Feature comparison
Every mail-service, mail-security, spam, virus and threat capability we could find, across 30 products, as each vendor's own pages state it. The tables serve two readers: an administrator choosing a product, and us, because the first table at the top is the list of what MailtronX does not do yet. Product names belong to their owners and identify the products only.
Reading the cells. Y stated on the vendor's pages (with the vendor's wording where recorded). N or none stated as absent, or absent from MailtronX. nf not found on the pages read; it is not a claim that the capability does not exist. planned recorded as planned. Text cells summarise the vendor's wording. Where a row combines capabilities, the MailtronX cell describes partial support explicitly; an unknown or unassessed capability is not counted as absent.
What MailtronX does not do yet, and who does
Capabilities MailtronX lacks that at least three of the self-hosted products, mail servers or cloud services state. Computed from the tables below.
| Capability | MailtronX | Stated by |
|---|---|---|
| multi-tenant/MSP D7 | none | mailcow, iRedMail, Modoboa, Mailu, Stalwart, Poste.io, MailCleaner/Cleanmail, Rspamd, Axigen, MDaemon, SmarterMail, Zimbra, N-able Mail Assure, Halon Protect |
| webmail M2 | none | mailcow, Mail-in-a-Box, iRedMail, Modoboa, Mailu, Poste.io, MailCleaner/Cleanmail, Axigen, MDaemon, SmarterMail, Zimbra |
| groupware/ActiveSync M3 | none | mailcow, Mail-in-a-Box, iRedMail, Modoboa, Stalwart, Poste.io, Axigen, MDaemon, SmarterMail, Zimbra |
| Docker D3 | planned | mailcow, Mailu, Stalwart, Poste.io, docker-mailserver, Rspamd, Axigen, SmarterMail, Halon Protect |
| HA/cluster D6 | none | iRedMail, Stalwart, MailCleaner/Cleanmail, Rspamd, Axigen, SmarterMail, Zimbra, N-able Mail Assure, Halon Protect |
| MFA O14 | none | mailcow, Mail-in-a-Box, iRedMail, Stalwart, Axigen, MDaemon, SmarterMail, Zimbra, N-able Mail Assure |
| hosted SaaS by vendor D2 | none | mailcow, MailCleaner/Cleanmail, Rspamd, MDaemon, N-able Mail Assure |
| mailing lists M8 | none | iRedMail, Stalwart, Axigen, MDaemon, SmarterMail |
| impersonation/BEC S27 | none | Stalwart, MailCleaner/Cleanmail, Rspamd, Axigen, N-able Mail Assure |
| per-user quarantine + digests S23 | none | mailcow, iRedMail, N-able Mail Assure |
From the commercial gateways (last table), the capabilities three or more of them state, with MailtronX's position:
| Capability | MailtronX today | Vendors stating it (of 11) |
|---|---|---|
| Behavioural / semantic AI for BEC, impersonation, ATO | none (Bayes, neural, fuzzy, reputation only) | 8 |
| Attachment sandboxing | none (ClamAV + oletools static) | 9 |
| URL rewriting / time-of-click | none (URL checked once at scan) | 7 |
| API / in-mailbox deployment, post-delivery clawback | none (MX gateway only) | 6 |
| End-user quarantine digest + self-service | none (admin browser only | 6 |
| Outbound DLP / encryption | none (Submission with sending limits only) | 6 |
| Continuity / spooling | none (Postfix queue) | 4 |
| HA cluster with synced config/quarantine | designed, not built | 4 |
| Multi-tenant / MSP | none | 4 |
| Directory integration for recipients / users | LDAP/AD for administrator login only | 8 |
| Threat-intel network / SIEM-XDR export | public DNSBLs + feeds; remote syslog only | 7 |
| Graymail + safe unsubscribe | none | 3 |
| Per-message tracking / scheduled reports | live log filter, rspamd history; Reports page; no schedule | 6 |
| Warning banners / awareness training | none (X-Spam headers) | 3 |
| QR / image threat detection | none | 5 |
| Deployment breadth (HW, VM sizes, cloud, SaaS) | Debian 13 installer; Docker/VM planned | 5 |
| External API | Y JSON API + bearer tokens | 4 |
| Policy per user / domain / group / time | global thresholds and lists; quota/sending policy per mail group | 4 |
| DMARC reporting / domain fraud | verification only; DNS health page checks the records | 4 |
What only MailtronX states
Rows where MailtronX states the capability and none of the self-hosted products, mail servers or cloud services does.
