Pick the edition that fits your deployment.
Stalwart ships in two editions that share the same code base: Community (AGPL-3.0) and Enterprise (commercial). Both implement the same protocols and core features. The Enterprise edition adds operational tooling for larger or multi-tenant deployments.
Feature comparison.
For licensing terms, billing options and the trial, see the FAQ at the bottom of the page.
| Feature | Community (Free) | Enterprise |
|---|---|---|
| JMAP for Mail | Included | Included |
| JMAP for Sieve | Included | Included |
| JMAP WebSocket transport | Included | Included |
| JMAP Blob Management | Included | Included |
| JMAP Quotas | Included | Included |
| JMAP Sharing | Included | Included |
| IMAP4rev1 | Included | Included |
| IMAP4rev2 | Included | Included |
| IMAP QUOTA Extension | Included | Included |
| IMAP METADATA and JMAP Object Metadata | Included | Included |
| ManageSieve | Included | Included |
| POP3 with STLS and SASL | Included | Included |
| Sub-addressing and catch-all | Included | Included |
| Email aliases and mailing lists | Included | Included |
| Email alias descriptions and disable flag | Included | Included |
| Domain aliases | Included | Included |
| Disk quotas per user and per tenant | Included | Included |
| Auto-configuration and Autodiscover | Included | Included |
| Masked email addresses (privacy aliases) | Not included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| SMTP server with programmable rules | Included | Included |
| Distributed virtual queues | Included | Included |
| Delayed and priority delivery, quotas, routing rules, throttling | Included | Included |
| Smart-host and relay routing | Included | Included |
| Rate and concurrency limiting | Included | Included |
| Envelope rewriting and message modification | Included | Included |
| Milter integration | Included | Included |
| MTA Hooks (HTTP filter alternative) | Included | Included |
| Outbound MTA cluster role | Included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| DKIM | Included | Included |
| DKIM2, including post-quantum signatures | Included | Included |
| SPF | Included | Included |
| DMARC | Included | Included |
| ARC, inbound verification only | Included | Included |
| DANE | Included | Included |
| MTA-STS | Included | Included |
| SMTP TLS Reporting | Included | Included |
| Automated DKIM key generation and rotation | Included | Included |
| Automated DNS management | Included | Included |
| ACME challenges (TLS-ALPN-01, DNS-01, HTTP-01, DNS-PERSIST-01, EAB) | Included | Included |
| Automatic TLSA record refresh on certificate renewal | Included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Spam filtering rules | Included | Included |
| Statistical classifier (FTRL-Proximal) | Included | Included |
| Encryption-at-rest for spam training data | Included | Included |
| DNSBL (IP, domain, hash) | Included | Included |
| Pyzor collaborative digest filtering | Included | Included |
| Phishing protection (homograph URL attacks, sender spoofing) | Included | Included |
| Trusted reply tracking | Included | Included |
| Sender reputation (IP, ASN, domain, address) | Included | Included |
| Greylisting | Included | Included |
| Spam traps | Included | Included |
| ASN and GeoIP blocking, auto-banning | Included | Included |
| AI spam classifier with model tiers, escalation and training from AI verdicts | Not included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| CalDAV | Included | Included |
| CalDAV Scheduling | Included | Included |
| iMIP email notifications | Included | Included |
| Free/busy lookup | Included | Included |
| Recurrence expansion (RRULE) | Included | Included |
| Calendar event email notifications via VALARM | Included | Included |
| CardDAV with vCard 2.1/3.0 | Included | Included |
| WebDAV | Included | Included |
| WebDAV ACL | Included | Included |
| JMAP for Calendars | Included | Included |
| JMAP for Contacts | Included | Included |
| JMAP for File Storage | Included | Included |
| Auto-configuration for CalDAV, CardDAV, WebDAV | Included | Included |
| Calendar localized invite templates and scheduling locales | Included | Included |
| Branded scheduling and notification emails | Not included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Sieve scripting with all IANA-registered extensions | Included | Included |
| ManageSieve | Included | Included |
| JMAP for Sieve Scripts | Included | Included |
| Sieve script deactivation without deletion | Included | Included |
| MTA Hooks for Sieve-style upstream filters | Included | Included |
| AI / LLM Sieve scripting | Not included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| RocksDB | Included | Included |
