Email Servers · Reviewed 27 Oct 2026

Stalwart Mail & Collaboration Server

Open-source mail and collaboration server with built-in spam filtering.

free tier · stalw.art ↗

Paid against free › Email Servers › Stalwart Mail & Collaboration Server

Stalwart Mail & Collaboration Server at a glance

Overview

01

Summary

The useful answer before the supporting detail.

Stalwart is an open-source mail and collaboration server that covers email, calendars, contacts, and file storage through protocols like JMAP, IMAP, SMTP, CalDAV, and CardDAV S1. It is used by governments, universities, hosting providers, and enterprises to replace multi-component mail stacks with a single integrated system S1. Its main practical value is reducing operational complexity while providing built-in spam and phishing filtering and clustering support S1 S109.

02

Product identity and positioning

Name, category, positioning, audience, and first-party claims.

  • Identity: Stalwart Labs builds Stalwart, an open-source mail and collaboration server S1.
  • Core purpose: Replaces multi-component mail stacks with a single product covering mail and collaboration protocols S1.
  • Intended users: Governments, universities, hosting providers, and enterprises S1.
  • Product scope: A single server covering JMAP, IMAP, POP3, SMTP, CalDAV, CardDAV, and WebDAV S1.
  • Positioning: A modern, all-in-one mail and collaboration server S1.
  • Claimed distinction: Designed for clustering from day one, not retrofitted S109.
03

Use cases and audiences

Who the product serves and the jobs it is designed to handle.

AudiencePractical use case
GovernmentsDeploy a secure, self-hosted mail and collaboration server S1.
UniversitiesProvide email, calendar, and contacts to students and staff S1.
Hosting providersOffer multi-tenant mail hosting with clustering and automation S109.
EnterprisesReplace legacy mail stacks with a single integrated system S1.

Features

09

Features and capabilities

Core functions and evidence-backed product capabilities.

CapabilityWhat it does
Email protocolsSupports JMAP, IMAP, POP3, SMTP, and WebDAV for email and file access S1.
CollaborationProvides calendar, contacts, and file storage via CalDAV, CardDAV, and WebDAV S31.
Spam filteringBuilt-in spam filter using FTRL-Proximal algorithm and feature hashing S8.
AuthenticationSupports internal directory, OIDC, LDAP, and SQL for authentication S25.
ClusteringSupports peer-to-peer and third-party coordination modes for high availability S29.
Management APIExposes configuration via JMAP API, with CLI for scripting and automation S88.
Encryption at restProvides encryption at rest for stored data S8.
10

Integrations and ecosystem

Connected products, exports, APIs, and workflow compatibility.

Integration or interfaceTypeWhat it enables
LDAPIntegrationIntegrates with existing identity infrastructure for authentication S25.
OIDCIntegrationEnables single sign-on with external identity providers S25.
SQL databasesIntegrationAllows directory and storage backends using SQL S25.
Cloudflare, Route53, Google Cloud DNSIntegrationAutomates DNS management for domains S109.
SpamAssassin, RSPAMDIntegrationIntegrates via milter for enhanced spam filtering S8.
PyzorIntegrationCollaborative digest-based spam filtering S8.
JMAP APIAPIProvides configuration and data access via JSON-based API S88.
CLI (stalwart-cli)APIScripts and automates server management S88.

Pricing

11

Pricing and plans

Published plans, free access, trials, credits, and pricing limitations.

Plan or offerVerified price and billingIncludedLimits
CommunityFreeNot establishedNo mailbox limit; community support S1
Enterprise (25–499 mailboxes)$2.40 / €2.00 per mailbox per year, annual or monthlyNot establishedMinimum 25 mailboxes; unlimited domains; premium support from 150 mailboxes S1
Enterprise (500–999 mailboxes)$2.04 / €1.70 per mailbox per year, annual or monthlyNot establishedEach tier billed at its own rate S1
Enterprise (100,000+)Contact salesNot establishedQuote S1

Competition

12

Competitive landscape

Domains competing for the same organic search demand.

Sampled competitors

CompetitorFirst-page appearancesSampled queriesAverage positionQueries observed
reddit.com325stalwart, mailserver
axigen.com214mailserver
oed.com111stalwart
contabo.com111mailserver
oxfordlearnersdictionaries.com113stalwart
gatefy.com113mailserver
synology.com115mailserver
nytimes.com116stalwart
instagram.com117stalwart
en.wikipedia.org118mailserver

Website intelligence — Collected evidence

Customers, testimonials, and first-party review claims

No supporting public-page evidence was collected for this category.