- own DNSBL zones served locally B1: Y
- mirrors public feeds B2: Y
- patching/updates from UI O8: Y
- network config UI O9: Y
- NTP/time zone UI O10: Y
- config in DB regenerated O15: Y
- unprivileged console P2: Y
Self-hosted and open-source mail stacks
Pages read 2026-10-01; the MailtronX research baseline is release 0.20.70; corrections were checked against 0.20.76.
| Capability | MailtronXbaseline 0.20.70; corrections 0.20.76 | mailcow2026-10-01 | Mail-in-a-Box2026-10-01 | iRedMail2026-10-01 | Modoboa2026-10-01 | Mailu2026-10-01 | Stalwart2026-10-01 | Poste.io2026-10-01 | docker-mailserver2026-10-01 |
|---|---|---|---|---|---|---|---|---|---|
| Deployment and platform | |||||||||
| self-hosted D1 | Y | Y | Y | Y | Y | Y | Y | Y | Y |
| hosted SaaS by vendor D2 | none | Y Servercow | nf | nf | nf | nf | nf | nf | nf |
| Docker D3 | planned | Y compose | N | nf | nf | Y compose, K8s | Y | Y single container | Y compose/K8s/Podman |
| VM/ISO/OVA image D4 | planned | nf | nf | nf | nf | nf | nf | nf | nf |
| HA/cluster D6 | none | nf | nf | Y (doc title) | nf | nf | Y cluster, HA | nf | nf |
| multi-tenant/MSP D7 | none | Y domain admins | nf | Y domain admins | Y Pro | Y per-domain | Y tenants | Y PRO | nf |
| REST/JSON API D8 | Y | nf | Y | Y Pro | Y | Y | nf (API keys, JMAP) | Y | nf |
| LDAP/AD D9 | Y admin login | Y LDAP/OIDC/Keycloak | nf | Y OpenLDAP/AD | nf | nf | Y LDAP/OIDC/SQL | nf | Y LDAP provisioner |
| licence/open source D10 | AGPL-3.0 | GPLv3 | CC0 | "open source", name nf | "open source", name nf | FOSS, name nf | community ed., name nf | proprietary, personal-use free | MIT |
| pricing model D11 | free | free; support €45.90–165.90/mo | free | Pro $499/$699/$899 | free; Pro €139.30/yr | free | €2.00→€0.89/mbx/yr | PRO $349/yr | free |
| signed releases/verified updates/updater D12 | Y | nf (update.sh) | nf | nf (EE one-click) | nf | nf | nf | nf | nf |
| Mailbox and mail-server role | |||||||||
| hosts mailboxes (IMAP/POP3) M1 | IMAP | Y IMAP/POP | Y | Y | nf | Y | Y JMAP/IMAP/POP3 | Y | Y |
| webmail M2 | none | Y SOGo | Y Roundcube | Y Roundcube/SOGo | Y | Y | nf | Y Roundcube | nf |
| groupware/ActiveSync M3 | none | Y DAV, ActiveSync | Y Nextcloud, Z-Push | Y SOGo, ActiveSync | Y | nf | Y DAV | Y Z-Push | nf |
| authenticated submission M4 | Y | nf | Y 465 | Y | nf | Y | nf | Y 587/465 | Y 465/587 |
| quotas M5 | Y | nf | nf | Y | nf | Y | Y | Y | Y |
| aliases/catch-all/alias domains M6 | Y | Y | Y | Y | Y | Y | Y | Y (catch-all nf) | Y (catch-all nf) |
| forwardings/BCC/archive M7 | Y | nf | Y | Y | nf | Y | nf | Y | nf |
| mailing lists M8 | none | nf | nf | Y mlmmj | nf | nf | Y | nf | nf |
| Sieve/filters/autoresponder M9 | Sieve quarantine filing; user filters and autoresponder not assessed | Y | Y Sieve | Y Sieve | Y | Y | Y | Y | Y |
| per-user sending limits M10 | Y | nf | nf | Y Pro | nf | Y 200/day | nf | nf | nf |
| Anti-spam and security | |||||||||
| DNSBL/RBL (pre-queue noted) S1 | Y pre-queue | Y postscreen | nf | Y postscreen | nf | nf | Y | Y Spamhaus DQS | Y postscreen |
| greylisting S2 | Y | Y | Y | Y | nf | Y | Y | nf | Y |
| SPF/DKIM/DMARC verify S3 | Y | nf | nf | nf | nf | Y | Y | nf | Y |
