HOMER
Three security advisories in three days as HOMER locks down the query layer it just opened up.
A side-by-side editorial comparison of FreeSWITCH and 3CX — release velocity, themes, recent moves, and the top alternatives to consider.
With the legacy purge done, FreeSWITCH spent 1.11.2 bounds-checking everything that parses bytes
FreeSWITCH shipped 1.11.2 in August 2026, three months after the 1.11.0 branch cut that removed roughly thirty modules and migrated the regex engine to PCRE2. Where 1.11.0 was about deleting surface area, 1.11.2 is about auditing what remains: nearly every bug line is a bounds or length check in a parser — STUN attributes, base64 decode, XML entity decoding, RTMP H.264 NAL units, XML-RPC WebSocket frames, MSRP body lengths. Alongside the fixes it adds an interface allowlist and turns on DTLS client-certificate verification against the SDP fingerprint plus opt-in STUN MESSAGE-INTEGRITY checks on inbound ICE. The build system continues moving off self-hosted infrastructure onto GitHub-published artifacts and upstream packages.
3CX is bolting AI onto the PBX and rewriting its licensing to match
Three things are moving together: V20 Update 10 landed in alpha with MCP support and a dedicated AI Server, partner and distributor NFR subscriptions were repackaged from ENT+ into an AI Edition, and a separate post covers how to size AI Server hardware for response time. Ordinary platform work continues underneath, with portal changes allowing self-managed edition downgrades and hosting removal. Feed bodies are truncated at source, so only the leads are visible.
FreeSWITCH shipped 1.11.2 in August 2026, three months after the 1.11.0 branch cut that removed roughly thirty modules and migrated the regex engine to PCRE2. Where 1.11.0 was about deleting surface area, 1.11.2 is about auditing what remains: nearly every bug line is a bounds or length check in a parser — STUN attributes, base64 decode, XML entity decoding, RTMP H.264 NAL units, XML-RPC WebSocket frames, MSRP body lengths. Alongside the fixes it adds an interface allowlist and turns on DTLS client-certificate verification against the SDP fingerprint plus opt-in STUN MESSAGE-INTEGRITY checks on inbound ICE. The build system continues moving off self-hosted infrastructure onto GitHub-published artifacts and upstream packages.
The 1.11.x line reads as a deliberate two-step: cut the maintenance surface, then harden what is left. Having removed thirty modules, the project can now afford to audit the media and signaling paths line by line, and the pattern of fixes — untrusted length fields reaching memory writes — suggests a systematic pass rather than incremental reports. The parallel thread is dependency modernization: mod_v8 moved from a custom v8-6.1 fork to upstream libnode, SpanDSP and libvpx were bumped, and Windows builds now pull pre-compiled FFmpeg and libcodec2 rather than building them. Both threads point the same direction — less bespoke code to own.
Expect the hardening pass to continue into the remaining parsers, with the opt-in STUN MESSAGE-INTEGRITY check becoming default once operators have shipped through a release. The build-system migration off files.freeswitch.org appears partway done, so the next release likely finishes moving the remaining assets to GitHub-hosted artifacts.
Three things are moving together: V20 Update 10 landed in alpha with MCP support and a dedicated AI Server, partner and distributor NFR subscriptions were repackaged from ENT+ into an AI Edition, and a separate post covers how to size AI Server hardware for response time. Ordinary platform work continues underneath, with portal changes allowing self-managed edition downgrades and hosting removal. Feed bodies are truncated at source, so only the leads are visible.
The AI Server is the informative part: 3CX is offering inference customers run themselves rather than routing calls into a hosted model, which matches a base that already self-hosts its phone system. Licensing is being reorganized on the same axis, with the AI Edition displacing the old enterprise tier in the channel before it reaches general commercial tiers. Recent updates around it, including emailed AI agent transcripts and markdown knowledge sources, all feed the same AI agent surface.
Update 10 should move from alpha to general availability with the AI Edition packaging following into the commercial tiers, given the channel has already been switched over. What MCP actually exposes is not determinable from these entries because the feed truncates every body.
Other Meetings products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either FreeSWITCH or 3CX.
Three security advisories in three days as HOMER locks down the query layer it just opened up.
Switcher Studio's tracked feed is search-driven streaming education, not product news.
Four parallel branches, one fix set — Asterisk's changelog is a backport ledger, not a feature list.
CallHippo is arguing that compliance, not features, is what sells business calling.
A UCaaS marketing blog split between buyer education and channel-partner enablement.
Restream is pushing past creator multistreaming into webinars and agent control.
See all FreeSWITCH alternatives → · See all 3CX alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. 3CX is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. 3CX is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Meetings products to evaluate alongside.
Top FreeSWITCH alternatives in Meetings are ranked by recent ship velocity. Browse the "FreeSWITCH alternatives" section above for the current picks, or visit /alternatives/freeswitch for the full list with editorial commentary on each.
Top 3CX alternatives in Meetings are ranked by recent ship velocity. Browse the "3CX alternatives" section above for the current picks, or visit /alternatives/3cx for the full list with editorial commentary on each.