Pick the edition that fits your deployment.
Stalwart ships in two editions that share the same code base: Community (AGPL-3.0) and Enterprise (commercial). Both implement the same protocols and core features. The Enterprise edition adds operational tooling for larger or multi-tenant deployments.
Feature comparison.
For licensing terms, billing options and the trial, see the FAQ at the bottom of the page.
Message store
| Feature | Community (Free) | Enterprise |
|---|---|---|
| JMAP for Mail | ||
| JMAP for Sieve | ||
| JMAP WebSocket transport | ||
| JMAP Blob Management | ||
| JMAP Quotas | ||
| JMAP Sharing | ||
| IMAP4rev1 | ||
| IMAP4rev2 | ||
| IMAP QUOTA Extension | ||
| ManageSieve | ||
| POP3 with STLS and SASL | ||
| Sub-addressing and catch-all | ||
| Email aliases and mailing lists | ||
| Email alias descriptions and disable flag | ||
| Domain aliases | ||
| Disk quotas per user and per tenant | ||
| Auto-configuration and Autodiscover | ||
| Masked email addresses (privacy aliases) | — |
MTA
| Feature | Community (Free) | Enterprise |
|---|---|---|
| SMTP server with programmable rules | ||
| Distributed virtual queues | ||
| Delayed and priority delivery, quotas, routing rules, throttling | ||
| Smart-host and relay routing | ||
| Rate and concurrency limiting | ||
| Envelope rewriting and message modification | ||
| Milter integration | ||
| MTA Hooks (HTTP filter alternative) | ||
| Outbound MTA cluster role |
Sender authentication and transport security
| Feature | Community (Free) | Enterprise |
|---|---|---|
| DKIM | ||
| SPF | ||
| DMARC | ||
| ARC, inbound verification only | ||
| DANE | ||
| MTA-STS | ||
| SMTP TLS Reporting | ||
| Automated DKIM key generation and rotation | ||
| Automated DNS management | ||
| ACME challenges (TLS-ALPN-01, DNS-01, HTTP-01, DNS-PERSIST-01, EAB) | ||
| Automatic TLSA record refresh on certificate renewal |
Anti-spam and anti-phishing
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Spam filtering rules | ||
| Statistical classifier (FTRL-Proximal) | ||
| Encryption-at-rest for spam training data | ||
| DNSBL (IP, domain, hash) | ||
| Pyzor collaborative digest filtering | ||
| Phishing protection (homograph URL attacks, sender spoofing) | ||
| Trusted reply tracking | ||
| Sender reputation (IP, ASN, domain, address) | ||
| Greylisting | ||
| Spam traps | ||
| ASN and GeoIP blocking, auto-banning | ||
| AI / LLM spam classifier | — |
Collaboration
| Feature | Community (Free) | Enterprise |
|---|---|---|
| CalDAV | ||
| CalDAV Scheduling | ||
| iMIP email notifications | ||
| Free/busy lookup | ||
| Recurrence expansion (RRULE) | ||
| Calendar event email notifications via VALARM | ||
| CardDAV with vCard 2.1/3.0 | ||
| WebDAV | ||
| WebDAV ACL | ||
| JMAP for Calendars | ||
| JMAP for Contacts | ||
| JMAP for File Storage | ||
| Auto-configuration for CalDAV, CardDAV, WebDAV | ||
| Calendar localized invite templates and scheduling locales | ||
| Branded scheduling and notification emails | — |
Sieve and scripting
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Sieve scripting with all IANA-registered extensions | ||
| ManageSieve | ||
| JMAP for Sieve Scripts | ||
| Sieve script deactivation without deletion | ||
| MTA Hooks for Sieve-style upstream filters | ||
| AI / LLM Sieve scripting | — |
Storage backends
| Feature | Community (Free) | Enterprise |
|---|---|---|
| RocksDB | ||
| FoundationDB | ||
| PostgreSQL / AlloyDB | ||
| MySQL / MariaDB | ||
| SQLite | ||
| S3-compatible blob storage | ||
| Azure Blob Storage | ||
| Filesystem blob storage | ||
| Redis (in-memory store) | ||
| Read replicas | — | |
| Sharded blob storage | — | |
| Sharded in-memory data stores | — |
Full-text search
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Internal FTS backend | ||
| Meilisearch | ||
| ElasticSearch / OpenSearch | ||
| PostgreSQL | ||
| MySQL | ||
| Tokenisation and stemming for 17 languages |
Authentication
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Internal directory | ||
| LDAP / Active Directory | ||
| SQL directory | ||
| OAuth 2.0 (device flow and PKCE) | ||
| OpenID Connect | ||
| Third-party OIDC providers | ||
| Two-factor authentication (TOTP) | ||
| App passwords with labels, IP restrictions and expiration | ||
| API keys with labels, IP restrictions and expiration | ||
| Per-domain directory backends | — |
Security and encryption
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Encryption at rest (S/MIME, OpenPGP) | ||
| Self-service portal for password reset and encryption key management | ||
| Roles, permissions and ACLs | ||
| Password strength enforcement (zxcvbn) and rotation policies | ||
| IP restrictions on accounts, app passwords and API keys | ||
| Auto-banning with comments and configurable expiration | ||
| Rate limiting | ||
| Memory-safe (Rust) | ||
| Independent security audit |
Cluster and HA
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Cluster coordination (Zenoh peer-to-peer, Kafka, Redpanda, NATS, Redis) | ||
| Automatic node ID generation and management | ||
| Outbound MTA cluster role | ||
| Fault tolerance and high availability | ||
| PROXY protocol | ||
| Kubernetes, Apache Mesos, Docker Swarm |
Observability and administration