| ARC S4 | Y | Y | nf | nf | nf | nf | Y | nf | Y opt-in |
| DKIM signing S5 | Y | Y | Y | Y | nf | Y | nf | Y | Y |
| Bayes S6 | Y | Y | nf | Y | nf | Y | Y | nf | Y opt-in |
| fuzzy/collaborative checksums S7 | Y | nf | nf | nf | nf | nf | Y Pyzor | nf | nf |
| ML/AI/NLP S8 | neural | nf | nf | nf | nf | nf | Y optional LLM | nf | Y neural off |
| sender reputation S9 | Y | nf | nf | nf | nf | nf | Y | nf | Y off |
| URL/URIBL/phishing feeds S10 | Y | nf | nf | nf | nf | nf | Y | nf | nf |
| attachment type blocking S11 | Y | nf | nf | nf | nf | Y | nf | nf | nf |
| office-macro analysis S12 | Y | Y Olefy | nf | nf | nf | Y | nf | nf | nf |
| sandboxing S13 | none | nf | nf | nf | nf | nf | nf | nf | nf |
| URL rewriting/time-of-click S14 | none | nf | nf | nf | nf | nf | nf | nf | nf |
| rate limiting S15 | Y | nf | nf | nf | nf | Y auth | nf | nf | nf |
| country/geo S16 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| banned words/charsets S17 | Y | nf | nf | nf | nf | nf | nf | Y regex | nf |
| HELO/sender/recipient verification S18 | Y | Y | nf | nf | nf | Y | nf | nf | Y |
| antivirus engines S19 | ClamAV | ClamAV | nf | ClamAV | nf | Y unnamed | ClamAV | ClamAV | ClamAV |
| outbound filtering/DLP S20 | Outbound spam and antivirus scanning; no DLP | nf | nf | Y (doc title) | nf | nf | nf | Y PRO | Y |
| encryption S21 | TLS transport; no end-to-end message encryption | nf (at rest) | nf | nf | nf | nf | Y at rest | nf | nf |
| admin quarantine S22 | Y | Y | nf | Y Pro | nf | nf | nf | nf | nf |
| per-user quarantine + digests S23 | none | Y notifications | nf | Y Pro | nf | nf | nf | nf | nf |
| per-user/domain policies and lists S24 | global | Y | nf | Y Pro | nf | Y per-user threshold | nf | nf | nf |
| graymail S25 | none | nf | nf | nf | nf | nf | nf | nf | nf |
| continuity/spooling S26 | none | nf (paid BackupcowMX) | nf | nf | nf | nf | nf | nf | nf |
| impersonation/BEC S27 | none | nf | nf | nf | nf | nf | Y | nf | nf |
| Blocklist product | |||||||||
| own DNSBL zones served locally B1 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| mirrors public feeds B2 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| own resolver B3 | Y | Y Unbound | nf | nf | nf | nf | nf | nf | nf |
| self-check listing B4 | Y | nf | nf | nf | nf | nf | nf | Y PRO | nf |
| public DNSBL offered B5 | planned | nf | nf | nf | nf | nf | nf | nf | nf |
| Operations | |||||||||
| live dashboard O1 | Y 1 s | nf | nf Munin | Y netdata | Y | nf | Y | Y | nf |
| outcome stats + retention O2 | Y | nf | nf | nf | Y | nf | nf | Y | nf |
| per-message tracking/search O3 | partial | nf | nf | Y Pro | nf | nf | Y | Y PRO | nf |
| scheduled reports O4 | none | nf | nf alerts | nf | nf | nf | Y DMARC/TLS-RPT | nf | Y pflogsumm |
| syslog/SIEM O5 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| ACME O6 | Y | Y | Y | Y | Y | Y | Y | Y | Y |
| backups O7 | Y | Y script | Y Duplicity | Y doc | nf | nf | nf | nf | nf |
| patching/updates from UI O8 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| network config UI O9 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| NTP/time zone UI O10 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| diagnostics (deliverability, DNS health, loopback) O11 | Y | nf | Y daily checks | nf | nf | nf | nf (auto-publish DNS) | Y PRO | nf |
