Rspamd
Rspamd 4.3 fixes SPF evaluation order and rejects weak DKIM keys, with results that change.
A side-by-side editorial comparison of mailcow and Rocket.Chat — release velocity, themes, recent moves, and the top alternatives to consider.
mailcow's November release patches an admin RCE and reworks sync jobs.
mailcow ships named monthly releases with lettered revisions, mostly to pull in upstream security fixes for SOGo, Nginx, Redis, Unbound and Rspamd. The November release goes further: it fixes a remote code execution flaw reachable by admins and domain admins, adds mailbox groups, and reworks imapsync so sync jobs reference a separate source. It also caps request bodies at 64 MB, which breaks large SOGo and ActiveSync mail unless NGINX_MAX_BODY_SIZE is raised.
Rocket.Chat 9.0 reaches rc.8 with a migration fix as candidates shrink to single patches.
The 9.0 candidate line opened on 27 October with a licensing change: LDAP, SAML and Custom OAuth now require a premium plan. Since rc.4 the candidates have been fixes, and rc.8 on 7 November carries a single one: servers that started during another server's database migration no longer keep stale settings until restart. On 6 November 8.9.1 LTS backported the 9.0 load fixes plus a security hotfix.
mailcow ships named monthly releases with lettered revisions, mostly to pull in upstream security fixes for SOGo, Nginx, Redis, Unbound and Rspamd. The November release goes further: it fixes a remote code execution flaw reachable by admins and domain admins, adds mailbox groups, and reworks imapsync so sync jobs reference a separate source. It also caps request bodies at 64 MB, which breaks large SOGo and ActiveSync mail unless NGINX_MAX_BODY_SIZE is raised.
The monthly security cadence holds, but recent releases carry more of mailcow's own features and API changes alongside the upstream bumps. Breaking changes now come with explicit migration steps, which suggests the API is being cleaned up for integrators.
Expect the promised RCE advisory details next week and a lettered revision within weeks to address fallout from the sync job API and body-size changes.
The 9.0 candidate line opened on 27 October with a licensing change: LDAP, SAML and Custom OAuth now require a premium plan. Since rc.4 the candidates have been fixes, and rc.8 on 7 November carries a single one: servers that started during another server's database migration no longer keep stale settings until restart. On 6 November 8.9.1 LTS backported the 9.0 load fixes plus a security hotfix.
9.0 is in stabilization: each candidate is smaller than the last, and the load fixes are being carried to the LTS line rather than held for the major. Native LiveKit video is being promoted step by step, from alpha to beta and now as the named default provider option.
With rc.7 down to a handful of fixes, 9.0.0 GA is the next likely release, followed by further 8.9.x LTS patches carrying the same fixes.
Other Comms products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either mailcow or Rocket.Chat.
Rspamd 4.3 fixes SPF evaluation order and rejects weak DKIM keys, with results that change.
Twilio's voice AI stops cutting callers off mid-sentence, using its own turn-taking model.
Salesmsg adds call-back requests and a one-click Emergency Stop for all outbound texts.
Element 1.12.35 follows the call picture-in-picture release with one desktop storage fix.
Krisp moves call transcripts and live captions to cloud transcription in KrispCX 2.84.4.
Misskey 2026.11 ships: a leaner start script, and Node.js 22 no longer boots.
See all mailcow alternatives → · See all Rocket.Chat alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — self-hosted — within Comms. Rocket.Chat is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Rocket.Chat is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Comms products to evaluate alongside.
Top mailcow alternatives in Comms are ranked by recent ship velocity. Browse the "mailcow alternatives" section above for the current picks, or visit /alternatives/mailcow for the full list with editorial commentary on each.
Top Rocket.Chat alternatives in Comms are ranked by recent ship velocity. Browse the "Rocket.Chat alternatives" section above for the current picks, or visit /alternatives/rocketchat for the full list with editorial commentary on each.