Independent review sources discovered

No links to supported independent review platforms were discovered on the collected pages.

13

AI visibility

Measured ChatGPT and Google AI mentions with cited sources.

AI-assistant referral traffic

  • Estimated current generative-AI referral share: 1.3%
MonthSource
—All AI assistants
—All AI assistants

Website intelligence — Collected evidence

Site-stated AI capabilities

Page typeEvidenceSource
otherStop unwanted mail and phishing at SMTP time, with a built-in classifier, blocklists, sender reputation and AI-driven analysis.https://stalw.art/

These are first-party product claims, not independent measurements of AI-search visibility.

14

Marketing opportunities

Actions calculated directly from the collected evidence.

OpportunityRecommended actionEvidence
Striking-distance keywordVolume 1,000 · https://stalw.art/docs/storage/backends/foundationdb/
Important pagehttps://stalw.art/docs/storage/backends/foundationdb/ · 1 sampled keywords · best position 4
Competitor gap3 first-page appearances across stalwart, mailserver

Website intelligence — Collected evidence

Website evidence gaps

  • customers: no usable public page was collected; verify whether the site publishes this evidence.
  • reviews: no usable public page was collected; verify whether the site publishes this evidence.
  • changes: no usable public page was collected; verify whether the site publishes this evidence.
  • identity: no usable public page was collected; verify whether the site publishes this evidence.
  • technical: no usable public page was collected; verify whether the site publishes this evidence.

Trust and proof

15

Customers, proof, and reviews

Published proof, customer signals, and review evidence.

Independent reviews

No citation-grounded independent review links were found.

Customer proof

No named customers, testimonials, or customer case studies were found.

Independent mentions

External links were grounded in one live web search. Search snippets are leads, not independently scraped page content; rejected links remain available in Review evidence.

16

Company, security, and trust

Ownership, policies, security signals, and public trust evidence.

SignalFindingSource
Company and ownershipStalwart Labs was founded in July 2019. Work on the Stalwart server began in September 2021, and the first public release shipped in September 2022. Stalwart is the most-starred mail server project on GitHub, with tesource
Contact and supportNot published on the collected pages.—
Legal and privacyCancellation reverts to Community. Enterprise-only features are disabled, but no data is lost and service continues without interruption.source
Security and complianceRuns as one node or as a cluster across regions. Memory-safe Rust, encrypted-at-rest mailboxes, automatic TLS, and transport security verified end to end.source
Uptime and status pageNot published on the collected pages.—
Domain registered2020-12-25—
Domain expires2031-12-25—

Not found on the collected pages: contact and support, uptime and status page. This only means Scout did not find it on the pages it read; it says nothing about the company itself.

17

Documentation and product updates

Help resources, product guidance, and visible changes over time.

Resource or updateTypeWhat is availableDate or freshness
Product FAQFAQAnswers common product, workflow, pricing, privacy, ownership, API, and team questions. (source)Not dated
Installation / StalwartDocumentationInstalling Stalwart. (source)Not dated
Docker / StalwartDocumentationDocumentation is publicly available. (source)Not dated
Linux / MacOS / StalwartDocumentationDocumentation is publicly available. (source)Not dated
Windows / StalwartDocumentationDocumentation is publicly available. (source)Not dated
Overview / StalwartDocumentationDocumentation is publicly available. (source)Not dated
Overview / StalwartDocumentationDocumentation is publicly available. (source)Not dated
Overview / StalwartDocumentationDocumentation is publicly available. (source)Not dated

Not found in the collected public sources: public roadmap, changelog or release notes, status page, separate help center or knowledge base.

Technical

18

Technical and delivery signals

Delivery model, platforms, API, data ownership, reliability claims and release activity.

SignalFindingSource
Delivery model (cloud, self-hosted, desktop, browser extension)Self-hosted server with installation scripts for Linux, macOS, Windows, and Docker S16 S22 S11.S16 S22 S11
Platforms and appsSupports Linux, macOS, Windows, and web-based admin UI S16 S22 S8.S16 S22 S8
API and extensibility (API, SDK, webhooks, MCP, plugins)Exposes JMAP API and CLI for automation S88.S88
Data ownership and exportData stored in configurable backends; backup depends on storage backend S8.S8
Performance and reliability claimsDesigned for clustering and high availability S29.S29
Release activityCurrently in version 0.x, with potential changes before 1.0 S8.S8
19

Measured infrastructure

Domain, certificate, and hosting signals, measured directly.