| audit trail O12 | Y | nf | nf | Y Pro | nf | nf | nf | nf | nf |
| RBAC/API tokens O13 | Y | Y ACL | nf | Y Pro | nf | Y token | Y | Y PRO | nf |
| MFA O14 | none | Y TOTP/WebAuthn | Y TOTP | Y | nf | nf | Y | nf | nf |
| config in DB regenerated O15 | Y | nf | nf | nf | nf | nf | nf | nf | N |
| Security posture | |||||||||
| host hardening by product P1 | Y | Y | Y ufw, Fail2ban | Y Fail2ban | nf | nf | Y auto-ban | nf | Y Fail2ban |
| unprivileged console P2 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| web-security measures stated P3 | Y | Y | nf | Y SSHA512/BCRYPT | nf | Y | nf | Y SHA512 | nf |
| security policy/advisories/security.txt P4 | Security policy published; security.txt reporting contact pending; advisories not assessed | Y SECURITY.md | Y security.md | nf | nf | nf | nf (audited) | nf | Y SECURITY.md |
Mail-filter gateways and commercial mail servers
Pages read 2026-10-01. MailCleaner: mailcleaner.org now redirects to Alinto, so the column reflects the Alinto Cleanmail pages. eFa: the project site timed out; the column is nearly empty. Kerio Connect: the product page refuses automated fetches; one manual page was read.
| Capability | MailtronXbaseline 0.20.70; corrections 0.20.76 | MailCleaner/Cleanmail2026-10-01 | eFa2026-10-01 | Rspamd2026-10-01 | Axigen2026-10-01 | MDaemon2026-10-01 | SmarterMail2026-10-01 | Zimbra2026-10-01 | Kerio Connect2026-10-01 |
|---|---|---|---|---|---|---|---|---|---|
| Deployment and platform | |||||||||
| self-hosted D1 | Y | Y | Y | Y | Y | Y | Y | Y | nf |
| hosted SaaS by vendor D2 | none | Y | nf | Y Hosted tier | nf | Y | nf | nf | nf |
| Docker D3 | planned | nf | nf | Y | Y + Helm | nf | Y | nf | nf |
| VM/ISO/OVA image D4 | planned | nf | (WS) OVF | nf | Y VM image | nf | nf | nf | (WS) |
| HA/cluster D6 | none | Y | nf | Y Redis cluster, proxy | Y | nf | Y HA | Y | nf |
| multi-tenant/MSP D7 | none | Y | nf | Y | Y MSP | Y | Y | Y | nf |
| REST/JSON API D8 | Y | nf | nf | Y | Y | nf | nf | nf | nf |
| LDAP/AD D9 | Y admin | (WS) | nf | nf | Y | Y | Y Ent. | Y + SAML | nf |
| licence/open source D10 | AGPL-3.0 | nf | (WS) GPL-3.0 | Apache 2.0 | EULA | EULA | proprietary | open core + licence | nf |
| pricing model D11 | free | no prices | (WS) free | free; Scale £100+VAT/mo | no prices; free ed. | configurator, no prices | $550–$3,200 perpetual; HA $250/$300 per mo | no prices | (WS) $24–36.50/user/yr |
| signed releases/verified updates/updater D12 | Y | nf | nf | Y GPG pkgs | nf | nf | nf | nf | nf |
| Mailbox and mail-server role | |||||||||
| hosts mailboxes (IMAP/POP3) M1 | IMAP | nf (relay) | nf | nf (engine) | Y | nf | Y | Y | (WS) |
| webmail M2 | none | Y emergency | nf | nf | Y | Y | Y | Y | nf |
| groupware/ActiveSync M3 | none | nf | nf | nf | Y | Y | Y MAPI/EAS | Y | (WS) |
| authenticated submission M4 | Y | nf | nf | nf | Y | nf | nf | nf | nf |
| quotas M5 | Y | nf | nf | nf | Y | nf | nf | nf | nf |
| aliases/catch-all/alias domains M6 | Y | nf | nf | nf | Y | nf | nf | nf | nf |
