Rspamd
Rspamd 4.3 fixes SPF evaluation order and rejects weak DKIM keys, with results that change.
Comparison · Comms
Roundcube vs Fonoster
A side-by-side editorial comparison of Roundcube and Fonoster — release velocity, themes, recent moves, and the top alternatives to consider.
Shared themes:open-source
Roundcube vs Fonoster: at a glance
What is Roundcube?
Roundcube patches its Sieve filters and CSRF checks in a sixth paired security release
Roundcube shipped 1.7.6 and 1.6.21 on 9 November, three weeks after 1.7.5 and 1.6.20, again as an identical security pair. This round centres on the managesieve filter plugin (two script-injection paths and destructive actions triggerable cross-site via GET), plus CSRF bypasses, an open redirect, an SSRF bypass via nip.io and sslip.io hostnames and a disabled_actions bypass.
What is Fonoster?
Fonoster now cleans up deleted workspaces and stops exposing stored secrets.
Fonoster ships minor versions almost daily. v0.51 to v0.53 added Anthropic, Google and Groq models, TTS voice choice and one-switch call recording. From November 10, v0.54 to v0.56 added branded emails, legal pages, webhook event lookups and API key rotation, and v0.57 returns secret values only to API keys, cancels a deleted user's plan, and ends a deleted workspace's calls and resources.
Roundcube vs Fonoster: editorial side-by-side
Roundcube
5.0COMMS
Roundcube patches its Sieve filters and CSRF checks in a sixth paired security release
◆ Current state
Roundcube shipped 1.7.6 and 1.6.21 on 9 November, three weeks after 1.7.5 and 1.6.20, again as an identical security pair. This round centres on the managesieve filter plugin (two script-injection paths and destructive actions triggerable cross-site via GET), plus CSRF bypasses, an open redirect, an SSRF bypass via nip.io and sslip.io hostnames and a disabled_actions bypass.
◆ Where it's heading
Security releases now arrive every three to five weeks, each with a dozen or more externally reported fixes, and the same research group is behind many of them. The project is in a sustained audit phase, and both branches move together every time.
◆ Prediction
Another paired 1.7.x and 1.6.x security release within about a month is the most likely next entry, given the cadence since June.
Fonoster
7.5COMMS
Fonoster now cleans up deleted workspaces and stops exposing stored secrets.
◆ Current state
Fonoster ships minor versions almost daily. v0.51 to v0.53 added Anthropic, Google and Groq models, TTS voice choice and one-switch call recording. From November 10, v0.54 to v0.56 added branded emails, legal pages, webhook event lookups and API key rotation, and v0.57 returns secret values only to API keys, cancels a deleted user's plan, and ends a deleted workspace's calls and resources.
◆ Where it's heading
After a quick run of voice-AI options, Fonoster has turned to what a hosted service needs before paying customers rely on it: legal pages, billing correctness, webhook debugging and account deletion that actually removes data. The cadence stays daily and the changes stay incremental.
◆ Prediction
More account and billing lifecycle work is likely next, since v0.57 adds a billing test case and deletion rules in the same release.
Alternatives to Roundcube and Fonoster
Other Comms products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Roundcube or Fonoster.
Twilio
Twilio's voice AI stops cutting callers off mid-sentence, using its own turn-taking model.
Salesmsg
Salesmsg adds call-back requests and a one-click Emergency Stop for all outbound texts.
Element
Element 1.12.35 follows the call picture-in-picture release with one desktop storage fix.
Krisp
Krisp moves call transcripts and live captions to cloud transcription in KrispCX 2.84.4.
Misskey
Misskey 2026.11 ships: a leaner start script, and Node.js 22 no longer boots.
See all Roundcube alternatives → · See all Fonoster alternatives →
Recent activity from Roundcube and Fonoster
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 3d agoFonosterv0.57: secrets locked to API keys, full cleanup on account deletion
- 3d agoFonosterv0.56: webhook event bodies visible, API key regenerate becomes rotate
- 3d agoFonosterFonoster v0.55 shows the event each webhook delivery sent
- 3d agoFonosterFonoster v0.54.1 stops gather cutting off early answers
- 3d agoFonosterFonoster v0.54 adds branded emails and legal pages
- 4d agoRoundcubeRoundcube Webmail 1.7.6
- 4d agoRoundcubeRoundcube Webmail 1.6.21
- 5d agoFonosterFonoster v0.53 adds one-switch call recording and credit usage
- 26d agoRoundcubeRoundcube Webmail 1.7.5
- 26d agoRoundcubeRoundcube Webmail 1.6.20
- 2mo agoRoundcubeRoundcube Webmail 1.7.4
- 2mo agoRoundcubeRoundcube Webmail 1.6.19
Frequently asked questions
What is the difference between Roundcube and Fonoster?
Both compete on the same themes — open-source — within Comms. Fonoster is currently shipping more aggressively (velocity 7.5 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Roundcube better than Fonoster?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Fonoster is currently shipping more aggressively (velocity 7.5 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Comms products to evaluate alongside.
What are the best alternatives to Roundcube?
Top Roundcube alternatives in Comms are ranked by recent ship velocity. Browse the "Roundcube alternatives" section above for the current picks, or visit /alternatives/roundcube for the full list with editorial commentary on each.
What are the best alternatives to Fonoster?
Top Fonoster alternatives in Comms are ranked by recent ship velocity. Browse the "Fonoster alternatives" section above for the current picks, or visit /alternatives/fonoster for the full list with editorial commentary on each.