Compare editions

Pick the edition that fits your deployment.

Stalwart ships in two editions that share the same code base: Community (AGPL-3.0) and Enterprise (commercial). Both implement the same protocols and core features. The Enterprise edition adds operational tooling for larger or multi-tenant deployments.

Features

Feature comparison.

For licensing terms, billing options and the trial, see the FAQ at the bottom of the page.

Message store
Feature Community (Free) Enterprise
JMAP for Mail Included Included
JMAP for Sieve Included Included
JMAP WebSocket transport Included Included
JMAP Blob Management Included Included
JMAP Quotas Included Included
JMAP Sharing Included Included
IMAP4rev1 Included Included
IMAP4rev2 Included Included
IMAP QUOTA Extension Included Included
IMAP METADATA and JMAP Object Metadata Included Included
ManageSieve Included Included
POP3 with STLS and SASL Included Included
Sub-addressing and catch-all Included Included
Email aliases and mailing lists Included Included
Email alias descriptions and disable flag Included Included
Domain aliases Included Included
Disk quotas per user and per tenant Included Included
Auto-configuration and Autodiscover Included Included
Masked email addresses (privacy aliases) Not included Included
MTA
Feature Community (Free) Enterprise
SMTP server with programmable rules Included Included
Distributed virtual queues Included Included
Delayed and priority delivery, quotas, routing rules, throttling Included Included
Smart-host and relay routing Included Included
Rate and concurrency limiting Included Included
Envelope rewriting and message modification Included Included
Milter integration Included Included
MTA Hooks (HTTP filter alternative) Included Included
Outbound MTA cluster role Included Included
Sender authentication and transport security
Feature Community (Free) Enterprise
DKIM Included Included
DKIM2, including post-quantum signatures Included Included
SPF Included Included
DMARC Included Included
ARC, inbound verification only Included Included
DANE Included Included
MTA-STS Included Included
SMTP TLS Reporting Included Included
Automated DKIM key generation and rotation Included Included
Automated DNS management Included Included
ACME challenges (TLS-ALPN-01, DNS-01, HTTP-01, DNS-PERSIST-01, EAB) Included Included
Automatic TLSA record refresh on certificate renewal Included Included
Anti-spam and anti-phishing
Feature Community (Free) Enterprise
Spam filtering rules Included Included
Statistical classifier (FTRL-Proximal) Included Included
Encryption-at-rest for spam training data Included Included
DNSBL (IP, domain, hash) Included Included
Pyzor collaborative digest filtering Included Included
Phishing protection (homograph URL attacks, sender spoofing) Included Included
Trusted reply tracking Included Included
Sender reputation (IP, ASN, domain, address) Included Included
Greylisting Included Included
Spam traps Included Included
ASN and GeoIP blocking, auto-banning Included Included
AI spam classifier with model tiers, escalation and training from AI verdicts Not included Included
Collaboration
Feature Community (Free) Enterprise
CalDAV Included Included
CalDAV Scheduling Included Included
iMIP email notifications Included Included
Free/busy lookup Included Included
Recurrence expansion (RRULE) Included Included
Calendar event email notifications via VALARM Included Included
CardDAV with vCard 2.1/3.0 Included Included
WebDAV Included Included
WebDAV ACL Included Included
JMAP for Calendars Included Included
JMAP for Contacts Included Included
JMAP for File Storage Included Included
Auto-configuration for CalDAV, CardDAV, WebDAV Included Included
Calendar localized invite templates and scheduling locales Included Included
Branded scheduling and notification emails Not included Included
Sieve and scripting
Feature Community (Free) Enterprise
Sieve scripting with all IANA-registered extensions Included Included
ManageSieve Included Included
JMAP for Sieve Scripts Included Included
Sieve script deactivation without deletion Included Included
MTA Hooks for Sieve-style upstream filters Included Included
AI / LLM Sieve scripting Not included Included
Storage backends
Feature Community (Free) Enterprise
RocksDB Included Included
FoundationDB Included Included
PostgreSQL / AlloyDB Included Included
MySQL / MariaDB Included Included
SQLite Included Included
S3-compatible blob storage Included Included
Azure Blob Storage (shared key, SAS, managed and workload identity) Included Included
Filesystem blob storage Included Included
Built-in in-memory store for single-node deployments Included Included
Redis (in-memory store) Included Included
Read replicas Not included Included
Sharded blob storage Not included Included
Sharded in-memory data stores Not included Included
Full-text search
Feature Community (Free) Enterprise
Internal FTS backend Included Included
Meilisearch Included Included
ElasticSearch / OpenSearch Included Included
PostgreSQL Included Included
MySQL Included Included
Tokenisation and stemming for 17 languages Included Included
Text extraction from attachments and files (PDF, Office, OpenDocument, EPUB, RTF) Included Included
Full-text search of file storage Included Included
Authentication
Feature Community (Free) Enterprise
Internal directory Included Included
LDAP / Active Directory Included Included
SQL directory Included Included
OAuth 2.0 (device flow and PKCE) Included Included
OAuth Client ID Metadata Documents Included Included
OpenID Connect Included Included
Third-party OIDC providers Included Included
Two-factor authentication (TOTP) Included Included
App passwords with labels, IP restrictions and expiration Included Included
API keys with labels, IP restrictions and expiration Included Included
SCIM 2.0 provisioning (Entra ID, Okta, Keycloak) Not included Included
Per-domain directory backends Not included Included
LDAP failover to secondary servers Not included Included
Security and encryption
Feature Community (Free) Enterprise
Encryption at rest (S/MIME, OpenPGP) Included Included
Self-service portal for password reset and encryption key management Included Included
Roles, permissions and ACLs Included Included
Password strength enforcement (zxcvbn) and rotation policies Included Included
IP restrictions on accounts, app passwords and API keys Included Included
Auto-banning with comments and configurable expiration Included Included
Rate limiting Included Included
Memory-safe (Rust) Included Included
Independent security audit Included Included
Cluster and HA
Feature Community (Free) Enterprise
Cluster coordination (Zenoh peer-to-peer, Kafka, Redpanda, NATS, Redis) Included Included
Automatic node ID generation and management Included Included
Outbound MTA cluster role Included Included
Fault tolerance and high availability Included Included
PROXY protocol Included Included
Kubernetes, Apache Mesos, Docker Swarm Included Included
Observability and administration
Feature Community (Free) Enterprise
Logging and tracing (OpenTelemetry, journald, files, console) Included Included
Metrics (OpenTelemetry, Prometheus) Limited Included
Webhooks Included Included
Web admin Included Included
Report visualization (DMARC, TLS-RPT, ARF) Included Included
Declarative IaC Included Included
Live telemetry streaming (SSE) Not included Included
Message delivery history Not included Included
Dashboard with real-time statistics Not included Included
Metric alerts (email and webhook) Not included Included
Enterprise-only
Feature Community (Free) Enterprise
Multi-tenancy with per-tenant quotas and isolation Not included Included
Per-domain directory backends Not included Included
Branding and customisation Not included Included
Multi-tenant branding Not included Included
Account archiving and un-deletion Not included Included
Restore deleted emails with metadata Not included Included
AI spam classifier with model tiers and escalation Not included Included
AI / LLM Sieve scripting Not included Included
SCIM 2.0 provisioning (Entra ID, Okta, Keycloak) Not included Included
LDAP failover to secondary servers Not included Included
Read replicas, sharded blob and in-memory stores Not included Included
Support
Feature Community (Free) Enterprise
Community support (support.stalw.art, free tier) Included Included
Premium Support (minimum 150 mailboxes) Not included Included
Dedicated Support Engineer Not included On demand
Custom SLA Not included On demand
Lawful interception Not included On demand
Licensing FAQ