| forwardings/BCC/archive M7 | Y | Y archive 10 y | nf | nf | Y | Y archiving | Y archiving | Y Professional | nf |
| mailing lists M8 | none | nf | nf | nf | Y | Y | Y | nf | nf |
| Sieve/filters/autoresponder M9 | Sieve quarantine filing; user filters and autoresponder not assessed | nf | nf | nf | Y | Y | nf | nf | nf |
| per-user sending limits M10 | Y | nf | nf | Y | nf | nf | nf | nf | nf |
| Anti-spam and security | |||||||||
| DNSBL/RBL (pre-queue noted) S1 | Y pre-queue | (WS) | nf | Y 50+ | Y | nf | Y | nf | nf |
| greylisting S2 | Y | nf | nf | Y | Y | nf | Y | nf | Y |
| SPF/DKIM/DMARC verify S3 | Y | nf | nf | Y | Y SPF/DKIM | Y | Y | nf | Y SPF |
| ARC S4 | Y | nf | nf | Y | nf | nf | nf | nf | nf |
| DKIM signing S5 | Y | nf | nf | Y | nf | nf | nf | nf | nf |
| Bayes S6 | Y | (WS) | nf | Y | nf | nf | nf | nf | Y |
| fuzzy/collaborative checksums S7 | Y | nf | nf | Y fuzzy, DCC | nf | nf | nf | nf | nf |
| ML/AI/NLP S8 | neural | Y "AI" | nf | Y neural, LLM | nf | Y Cyren | nf | nf | nf |
| sender reputation S9 | Y | nf | nf | Y | nf | nf | Y Cyren add-on | nf | nf |
| URL/URIBL/phishing feeds S10 | Y | nf | nf | Y | Y | nf | Y | nf | nf |
| attachment type blocking S11 | Y | nf | nf | Y | Y | nf | nf | nf | nf |
| office-macro analysis S12 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| sandboxing S13 | none | nf | nf | nf | nf | nf | nf | nf | nf |
| URL rewriting/time-of-click S14 | none | nf | nf | nf | nf | nf | nf | nf | nf |
| rate limiting S15 | Y | nf | nf | Y | nf | nf | nf | nf | nf |
| country/geo S16 | Y | nf | nf | Y | Y | Y | nf | nf | nf |
| banned words/charsets S17 | Y | nf | nf | Y | Y | nf | nf | nf | nf |
| HELO/sender/recipient verification S18 | Y | nf | nf | Y | nf | nf | nf | nf | Y |
| antivirus engines S19 | ClamAV | (WS) ClamAV | (WS) ClamAV | ClamAV, Sophos, F-Prot, Kaspersky, ESET | Bitdefender | Cyren, ClamAV | ClamAV, Sniffer, Defender, Cyren | unnamed | (WS) Bitdefender |
| outbound filtering/DLP S20 | Outbound spam and antivirus scanning; no DLP | Y | nf | nf | nf | nf | Y | nf | nf |
| encryption S21 | TLS transport; no end-to-end message encryption | nf | nf | nf | nf | Y PGP | nf | Y S/MIME | nf |
| admin quarantine S22 | Y | nf | (WS) MailWatch | Y Console | nf | nf | nf | nf | nf |
| per-user quarantine + digests S23 | none | (WS) | nf | nf | nf | nf | nf | nf | nf |
| per-user/domain policies and lists S24 | global | Y | nf | Y lists | nf | nf | Y per user | nf | Y server lists |
| graymail S25 | none | (WS) | nf | Y DCC bulk | nf | nf | nf | nf | nf |
| continuity/spooling S26 | none | Y | nf | nf | nf | nf | nf | nf | nf |
| impersonation/BEC S27 | none | Y spoofing | nf | Y | Y + BIMI | nf | nf | nf | nf |
| Blocklist product | |||||||||
| own DNSBL zones served locally B1 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| mirrors public feeds B2 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| own resolver B3 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| self-check listing B4 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| public DNSBL offered B5 | planned | nf | nf | nf | nf | nf | nf | nf | nf |
| Operations | |||||||||
| live dashboard O1 | Y | Y ELK | (WS) | Y | Y 100+ charts | nf | nf | nf | nf |
