{
 "slug": "suitecrm",
 "name": "SuiteCRM",
 "tagline": "CRM for sales, marketing and customer service",
 "category": "business-apps",
 "use_cases": [
  "crm",
  "sales-pipeline",
  "customer-service"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "SalesAgility",
  "url": "https://suitecrm.com",
  "license": "AGPL-3.0",
  "license_url": "https://github.com/salesagility/SuiteCRM/blob/master/LICENSE.txt"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "7.15.2",
   "last_build": "2026-10-23",
   "entity_id": "prod-aqn6cc24aehio",
   "ami_alias": "/aws/service/marketplace/prod-aqn6cc24aehio/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-dq5l6uqkh4zji",
   "recommended_instance_type": "t3.large",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "7.15.2",
   "last_build": "2026-10-24",
   "offer_id": "suitecrm",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:suitecrm:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.suitecrm?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/suitecrm/",
  "json": "https://lynxroute.com/products/suitecrm/product.json"
 },
 "release_notes": [
  {
   "version": "7.15.2",
   "title": "SuiteCRM 7.15.2 r2",
   "notes": "* Security: fixes PHP2Shell (CVE-2026-109618, CVE-2026-109619), an unauthenticated remote code execution flaw in PHP, by shipping Ubuntu php8.3 8.3.6-0ubuntu0.24.04.13 (USN-8948-1). Every earlier image of this product carries the vulnerable PHP; replace running instances or run: sudo apt-get update && sudo apt-get install --only-upgrade \"php8.3*\"\n* The application version is unchanged (SuiteCRM 7.15.2); this is a security rebuild\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23",
    "azure": "2026-10-24"
   }
  },
  {
   "version": "7.15.2",
   "title": "SuiteCRM 7.15.2",
   "notes": "* Fix: saving records from the web interface (create/edit, password change) failed with \"Possible Cross Site Request Forgery (XSRF) Attack Detected\". Records now save normally\n* The application version is unchanged; this build also refreshes the underlying operating system image\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23",
    "azure": "2026-10-24"
   }
  },
  {
   "version": "7.15.2",
   "title": "SuiteCRM v-7.15.2",
   "notes": "* Re-release of SuiteCRM 7.15.2. The application version is unchanged; this build refreshes the underlying operating system image\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23",
    "azure": "2026-10-24"
   }
  },
  {
   "version": "7.15.2",
   "title": "SuiteCRM v7.15.2",
   "notes": "* SuiteCRM updated to 7.15.2 - maintenance release on the 7.15.x line; see the upstream release notes at https://docs.suitecrm.com/admin/releases/7.15.x/ for the full list of issues addressed\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23",
    "azure": "2026-10-24"
   }
  },
  {
   "version": "7.15.1",
   "title": "SuiteCRM v7.15.1",
   "notes": "* Hardening re-release of SuiteCRM 7.15.1 - upstream version unchanged\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-07-01"
   }
  }
 ],
 "release_history": [
  {
   "version": "7.15.2",
   "aws": "2026-10-23",
   "azure": "2026-10-24"
  },
  {
   "version": "7.15.1",
   "aws": "2026-07-01"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-aqn6cc24aehio/latest \\\n  --instance-type t3.large --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer suitecrm --plan payg-gen2\naz vm create -g my-rg -n suitecrm --size Standard_D2s_v3 \\\n  --image lynxroute:suitecrm:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "SuiteCRM is a self-hosted Customer Relationship Management platform implemented in PHP 8.3, served by Nginx with PHP-FPM over MySQL 8.0. A community-driven successor to SugarCRM Community Edition, it covers the full revenue pipeline - accounts, contacts, leads, opportunities, cases, campaigns, quotes, calendar, projects, reports, and dashboards - with role-based access control, security groups, multi-currency support, custom modules and fields via Studio, workflow automation, a built-in scheduler for background jobs, and email-to-record handling. SuiteCRM connects to any standard SMTP relay (Amazon SES, SendGrid, Postmark, Mailgun, or self-hosted Postfix), reads inbound mail over IMAP, supports SSO via OAuth2 and LDAP, and exposes a V8 REST API for integrations. This image ships the AGPL-3.0 edition and runs entirely on the EC2 instance you launch - no external account, subscription, license key, or activation handshake is required. All data stays inside your own AWS account.",
  "image_adds": "Security hardening:\n* Per-instance SuiteCRM admin password generated on first launch and written to /root/suitecrm-credentials.txt (mode 0600) - never baked into the image\n* Silent install runs once on first launch and is then disabled - no setup wizard exposed on the public internet\n* MySQL 8.0 listens on 127.0.0.1 only; the database user password is generated per instance\n* PHP-FPM workers and MySQL InnoDB buffer pool auto-sized to the instance RAM at launch\n* Background scheduler runs automatically as a managed system service - no manual cron setup\n* Session handling tuned for cloud networking, so users are not logged out behind proxies or changing client IP addresses\n* Self-signed TLS certificate generated during the image build - HTTPS on TCP 443 from launch, HTTP on TCP 80 redirects to HTTPS\n* UFW firewall pre-configured - only TCP 22 and 443 are exposed\n* fail2ban with default SSH jail; AppArmor with default Ubuntu profiles\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}