Common licensing questions.

  • Why isn't feature X open source?

    Stalwart is built by a full-time professional team, not as a side project, and the Enterprise edition is what pays for that team and keeps the project sustainable. About 85% of Stalwart's features are free under AGPL-3.0; the Enterprise features are mostly ones that matter to large organisations and hosting providers running Stalwart at scale. Enterprise revenue pays for the work every Stalwart user benefits from: the engineers who ship a new release every week, security fixes within 24 hours of a report, an independent security audit every time a large part of Stalwart is rewritten, stress tests and benchmarks on dozens of cloud servers, and our work on email standards at the IETF. If Stalwart is valuable to your organisation, an Enterprise license is the most direct way to support it.

  • Can I trust that all open-source features will remain free?

    Yes. We understand the concerns raised by past incidents where popular open-source projects changed their licensing model or moved existing features behind a paywall. We have no intention of doing a "rug pull". Stalwart will remain under AGPL-3.0, and we will not reclassify any existing open-source feature into a paid one. The Enterprise edition exists solely to fund the long-term sustainability of the project. The open-source version continues to receive updates, enhancements and new features as part of our ongoing commitment to the community.

  • What does the Enterprise license include?

    The Enterprise license includes additional features and integrations designed for large-scale or complex deployments: multi-tenancy with per-domain directory backends, multi-tenant branding, account archiving and un-deletion, the AI spam classifier with models from OpenAI, Anthropic, Google Gemini, Ollama or any OpenAI-compatible server, AI-assisted Sieve scripting, LDAP failover, read replicas, sharded blob and in-memory stores, live telemetry, message delivery history, dashboards and metric alerts. The full breakdown is in the table above and on the Enterprise edition page. To qualify for Premium Support, your organisation must subscribe to 150 or more mailboxes under the Enterprise license.

  • How does the Enterprise licensing work?

    Enterprise licensing is sold per mailbox as a subscription, giving you a flexible and scalable model that fits any organisation. You only pay for what you need, billed annually or monthly, with a predictable cost structure. The pricing is tiered: the more mailboxes you license, the lower the per-mailbox cost. The full table is on the pricing page. After purchase you receive a license key that activates the Enterprise features. Keys are issued to a server domain name and can be used on an unlimited number of servers under that domain. For example, a license issued for *.example.org can be installed on mx1.example.org, mx2.example.org and any other server under example.org, with no additional licensing. Although the license is issued to a specific server domain, the deployment can still host an unlimited number of client domains: a license registered for *.example.org can serve mail for foobar.org, customer.com or any other domain your users send and receive mail under. The domain restriction applies only to the server hostnames, not to the domains the server provides email service for.

  • How can I upgrade to Enterprise?

    Upgrading is a fully automated process. Visit the Stalwart Labs Licensing Portal. Credit-card purchases are issued instantly, so your license key is available immediately and activates the Enterprise features as soon as it is installed on the server.

  • Can I try Enterprise before I buy?

    Yes. We offer a 30-day trial license with full access to every Enterprise feature, available at license.stalw.art/trial, so you can evaluate Enterprise in your own environment before committing.

  • What happens if I cancel my Enterprise subscription?

    If you cancel, the server reverts to the Community edition automatically. Enterprise-only features stop, but no data is lost and no service is interrupted: mailboxes, calendars, contacts, file storage and configuration remain intact, and standard email and collaboration service continues without disruption for your users.