| outcome stats + retention O2 | Y | Y | nf | Y ClickHouse | Y | nf | nf | nf | nf |
| per-message tracking/search O3 | partial | Y | nf | Y history | nf | nf | nf | nf | nf |
| scheduled reports O4 | none | nf | nf | nf | nf | nf | nf | nf | nf |
| syslog/SIEM O5 | Y | nf | nf | Y | nf (SNMP, Prometheus) | nf | nf | nf | nf |
| ACME O6 | Y | nf | nf | nf | Y | nf | Y | nf | nf |
| backups O7 | Y | nf | nf | nf | Y | nf | nf | Y S3 HSM | nf |
| patching/updates from UI O8 | Y | nf | (WS) shell | nf | nf | nf | nf | nf | nf |
| network config UI O9 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| NTP/time zone UI O10 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| diagnostics (deliverability, DNS health, loopback) O11 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| audit trail O12 | Y | nf | nf | nf | Y | nf | nf | Y | nf |
| RBAC/API tokens O13 | Y | Y | nf | Y | Y | nf | Y | Y | nf |
| MFA O14 | none | nf | nf | nf | Y | Y | Y | Y | nf |
| config in DB regenerated O15 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| Security posture | |||||||||
| host hardening by product P1 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| unprivileged console P2 | Y | nf | nf | nf | nf | nf | nf | nf | nf |
| web-security measures stated P3 | Y | nf | nf | Y | nf | nf | nf | nf | nf |
| security policy/advisories/security.txt P4 | Security policy published; security.txt reporting contact pending; advisories not assessed | nf | nf | nf | nf | nf | nf | nf | nf |
Cloud e-mail security services
Pages read 2026-10-01.
| Capability | MailtronXbaseline 0.20.70; corrections 0.20.76 | N-able Mail Assure2026-10-01 | Halon Protect2026-10-01 |
|---|---|---|---|
| Deployment and platform | |||
| self-hosted D1 | Y | N "cloud-based" | Y Protect VM, FreeBSD pkg |
| hosted SaaS by vendor D2 | none | Y | nf |
| Docker D3 | planned | nf | Y Classify Docker/K8s |
| VM/ISO/OVA image D4 | planned | nf | Y VM package |
| install method D5 | installer script, signed manifest | MX change, M365 OAuth wizard | VM package; Classify packages |
| HA/cluster D6 | none | Y global data centres | Y clusterd |
| multi-tenant/MSP D7 | none | Y multitenant | Y per-tenant policies |
| REST/JSON API D8 | Y JSON + bearer tokens | Y "Extensive API" | nf |
| LDAP/AD D9 | Y admin login | Y LDAP sync, SSO | nf |
| licence/open source D10 | AGPL-3.0-or-later | nf | nf |
| pricing model D11 | free | monthly subscription, no prices | quote only |
| signed releases/verified updates/updater D12 | Y ed25519 feed, rollback | nf | nf |
| Mailbox and mail-server role | |||
| hosts mailboxes (IMAP/POP3) M1 | IMAP yes; no webmail/groupware | nf | nf |
| webmail M2 | IMAP yes; no webmail/groupware | Private Portal webmail | nf |
| groupware/ActiveSync M3 | IMAP yes; no webmail/groupware | nf | nf |
| authenticated submission M4 | Y 587/465 | nf (smart host) | nf |
| quotas M5 | Y quota groups | nf | nf |
| aliases/catch-all/alias domains M6 | Y | Y (WS) catch-all | nf |
| forwardings/BCC/archive M7 | Y | Y archiving, journaling | nf |
| mailing lists M8 | none | nf | nf |
| Sieve/filters/autoresponder M9 | Sieve quarantine filing; user filters and autoresponder not assessed | nf | nf (HSL scripting) |
