, and digital receptionist greetings with the same AI voices, without opening a ticket with your helpdesk.
They can only reach their own PBX, only the tools you allow, and every change lands in the audit log. Fewer tickets for you, faster turnaround for them.
Read how client self-service worksBackups you can prove
Two layers of offsite. Included, and opt-in.
Native 3CX backups protect a PBX until the PBX itself is the problem. Sikurd adds two opt-in layers per instance, at no extra platform cost: encrypted SFTP offsite storage, and managed backups that are restore-tested on isolated hardware.
SFTP remote storage
One click provisions a dedicated, credentialed SFTP destination for any instance. The PBX's own scheduled backups stream straight to encrypted offsite storage, so a dead server never takes its backups with it.
Opt-in per instance. Included in the flat price.
Managed verified backups
Sikurd triggers the capture, stores it encrypted, and on a rotation actually restores it on an air-gapped machine, counting extensions, trunks, and voicemail against production. Every test issues a tamper-evident certificate you can send to the client.
Opt-in per instance. Included in the flat price.
Visibility you can edit
Every call path, drawn for you.
No more clicking through nine 3CX screens to answer where a number rings on a holiday. Sikurd renders the whole routing graph, DIDs to IVRs to queues to people, and lets you edit queues, ring groups, and receptionists in place.
Call Flow · Acme Cardiology · now: Office hours
Generated live from the PBX. Filter by office hours, after hours, or holidays.
Quality, measured
Voice quality, measured from where callers are.
Geographic probes ping every PBX on every poll and infer a MOS score with the ITU-T E-model. When a client says calls sound bad from Chicago, you already have the graph, and the alert fired before they called.
Inferred MOS · last poll · per region
- US East · Virginia4.31
- US West · Oregon4.24
- EU Central · Frankfurt4.18
- APAC SE · Singapore3.87
Pin the region your callers actually dial from. A Frankfurt PBX serving a US workforce is judged from US East.
iOS app on the App Store
The whole fleet, in your pocket.
The Sikurd iOS app puts the same instance list, alerts, and actions on your phone. Push notifications fire the moment an alert is created, and you can acknowledge, mute, or escalate without opening a laptop.
- Native push the second a PBX drops, typically seconds after the outage starts.
- Triage from anywhere: acknowledge, mute, or escalate an alert straight from the lock screen.
- Same login, same roles, same audit trail. No second app to configure, no extra license.
Free with your Sikurd account. Sign in and your fleet is already there. Android via the web app.
Built for the whole bench
Designed so level-one techs run it.
- Your bench works in Sikurd with roles you control. Nobody hands a new tech a 3CX admin password, and a first-day hire can still push an update, fix a greeting, or schedule a holiday.
- Guardrails everywhere: role-based access, confirmation on anything destructive, and automatic rollback on risky changes.
- Every change is audit-logged with who, when, and before-and-after, so seniors can delegate without losing the thread.
- Getting started is a connect wizard, not a project. Onboarding calls are never required, and always available when you want one.
- Help lives inside the app: built-in chat and ticketing for assistance and feature requests, answered by the people who build Sikurd.
The rest of the platform
And the whole monitoring stack underneath.
One flat price. Every capability included. Nothing gated behind a sales call.
Alerts that self-resolve
Down, degraded, license, trunk, disk, MOS. Auto-resolve, mutes, escalation, and voice-call paging for the 3 a.m. ones.
Self-healing services
Stopped 3CX services restart automatically, with flap protection and a whitelist that never drops live calls.
SBC version parity
An SBC a major version behind its PBX is a future outage. Sikurd names it before the next update breaks registration.
Config templates and drift
Keep a baseline across the fleet and see every setting that wanders from it, with safe, reversible remediation. Shipping next week.
Standby server checks
DR servers checked for reachability, replication freshness, and version parity with the primary.
Stale extension reports
Extensions nobody has registered in 30 days are a license-reduction conversation. Sikurd keeps the list.
Emergency dialing readiness
911 and 933 must exist and route to a live trunk on every PBX. Sikurd checks, so you never find out during an emergency.
Client access and status pages
Scoped client logins and white-label status pages, so customers see their own system and nothing else.
PSA and docs integration
Autotask tickets that open and close themselves, IT Glue docs that write themselves, webhooks for everything else.
Plays well with Autotask, IT Glue, Slack, Microsoft Teams, webhooks and Zapier, and Backblaze B2.
Security
Tested by people paid to break it.
Sikurd holds credentials to phone systems, so we treat our own security as a product feature, not a policy document.
Penetration tested by Aikido
The platform has been through an independent penetration test by Aikido Security, covering authentication, tenant isolation, and the client self-service surfaces. Findings were remediated.
Continuous testing with Rafter
Every code change runs through Rafter security analysis, static analysis, dependency and secrets scanning, plus a security review, before it goes live. Not an annual audit; a gate on every single change.
Under the hood: PBX credentials encrypted with AES-256-GCM, MFA required for admin roles, tenant-scoped access on every query, and an append-only audit log of every change.
Pricing
$5 / instance / month
Flat. Every feature, including SFTP remote storage and managed verified backups, which you switch on per instance whenever you want them.
Your first 3 instances are free forever. Month-to-month, no per-feature tiers, no sales calls.
For scale: on per-simultaneous-call pricing, a typical 8-SC system runs about $10 a month. Sikurd is $5. Flat.
Built inside an MSP that runs 3CX all day.
Every feature exists because a real fleet needed it, usually at 3 a.m. Open the demo and poke around a working fleet. It resets every night.
Open the live demo