← Back to home
Comparison · Comms

Maddy vs Misskey

A side-by-side editorial comparison of Maddy and Misskey — release velocity, themes, recent moves, and the top alternatives to consider.

Maddy vs Misskey: at a glance

FeatureMaddyMisskey
SectorCommsComms
Velocity score2.55.0
Sparks · 30d00
Top themesmail-server, self-hosted, golang, securityfediverse, self-hosting, memory usage, node.js
Last editorial update8d ago1d ago
WebsiteVisit →Visit →

What is Maddy?

maddy's back-to-back security releases close DMARC bypasses and IMAP storage bugs.

maddy is an all-in-one Go mail server for SMTP and IMAP. Its last two releases are security fixes: 0.9.6 in October required explicit trust for PROXY headers and closed an auth misconfiguration, and 0.9.7 fixes two DMARC verification bypasses that let attackers spoof domains with p=reject, plus long-standing IMAP storage bugs. Malformed MIME messages are now stored as a single part instead of being lost.

Read the full Maddy trajectory →

What is Misskey?

Misskey 2026.11 ships: a leaner start script, and Node.js 22 no longer boots.

Misskey 2026.11.0 is out after an alpha, two betas and a release candidate in a week. The new start script stops extra processes from staying resident, saving about 50MB per server on the official Docker image, which uses it automatically. Node.js v22 support ends, the minimum is now 24.22.3 or 26.13.1, and NODE_OPTIONS paths now resolve from the repository root. Smaller changes include better display of Mastodon quotes and an autoplay setting for URL previews.

Read the full Misskey trajectory →

Maddy vs Misskey: editorial side-by-side

M
Maddy
COMMS
2.5

maddy's back-to-back security releases close DMARC bypasses and IMAP storage bugs.

◆ Current state

maddy is an all-in-one Go mail server for SMTP and IMAP. Its last two releases are security fixes: 0.9.6 in October required explicit trust for PROXY headers and closed an auth misconfiguration, and 0.9.7 fixes two DMARC verification bypasses that let attackers spoof domains with p=reject, plus long-standing IMAP storage bugs. Malformed MIME messages are now stored as a single part instead of being lost.

◆ Where it's heading

Feature work stopped after the 0.9 line in spring; recent releases are driven by reported vulnerabilities. The project is fixing correctness in mail authentication and storage rather than adding capabilities.

◆ Prediction

Further security point releases look more likely than a 0.10.0 feature release, though 0.9.1 flagged libdns provider removals for 0.10.0.

M
Misskey
COMMS
5.0

Misskey 2026.11 ships: a leaner start script, and Node.js 22 no longer boots.

◆ Current state

Misskey 2026.11.0 is out after an alpha, two betas and a release candidate in a week. The new start script stops extra processes from staying resident, saving about 50MB per server on the official Docker image, which uses it automatically. Node.js v22 support ends, the minimum is now 24.22.3 or 26.13.1, and NODE_OPTIONS paths now resolve from the repository root. Smaller changes include better display of Mastodon quotes and an autoplay setting for URL previews.

◆ Where it's heading

Misskey's last two cycles are about making servers cheaper and safer to run: tighter Sentry data-collection defaults in 2026.10, lower memory and newer Node versions in 2026.11. Each one carries a breaking requirement that admins must check before upgrading.

◆ Prediction

Expect 2026.11.x patch releases for upgrade problems, especially around custom NODE_OPTIONS and systemd units. The entries do not show what the next feature cycle will target.

Alternatives to Maddy and Misskey

Other Comms products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Maddy or Misskey.

See all Maddy alternatives → · See all Misskey alternatives →

Recent activity from Maddy and Misskey

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 2d agoMisskeyMisskey 2026.11 ships leaner start script, ends Node.js 22
  2. 2d agoMisskeyMisskey 2026.11 RC: leaner startup, Node.js 22 dropped
  3. 4d agoMisskeyMisskey 2026.11 beta.1 stabilizes the release
  4. 5d agoMisskeyMisskey 2026.11 beta drops Node.js 22 support
  5. 5d agoMisskeyMisskey 2026.11 alpha.1 adds autoplay and deck tweaks
  6. 8d agoMisskeyMisskey 2026.11 alpha adds a lower-memory start script
  7. 8d agoMaddymaddy 0.9.7 fixes two DMARC bypasses and IMAP storage bugs
  8. 1mo agoMaddymaddy 0.9.6 fixes PROXY trust and auth bypass misconfig
  9. 5mo agoMaddymaddy 0.9.5 fixes nested pipeline logging and systemd reload reporting
  10. 6mo agoMaddymaddy 0.9.4 removes the maddyctl symlink and implicit run command
  11. 7mo agoMaddymaddy 0.9.3 patches an LDAP injection flaw in auth.ldap
  12. 7mo agoMaddymaddy 0.9.2 fixes an rspamd panic on unspecified tls_client

Frequently asked questions

What is the difference between Maddy and Misskey?

They serve adjacent needs but don't currently overlap on shipped themes. Misskey is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Maddy better than Misskey?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Misskey is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Comms products to evaluate alongside.

What are the best alternatives to Maddy?

Top Maddy alternatives in Comms are ranked by recent ship velocity. Browse the "Maddy alternatives" section above for the current picks, or visit /alternatives/maddy for the full list with editorial commentary on each.

What are the best alternatives to Misskey?

Top Misskey alternatives in Comms are ranked by recent ship velocity. Browse the "Misskey alternatives" section above for the current picks, or visit /alternatives/misskey for the full list with editorial commentary on each.