| per-user sending limits M10 | Y hour/day/week | nf (abuse reports) | nf |
| Anti-spam and security | |||
| DNSBL/RBL (pre-queue noted) S1 | Y pre-queue, 11 zones | nf | nf |
| greylisting S2 | Y | nf | nf |
| SPF/DKIM/DMARC verify S3 | Y | Y | nf |
| ARC S4 | Y | nf | nf |
| DKIM signing S5 | Y | Y outbound | nf |
| Bayes S6 | Y | nf | nf |
| fuzzy/collaborative checksums S7 | Y rspamd.com read-only | nf | nf |
| ML/AI/NLP S8 | neural only | Y machine learning | Y Classify |
| sender reputation S9 | Y | Y (WS) | nf |
| URL/URIBL/phishing feeds S10 | Y | nf | nf |
| attachment type blocking S11 | Y | Y | nf |
| office-macro analysis S12 | Y oletools | nf | nf |
| sandboxing S13 | none | nf | Y third-party sandbox |
| URL rewriting/time-of-click S14 | none | nf | Y time-of-click |
| rate limiting S15 | Y 6 buckets | nf | Y clustered |
| country/geo S16 | Y score | nf | nf |
| banned words/charsets S17 | Y | nf | nf |
| HELO/sender/recipient verification S18 | Y | nf | nf |
| antivirus engines S19 | ClamAV | unnamed, "100 % malware" | Sophos AV |
| outbound filtering/DLP S20 | Outbound spam and antivirus scanning; no DLP | Y smart host | Y outbound abuse, DLP daemon |
| encryption S21 | TLS transport; no end-to-end message encryption | Y TLS/AES at rest | Y |
| admin quarantine S22 | Y | Y | nf |
| per-user quarantine + digests S23 | none | Y scout reports | nf |
| per-user/domain policies and lists S24 | global | Y per user/IP/domain | Y per tenant |
| graymail S25 | none | nf | nf |
| continuity/spooling S26 | none | Y 14-day queue | nf |
| impersonation/BEC S27 | none | Y | nf |
| Blocklist product | |||
| own DNSBL zones served locally B1 | Y | nf | nf |
| mirrors public feeds B2 | Y | nf | nf |
| own resolver B3 | Y | nf | nf |
| self-check listing B4 | Y | nf | nf |
| public DNSBL offered B5 | planned | nf | nf |
| Operations | |||
| live dashboard O1 | Y 1 s | Y | Y |
| outcome stats + retention O2 | Y 90 d / 1 y | Y, retention nf | nf |
| per-message tracking/search O3 | log filter, history | Y indexed log search | nf |
| scheduled reports O4 | none | nf | nf |
| syslog/SIEM O5 | Y syslog | nf (CSV export) | nf |
| ACME O6 | Y | nf | nf |
| backups O7 | Y | nf | nf |
| patching/updates from UI O8 | Y | nf | nf |
| network config UI O9 | Y | nf | nf |
| NTP/time zone UI O10 | Y | nf | nf |
| diagnostics (deliverability, DNS health, loopback) O11 | Y | Y networking tools | nf |
| audit trail O12 | Y | nf | nf |
| RBAC/API tokens O13 | Y | Y permissions | nf |
| MFA O14 | none | Y (WS) 2FA | nf |
| config in DB regenerated O15 | Y | nf | nf |
| Security posture | |||
| host hardening by product P1 | Y | nf | nf |
| unprivileged console P2 | Y | nf | nf |
| web-security measures stated P3 | Y | nf | nf |
| security policy/advisories/security.txt P4 | Security policy published; security.txt reporting contact pending; advisories not assessed | nf (security.txt expired 2024) | Y (WS) responsible disclosure |
Commercial secure e-mail gateways
Product pages read 2026-09-27; a Y carries the vendor wording in brackets where it was recorded. The MailtronX research baseline is 0.20.70; corrections were checked against 0.20.76.
