Availability and pricing

Cloud	Version	Software price	Last build
AWS Marketplace EC2 AMI · all commercial regions	7.15.2	$0.05/hr Recommended instance: t3.large · 5-day free trial	2026-10-23	Listing ↗
Azure Marketplace VM image · plan payg-gen2 · Gen2	7.15.2	$0.028/vCPU/hr Recommended VM: Standard_D2s_v3	2026-10-24	Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts

Base OS	Ubuntu 24.04 LTS
Hardening	CIS Level 1, Ubuntu 24.04 LTS (tailored)
License	AGPL-3.0
Upstream	SalesAgility
Machine-readable	product.json · catalog.json

What is SuiteCRM

SuiteCRM is a self-hosted Customer Relationship Management platform implemented in PHP 8.3, served by Nginx with PHP-FPM over MySQL 8.0. A community-driven successor to SugarCRM Community Edition, it covers the full revenue pipeline - accounts, contacts, leads, opportunities, cases, campaigns, quotes, calendar, projects, reports, and dashboards - with role-based access control, security groups, multi-currency support, custom modules and fields via Studio, workflow automation, a built-in scheduler for background jobs, and email-to-record handling. SuiteCRM connects to any standard SMTP relay (Amazon SES, SendGrid, Postmark, Mailgun, or self-hosted Postfix), reads inbound mail over IMAP, supports SSO via OAuth2 and LDAP, and exposes a V8 REST API for integrations. This image ships the AGPL-3.0 edition and runs entirely on the EC2 instance you launch - no external account, subscription, license key, or activation handshake is required. All data stays inside your own AWS account.

What the Lynxroute image adds

Security hardening:

Per-instance SuiteCRM admin password generated on first launch and written to /root/suitecrm-credentials.txt (mode 0600) - never baked into the image
Silent install runs once on first launch and is then disabled - no setup wizard exposed on the public internet
MySQL 8.0 listens on 127.0.0.1 only; the database user password is generated per instance
PHP-FPM workers and MySQL InnoDB buffer pool auto-sized to the instance RAM at launch
Background scheduler runs automatically as a managed system service - no manual cron setup
Session handling tuned for cloud networking, so users are not logged out behind proxies or changing client IP addresses
Self-signed TLS certificate generated during the image build - HTTPS on TCP 443 from launch, HTTP on TCP 80 redirects to HTTPS
UFW firewall pre-configured - only TCP 22 and 443 are exposed
fail2ban with default SSH jail; AppArmor with default Ubuntu profiles
CVE scan - every image is scanned for vulnerabilities before release

OS hardening (CIS Level 1):

CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
auditd, SSH hardening, kernel hardening, IMDSv2 enforced

Compliance artifacts:

SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
CIS Conformance Report at /etc/lynxroute/cis-report.html
CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md

Deploy

Launch in one command

Credentials are generated at first boot and written to /root/suitecrm-credentials.txt.

AWS CLIAzure CLI

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-aqn6cc24aehio/latest \
  --instance-type t3.large --key-name my-key --security-group-ids sg-xxxxxxxx

# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer suitecrm --plan payg-gen2
az vm create -g my-rg -n suitecrm --size Standard_D2s_v3 \
  --image lynxroute:suitecrm:payg-gen2:latest --admin-username azureuser --generate-ssh-keys

Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

SuiteCRM 7.15.2 r2

AWS · 2026-10-23Azure · 2026-10-24

Security: fixes PHP2Shell (CVE-2026-109618, CVE-2026-109619), an unauthenticated remote code execution flaw in PHP, by shipping Ubuntu php8.3 8.3.6-0ubuntu0.24.04.13 (USN-8948-1). Every earlier image of this product carries the vulnerable PHP; replace running instances or run: sudo apt-get update && sudo apt-get install --only-upgrade "php8.3*"
The application version is unchanged (SuiteCRM 7.15.2); this is a security rebuild
Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build