| FoundationDB | Included | Included |
| PostgreSQL / AlloyDB | Included | Included |
| MySQL / MariaDB | Included | Included |
| SQLite | Included | Included |
| S3-compatible blob storage | Included | Included |
| Azure Blob Storage (shared key, SAS, managed and workload identity) | Included | Included |
| Filesystem blob storage | Included | Included |
| Built-in in-memory store for single-node deployments | Included | Included |
| Redis (in-memory store) | Included | Included |
| Read replicas | Not included | Included |
| Sharded blob storage | Not included | Included |
| Sharded in-memory data stores | Not included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Internal FTS backend | Included | Included |
| Meilisearch | Included | Included |
| ElasticSearch / OpenSearch | Included | Included |
| PostgreSQL | Included | Included |
| MySQL | Included | Included |
| Tokenisation and stemming for 17 languages | Included | Included |
| Text extraction from attachments and files (PDF, Office, OpenDocument, EPUB, RTF) | Included | Included |
| Full-text search of file storage | Included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Internal directory | Included | Included |
| LDAP / Active Directory | Included | Included |
| SQL directory | Included | Included |
| OAuth 2.0 (device flow and PKCE) | Included | Included |
| OAuth Client ID Metadata Documents | Included | Included |
| OpenID Connect | Included | Included |
| Third-party OIDC providers | Included | Included |
| Two-factor authentication (TOTP) | Included | Included |
| App passwords with labels, IP restrictions and expiration | Included | Included |
| API keys with labels, IP restrictions and expiration | Included | Included |
| SCIM 2.0 provisioning (Entra ID, Okta, Keycloak) | Not included | Included |
| Per-domain directory backends | Not included | Included |
| LDAP failover to secondary servers | Not included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Encryption at rest (S/MIME, OpenPGP) | Included | Included |
| Self-service portal for password reset and encryption key management | Included | Included |
| Roles, permissions and ACLs | Included | Included |
| Password strength enforcement (zxcvbn) and rotation policies | Included | Included |
| IP restrictions on accounts, app passwords and API keys | Included | Included |
| Auto-banning with comments and configurable expiration | Included | Included |
| Rate limiting | Included | Included |
| Memory-safe (Rust) | Included | Included |
| Independent security audit | Included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Cluster coordination (Zenoh peer-to-peer, Kafka, Redpanda, NATS, Redis) | Included | Included |
| Automatic node ID generation and management | Included | Included |
| Outbound MTA cluster role | Included | Included |
| Fault tolerance and high availability | Included | Included |
| PROXY protocol | Included | Included |
| Kubernetes, Apache Mesos, Docker Swarm | Included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Logging and tracing (OpenTelemetry, journald, files, console) | Included | Included |
| Metrics (OpenTelemetry, Prometheus) | Limited | Included |
| Webhooks | Included | Included |
| Web admin | Included | Included |
| Report visualization (DMARC, TLS-RPT, ARF) | Included | Included |
| Declarative IaC | Included | Included |
| Live telemetry streaming (SSE) | Not included | Included |
| Message delivery history | Not included | Included |
| Dashboard with real-time statistics | Not included | Included |
| Metric alerts (email and webhook) | Not included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Multi-tenancy with per-tenant quotas and isolation | Not included | Included |
| Per-domain directory backends | Not included | Included |
| Branding and customisation | Not included | Included |
| Multi-tenant branding | Not included | Included |
| Account archiving and un-deletion | Not included | Included |
| Restore deleted emails with metadata | Not included | Included |
| AI spam classifier with model tiers and escalation | Not included | Included |
| AI / LLM Sieve scripting | Not included | Included |
| SCIM 2.0 provisioning (Entra ID, Okta, Keycloak) | Not included | Included |
| LDAP failover to secondary servers | Not included | Included |
| Read replicas, sharded blob and in-memory stores | Not included | Included |
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Community support (support.stalw.art, free tier) | Included | Included |
| Premium Support (minimum 150 mailboxes) | Not included | Included |
| Dedicated Support Engineer | Not included | On demand |
| Custom SLA | Not included | On demand |
| Lawful interception | Not included | On demand |
Common licensing questions.