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Logging and tracing (OpenTelemetry, journald, files, console) | ||
| Metrics (OpenTelemetry, Prometheus) | Limited | |
| Webhooks | ||
| Web admin | ||
| Report visualization (DMARC, TLS-RPT, ARF) | ||
| Declarative IaC | ||
| Live telemetry streaming (SSE) | — | |
| Message delivery history | — | |
| Dashboard with real-time statistics | — | |
| Metric alerts (email and webhook) | — |
Enterprise-only
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Multi-tenancy with per-tenant quotas and isolation | — | |
| Per-domain directory backends | — | |
| Branding and customisation | — | |
| Multi-tenant branding | — | |
| Account archiving and un-deletion | — | |
| Restore deleted emails with metadata | — | |
| AI / LLM spam classifier | — | |
| AI / LLM Sieve scripting | — | |
| Read replicas, sharded blob and in-memory stores | — |
Support
| Feature | Community (Free) | Enterprise |
|---|---|---|
| Community support (support.stalw.art, free tier) | ||
| Premium Support (minimum 150 mailboxes) | — | |
| Dedicated Support Engineer | — | On demand |
| Custom SLA | — | On demand |
| Lawful interception | — | On demand |
Common licensing questions.
-
Why isn't feature X open source?
Sustaining full-time development of a mail and collaboration server requires funding that open-source sponsorship alone has not covered. To bridge that funding gap and keep developers working full-time on Stalwart, we offer a paid Enterprise edition. Revenue from Enterprise subscriptions directly benefits the open-source community: it pays the engineers who continue to maintain and extend the Community edition under AGPL-3.0, and it lets us release new features on the open-source side over time. The Community edition already includes more functionality than most paid alternatives, and we are committed to growing that lead. If you want to help move more features to AGPL, become a sponsor: your contribution makes a meaningful difference to the project's growth and sustainability.
-
Can I trust that all open-source features will remain free?
Yes. We understand the concerns raised by past incidents where popular open-source projects changed their licensing model or moved existing features behind a paywall. We have no intention of doing a "rug pull". Stalwart will remain under AGPL-3.0, and we will not reclassify any existing open-source feature into a paid one. The Enterprise edition exists solely to fund the long-term sustainability of the project. The open-source version continues to receive updates, enhancements and new features as part of our ongoing commitment to the community.
-
What does the Enterprise license include?
The Enterprise license includes additional features and integrations designed for large-scale or complex deployments: multi-tenancy with per-domain directory backends, multi-tenant branding, account archiving and un-deletion, the AI / LLM spam classifier, AI-assisted Sieve scripting, read replicas, sharded blob and in-memory stores, live telemetry, message delivery history, dashboards and metric alerts. The full breakdown is in the table above and on the Enterprise edition page. To qualify for Premium Support, your organisation must subscribe to 150 or more mailboxes under the Enterprise license.
-
How does the Enterprise licensing work?
Enterprise licensing is sold per mailbox as a subscription, giving you a flexible and scalable model that fits any organisation. You only pay for what you need, billed annually or monthly, with a predictable cost structure. The pricing is tiered: the more mailboxes you license, the lower the per-mailbox cost. The full table is on the pricing page. After purchase you receive a license key that activates the Enterprise features. Keys are issued to a server domain name and can be used on an unlimited number of servers under that domain. For example, a license issued for
*.example.orgcan be installed onmx1.example.org,mx2.example.organd any other server underexample.org, with no additional licensing. Although the license is issued to a specific server domain, the deployment can still host an unlimited number of client domains: a license registered for*.example.orgcan serve mail forfoobar.org,customer.comor any other domain your users send and receive mail under. The domain restriction applies only to the server hostnames, not to the domains the server provides email service for. -
How can I upgrade to Enterprise?
Upgrading is a fully automated process. Visit the Stalwart Labs Licensing Portal. Credit-card purchases are issued instantly, so your license key is available immediately and activates the Enterprise features as soon as it is installed on the server.
-
Can I try Enterprise before I buy?
Yes. We offer a 30-day trial license with full access to every Enterprise feature, available at license.stalw.art/trial, so you can evaluate Enterprise in your own environment before committing.
-
What happens if I cancel my Enterprise subscription?
If you cancel, the server reverts to the Community edition automatically. Enterprise-only features stop, but no data is lost and no service is interrupted: mailboxes, calendars, contacts, file storage and configuration remain intact, and standard email and collaboration service continues without disruption for your users.