| Capability | MailtronXbaseline 0.20.70; corrections 0.20.76 | Proofpoint2026-09-27 | Mimecast2026-09-27 | Barracuda ESG2026-09-27 | Cisco Secure Email2026-09-27 | FortiMail2026-09-27 | Sophos Email2026-09-27 | TitanHQ SpamTitan2026-09-27 | Hornetsecurity2026-09-27 | Libraesva2026-09-27 | Proxmox Mail Gateway2026-09-27 | MXGuarddog2026-09-27 |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Capabilities compared | ||||||||||||
| Behavioural / semantic AI for BEC, impersonation, ATO C1 | none (Bayes, neural, fuzzy, reputation only) | Y | Y | nf | Y | Y | Y | Y | Y | Y | nf | nf |
| Attachment sandboxing C2 | none (ClamAV + oletools static) | Y | Y | Y | Y | Y | Y | Y | Y | Y | nf | nf |
| URL rewriting / time-of-click C3 | none (URL checked once at scan) | Y | Y | nf | Y | nf | Y | Y | Y | Y | nf | nf |
| API / in-mailbox deployment, post-delivery clawback C4 | none (MX gateway only) | Y | Y | nf | Y | Y | Y | nf | nf | Y | nf | nf |
| End-user quarantine digest + self-service C5 | none (admin browser only | nf | nf | Y | Y | nf | nf | Y | Y | nf | Y | Y |
| Outbound DLP / encryption C6 | none (Submission with sending limits only) | Y | nf | Y | nf | Y | Y | Y | Y | nf | nf | nf |
| Continuity / spooling C7 | none (Postfix queue) | nf | Y | Y | nf | nf | nf | nf | Y | nf | nf | Y |
| HA cluster with synced config/quarantine C8 | designed, not built | nf | nf | Y | nf | Y | nf | nf | nf | Y | Y | nf |
| Multi-tenant / MSP C9 | none | nf | nf | nf | nf | Y | nf | Y | Y | Y | nf | nf |
| Directory integration for recipients / users C10 | LDAP/AD for administrator login only | Y | Y | nf | Y | Y | Y | Y | nf | nf | Y | Y |
| Threat-intel network / SIEM-XDR export C11 | public DNSBLs + feeds; remote syslog only | Y | Y | Y | Y | Y | Y | nf | nf | Y | nf | nf |
| Graymail + safe unsubscribe C12 | none | Y | nf | nf | Y | nf | nf | nf | Y | nf | nf | nf |
| Per-message tracking / scheduled reports C13 | live log filter, rspamd history; Reports page; no schedule | Y | nf | nf | Y | Y | nf | Y | Y | nf | Y | nf |
| Warning banners / awareness training C14 | none (X-Spam headers) | Y | Y | nf | nf | nf | Y | nf | nf | nf | nf | nf |
| QR / image threat detection C15 | none | nf | Y | nf | nf | Y | Y | nf | Y | nf | nf | Y (image signatures) |
| Published detection / FP guarantees C16 | none measured (outcome stats make it computable) | nf | nf | nf | nf | nf | nf | Y | Y | nf | nf | nf |
| Deployment breadth (HW, VM sizes, cloud, SaaS) C17 | Debian 13 installer; Docker/VM planned | nf | nf | Y | Y | Y | nf | nf | nf | Y (Azure) | Y (ISO) | nf |
| External API C18 | Y JSON API + bearer tokens | Y | Y | nf | nf | nf | nf | nf | nf | Y | Y (REST, pmgsh) | nf |
| Policy per user / domain / group / time C19 | global thresholds and lists; quota/sending policy per mail group | nf | nf | nf | Y | Y | nf | Y | nf | nf | Y | nf |
| DMARC reporting / domain fraud C20 | verification only; DNS health page checks the records | Y | Y | nf | nf | nf | nf | Y | nf | Y | nf | nf |
Method and corrections
Each column names the day its pages were read. Pages were fetched as text, so a capability that lives only in a video, an image or an interactive element can show as nf. The commercial-gateway table records the capability list of the 2026-09-27 review; the other three tables record the 2026-10-01 review. Columns are refreshed when their pages are read again, and the date changes with them. If you represent one of these products and a cell misstates your page, write to the address on the Legal notice page with the page that states otherwise, and the cell will be corrected.
The MailtronX column was reviewed against release 0.20.76 on 2026-10-01. The current downloadable release is 0.25.25; the Features page and the documentation carry the detail.