-
Why isn't feature X open source?
Stalwart is built by a full-time professional team, not as a side project, and the Enterprise edition is what pays for that team and keeps the project sustainable. About 85% of Stalwart's features are free under AGPL-3.0; the Enterprise features are mostly ones that matter to large organisations and hosting providers running Stalwart at scale. Enterprise revenue pays for the work every Stalwart user benefits from: the engineers who ship a new release every week, security fixes within 24 hours of a report, an independent security audit every time a large part of Stalwart is rewritten, stress tests and benchmarks on dozens of cloud servers, and our work on email standards at the IETF. If Stalwart is valuable to your organisation, an Enterprise license is the most direct way to support it.
-
Can I trust that all open-source features will remain free?
Yes. We understand the concerns raised by past incidents where popular open-source projects changed their licensing model or moved existing features behind a paywall. We have no intention of doing a "rug pull". Stalwart will remain under AGPL-3.0, and we will not reclassify any existing open-source feature into a paid one. The Enterprise edition exists solely to fund the long-term sustainability of the project. The open-source version continues to receive updates, enhancements and new features as part of our ongoing commitment to the community.
-
What does the Enterprise license include?
The Enterprise license includes additional features and integrations designed for large-scale or complex deployments: multi-tenancy with per-domain directory backends, multi-tenant branding, account archiving and un-deletion, the AI spam classifier with models from OpenAI, Anthropic, Google Gemini, Ollama or any OpenAI-compatible server, AI-assisted Sieve scripting, LDAP failover, read replicas, sharded blob and in-memory stores, live telemetry, message delivery history, dashboards and metric alerts. The full breakdown is in the table above and on the Enterprise edition page. To qualify for Premium Support, your organisation must subscribe to 150 or more mailboxes under the Enterprise license.
-
How does the Enterprise licensing work?
Enterprise licensing is sold per mailbox as a subscription, giving you a flexible and scalable model that fits any organisation. You only pay for what you need, billed annually or monthly, with a predictable cost structure. The pricing is tiered: the more mailboxes you license, the lower the per-mailbox cost. The full table is on the pricing page. After purchase you receive a license key that activates the Enterprise features. Keys are issued to a server domain name and can be used on an unlimited number of servers under that domain. For example, a license issued for
*.example.orgcan be installed onmx1.example.org,mx2.example.organd any other server underexample.org, with no additional licensing. Although the license is issued to a specific server domain, the deployment can still host an unlimited number of client domains: a license registered for*.example.orgcan serve mail forfoobar.org,customer.comor any other domain your users send and receive mail under. The domain restriction applies only to the server hostnames, not to the domains the server provides email service for. -
How can I upgrade to Enterprise?
Upgrading is a fully automated process. Visit the Stalwart Labs Licensing Portal. Credit-card purchases are issued instantly, so your license key is available immediately and activates the Enterprise features as soon as it is installed on the server.
-
Can I try Enterprise before I buy?
Yes. We offer a 30-day trial license with full access to every Enterprise feature, available at license.stalw.art/trial, so you can evaluate Enterprise in your own environment before committing.
-
What happens if I cancel my Enterprise subscription?
If you cancel, the server reverts to the Community edition automatically. Enterprise-only features stop, but no data is lost and no service is interrupted: mailboxes, calendars, contacts, file storage and configuration remain intact, and standard email and collaboration service continues without disruption for your users.