Report security issues privately to tommy@techfinity.tech. Please do not publish exploit details before a fix is available.

Recommended deployment practices:

• Keep FreePBX, Asterisk, PHP, and the host OS patched.
• Use HTTPS for all web access.
• Restrict administrative access by firewall/VPN where practical.
• Use strong fax portal passwords and disable unused accounts.
• Protect the fax spool and backups because fax documents may contain sensitive information.
• Review Diagnostics after installation and upgrades.