Rspamd
Rspamd 4.3 fixes SPF evaluation order and rejects weak DKIM keys, with results that change.
Comparison · Comms
Maddy vs Fonoster
A side-by-side editorial comparison of Maddy and Fonoster — release velocity, themes, recent moves, and the top alternatives to consider.
Maddy vs Fonoster: at a glance
What is Maddy?
maddy's back-to-back security releases close DMARC bypasses and IMAP storage bugs.
maddy is an all-in-one Go mail server for SMTP and IMAP. Its last two releases are security fixes: 0.9.6 in October required explicit trust for PROXY headers and closed an auth misconfiguration, and 0.9.7 fixes two DMARC verification bypasses that let attackers spoof domains with p=reject, plus long-standing IMAP storage bugs. Malformed MIME messages are now stored as a single part instead of being lost.
What is Fonoster?
Fonoster now cleans up deleted workspaces and stops exposing stored secrets.
Fonoster ships minor versions almost daily. v0.51 to v0.53 added Anthropic, Google and Groq models, TTS voice choice and one-switch call recording. From November 10, v0.54 to v0.56 added branded emails, legal pages, webhook event lookups and API key rotation, and v0.57 returns secret values only to API keys, cancels a deleted user's plan, and ends a deleted workspace's calls and resources.
Maddy vs Fonoster: editorial side-by-side
Maddy
2.5COMMS
maddy's back-to-back security releases close DMARC bypasses and IMAP storage bugs.
◆ Current state
maddy is an all-in-one Go mail server for SMTP and IMAP. Its last two releases are security fixes: 0.9.6 in October required explicit trust for PROXY headers and closed an auth misconfiguration, and 0.9.7 fixes two DMARC verification bypasses that let attackers spoof domains with p=reject, plus long-standing IMAP storage bugs. Malformed MIME messages are now stored as a single part instead of being lost.
◆ Where it's heading
Feature work stopped after the 0.9 line in spring; recent releases are driven by reported vulnerabilities. The project is fixing correctness in mail authentication and storage rather than adding capabilities.
◆ Prediction
Further security point releases look more likely than a 0.10.0 feature release, though 0.9.1 flagged libdns provider removals for 0.10.0.
Fonoster
7.5COMMS
Fonoster now cleans up deleted workspaces and stops exposing stored secrets.
◆ Current state
Fonoster ships minor versions almost daily. v0.51 to v0.53 added Anthropic, Google and Groq models, TTS voice choice and one-switch call recording. From November 10, v0.54 to v0.56 added branded emails, legal pages, webhook event lookups and API key rotation, and v0.57 returns secret values only to API keys, cancels a deleted user's plan, and ends a deleted workspace's calls and resources.
◆ Where it's heading
After a quick run of voice-AI options, Fonoster has turned to what a hosted service needs before paying customers rely on it: legal pages, billing correctness, webhook debugging and account deletion that actually removes data. The cadence stays daily and the changes stay incremental.
◆ Prediction
More account and billing lifecycle work is likely next, since v0.57 adds a billing test case and deletion rules in the same release.
Alternatives to Maddy and Fonoster
Other Comms products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Maddy or Fonoster.
Twilio
Twilio's voice AI stops cutting callers off mid-sentence, using its own turn-taking model.
Salesmsg
Salesmsg adds call-back requests and a one-click Emergency Stop for all outbound texts.
Element
Element 1.12.35 follows the call picture-in-picture release with one desktop storage fix.
Krisp
Krisp moves call transcripts and live captions to cloud transcription in KrispCX 2.84.4.
Misskey
Misskey 2026.11 ships: a leaner start script, and Node.js 22 no longer boots.
See all Maddy alternatives → · See all Fonoster alternatives →
Recent activity from Maddy and Fonoster
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 3d agoFonosterv0.57: secrets locked to API keys, full cleanup on account deletion
- 3d agoFonosterv0.56: webhook event bodies visible, API key regenerate becomes rotate
- 3d agoFonosterFonoster v0.55 shows the event each webhook delivery sent
- 3d agoFonosterFonoster v0.54.1 stops gather cutting off early answers
- 3d agoFonosterFonoster v0.54 adds branded emails and legal pages
- 5d agoFonosterFonoster v0.53 adds one-switch call recording and credit usage
- 8d agoMaddymaddy 0.9.7 fixes two DMARC bypasses and IMAP storage bugs
- 1mo agoMaddymaddy 0.9.6 fixes PROXY trust and auth bypass misconfig
- 5mo agoMaddymaddy 0.9.5 fixes nested pipeline logging and systemd reload reporting
- 6mo agoMaddymaddy 0.9.4 removes the maddyctl symlink and implicit run command
- 7mo agoMaddymaddy 0.9.3 patches an LDAP injection flaw in auth.ldap
- 7mo agoMaddymaddy 0.9.2 fixes an rspamd panic on unspecified tls_client
Frequently asked questions
What is the difference between Maddy and Fonoster?
They serve adjacent needs but don't currently overlap on shipped themes. Fonoster is currently shipping more aggressively (velocity 7.5 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Maddy better than Fonoster?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Fonoster is currently shipping more aggressively (velocity 7.5 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Comms products to evaluate alongside.
What are the best alternatives to Maddy?
Top Maddy alternatives in Comms are ranked by recent ship velocity. Browse the "Maddy alternatives" section above for the current picks, or visit /alternatives/maddy for the full list with editorial commentary on each.
What are the best alternatives to Fonoster?
Top Fonoster alternatives in Comms are ranked by recent ship velocity. Browse the "Fonoster alternatives" section above for the current picks, or visit /alternatives/fonoster for the full list with editorial commentary on each.