SignalFinding
Domain registered2020-12-25 — NameCheap, Inc.
Domain expires2031-12-25
First archived2021-11-01 — web archive
TLS certificateGoogle Trust Services, valid, expires 2027-01-10
Security headersX-Content-Type-Options, X-Frame-Options, Referrer-Policy
Headers not servedHSTS, CSP
Server headercloudflare
Mail handled bymail.stalw.art
Nameserversvern.ns.cloudflare.com, chin.ns.cloudflare.com

Not measurable: rdap: exceeded the overall budget; wayback: exceeded the overall budget; tls: exceeded the overall budget; dns: exceeded the overall budget; headers: exceeded the overall budget. A gap here means the lookup was unavailable, not that the finding is negative.

20

Technical site audit

A bounded multi-page crawl with page-level issues and URLs.

Scout — Bounded technical crawl

  • Pages crawled: 15 of 15 maximum
  • Technical health: 99/100
  • Critical issues: 0
  • Warnings: 2
  • Notices: 1

Issues

SeverityIssueValueAffected URL
noticeMeta description length should be reviewed178https://stalw.art/
warningMissing meta description—https://stalw.art/docs/install/platform/linux/
warningMissing meta description—https://stalw.art/docs/install/platform/windows/

Crawled pages

StatusTitleH1sWordsResponseURL
200Stalwart Mail & Collaboration Server11258118 mshttps://stalw.art/
200Stalwart Mail Server \Stalwart Labs1137664 ms
200Stalwart Collaboration Server \Stalwart Labs1108340 ms
200Stalwart MTA \Stalwart Labs1105062 ms
200Anti-spam and Phishing Protection \Stalwart Labs1125084 ms
200Architecture \Stalwart Labs187828 ms
200Integrations \Stalwart Labs195946 ms
200Managed Email \Stalwart Labs1105943 ms
200Migration \Stalwart Labs193269 ms
200Enterprise Edition \Stalwart Labs1163147 ms
200Community Edition \Stalwart Labs160245 ms
200Compare editions \Stalwart Labs1151570 ms
200Pricing \Stalwart Labs196366 ms
200Linux / MacOS \Stalwart1432446 ms
200Windows \Stalwart1437277 ms

This is a bounded Scout crawl. Core Web Vitals and Lighthouse scores are not claimed unless a dedicated performance audit is connected.

21

Search Console and Analytics

First-party search and behavioral data connection state.

Modeled acquisition channels

ChannelEstimated share
direct29.0%
search36.6%
search organic36.6%
search paid0.0%
social3.0%
social organic3.0%
social paid0.0%
referrals29.0%
paid referrals0.0%
mail1.1%
gen ai1.3%
affiliate0.0%
other0.0%

First-party connections

IntegrationStatusData available after connection
Google Search ConsoleNot connectedClicks, impressions, CTR, average position, queries, pages, countries, and devices
Google AnalyticsNot connectedOrganic sessions, engagement, landing pages, conversions, geography, and devices

No first-party Search Console or Analytics numbers are shown until the site owner authorizes the corresponding Google account. Scout traffic model values above are modeled estimates, not private analytics totals.

Limits and method

22

Limitations and open questions

Known constraints and missing evidence from the collected pages.

The collected pages do not mention specific competitors. Stalwart is currently in version 0.x, and users should expect potential data layout and configuration changes before 1.0 S8. The pricing page was not collected, so pricing details are based on external research S1. No independent customer reviews or ratings were collected.

23

Sources, method, and limitations

Evidence inventory, collection method, provider use, and constraints.

This report is based on 15 collected pages from stalw.art, including documentation, FAQ, and the About page. The collector used static and browser rendering rendering; external proof search was enabled but only one request was made. Pricing information was sourced from an external research snapshot of the pricing page. Limitations include the absence of the pricing page in the collected set and the lack of independent review data.

Paid against free, in your inbox

One job at a time: the paid tools worth paying for, the free ones you can run yourself, and who should pick which.

No tracking pixels. One click to leave. We use your address to send Stack Radar and nothing else. Privacy.