
Apache SpamAssassin
Apache SpamAssassin is free, open-source software that classifies email and helps system administrators block unsolicited bulk messages.
What Apache SpamAssassin is
Apache SpamAssassin is free, open-source software that classifies email and helps system administrators block unsolicited bulk messages. It runs on a server to filter spam before it reaches a mailbox. Detection combines header and text analysis, Bayesian filtering, DNS blocklists, collaborative filtering databases, and other local and network tests. A scoring framework and plugins add heuristic and statistical checks. Tests and configuration are kept in plain text, so administrators can adjust settings and add rules. The Mail::SpamAssassin API can be integrated with email systems including procmail, sendmail, Postfix, and qmail. Its core distribution consists of command-line filtering tools and Perl modules for use in other products. The downloads page lists version 4.0.2 as the released version. Official releases are signed with a GPG key, and downloads have links to signatures and SHA-256 and SHA-512 checksums. Users can ask questions on the mailing list, where developers and PMC members respond as time permits. The project advises administrators to replace default report-template contact details with their own support desk information.
Good
- Combines Bayesian filtering with local and network tests
- Plain-text configuration can be adjusted with added rules
- API supports procmail, sendmail, Postfix, and qmail
- Official releases include signature and checksum links
Watch out
- Requires server-side deployment
- Support mailing-list responses are provided as time permits
- Administrators should replace default report-template contact details
Who it suits
SpamAssassin suits system administrators who want to filter unsolicited email on a server and configure tests or rules. Its API and Perl modules also suit teams integrating filtering into supported mail systems.
Verdict
SpamAssassin provides configurable server-side filtering with several detection methods and mail-system integration options. Administrators should account for deployment and maintenance responsibilities, including updating the report-template contact details.
Plans and prices
From Apache SpamAssassin's own pricing page, checked 14 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Apache SpamAssassin | Free | self-hosted mail filtering · administrator-managed configuration · no hosted service described · Free software |
The facts
Each one read from Apache SpamAssassin's own pages, with the date it was checked.
What it does
- API
- The Mail::SpamAssassin classes expose an abstract API for embedding the engine in mail systems.checked 14 Oct 2026
- Bayesian filtering
- The software includes Bayesian learning that can be trained with ham and spam examples using sa-learn.checked 14 Oct 2026
- Command-line tools
- The distribution includes filtering tools plus spamc, spamd, sa-learn, sa-update and sa-compile utilities.checked 14 Oct 2026
- Configuration
- Anti-spam tests and configuration are stored in plain text, so users can configure the software and add rules.checked 5 Oct 2026
- Current listed release
- The downloads page lists version 4.0.2 as the released version.checked 5 Oct 2026
- Current release
- The official site lists Apache SpamAssassin 4.0.2, released on 2025-08-30.checked 14 Oct 2026
- Deployment
- The project wiki says SpamAssassin runs on a server and filters spam before it reaches the mailbox.checked 5 Oct 2026
- Detection methods
- Its scoring framework combines heuristic and statistical tests on headers and message bodies.checked 14 Oct 2026
- Distribution
- The core distribution consists of command-line filtering tools and Perl modules for use in other products.checked 5 Oct 2026
- Documentation depth
- Documentation includes README, INSTALL, UPGRADE, spamd and SQL-preference guides, wiki material and versioned POD manuals.checked 14 Oct 2026
- Download integrity
- Official release archives provide GPG signatures and SHA-256 and SHA-512 checksums.checked 14 Oct 2026
- Independent architecture
- Wikipedia describes it as a Perl-based application that can run standalone, behind spamd, or inside mail-filter programs such as Amavis and MIMEDefang.checked 14 Oct 2026
- Independent feature gaps
- SourceForge marks allow/block lists, audit logs, archiving, recovery, routing, encryption, fraud detection, quarantine, reporting and statistics as not supported.checked 14 Oct 2026
- Independent integrations listing
- SourceForge lists Exim, GlockApps, KMail, Rad Web Hosting, Sekoia.io and SPanel as integrations.checked 14 Oct 2026
- Independent limitation
- Wikipedia notes that heuristic classification can produce both false positives and false negatives.checked 14 Oct 2026
- Independent popularity
- AlternativeTo shows 15 likes for SpamAssassin and labels it free and open source.checked 14 Oct 2026
- Independent review availability
- SourceForge states that SpamAssassin had not been reviewed on its listing when accessed.checked 14 Oct 2026
- Independent training listing
- SourceForge says the available training format is documentation.checked 14 Oct 2026
- Integration
- Its Mail::SpamAssassin API can be integrated into email systems including procmail, sendmail, Postfix, and qmail.checked 5 Oct 2026
- License
- Apache SpamAssassin is free open-source software under the Apache License 2.0.checked 14 Oct 2026
- Limit: false positives
- Project guidance says occasional false positives are unavoidable and recommends checking Bayes and AWL training when they recur.checked 14 Oct 2026
- Limit: learning curve
- The same Reddit discussion describes self-managed filtering as requiring staff expertise and a significant initial learning curve.checked 14 Oct 2026
The company
- Company ownership
- SpamAssassin is an Apache Software Foundation project rather than a commercial vendor product.checked 14 Oct 2026
Where it runs
- Independent platform listing
- AlternativeTo categorizes SpamAssassin for Linux, self-hosted, Windows, web and Mac environments.checked 14 Oct 2026
The full review of Apache SpamAssassin
Overview
Apache SpamAssassin is a free, open-source email filter for administrators who manage their own mail infrastructure. It is strongest when you want configurable spam classification integrated into an existing mail system, rather than a hosted service that manages filtering for you.
Key features
SpamAssassin combines header and text analysis, Bayesian filtering, DNS blocklists and collaborative filtering databases. Its scoring framework and plugins apply heuristic and statistical tests, while local and network checks look for spam signatures. In practice, this range of signals gives administrators room to tune filtering; it also makes configuration and ongoing upkeep part of the job.
Tests and settings live in plain-text configuration, so administrators can add rules and adjust behavior directly. The core distribution supplies command-line filtering tools and Perl modules for use in other products. Its Mail::SpamAssassin API integrates with procmail, sendmail, Postfix and qmail, allowing filtering before messages reach a mailbox. The product supports phishing detection, malware scanning and attachment scanning.
The downloads page lists release 4.0.2. Official releases carry GPG signatures and SHA-256 and SHA-512 checksum links, which support verification before deployment. Administrators should also replace the default report-template contact details with their own support desk information.
Pricing
Apache SpamAssassin costs nothing. The open-source distribution includes command-line filtering tools and Perl modules, with no trial period because the software is free. There are no paid plan tiers described; the tradeoff is that administrators deploy and maintain the filtering themselves rather than paying for a managed service.
Platforms
SpamAssassin is listed for API, Linux and self-hosted use. It runs on a server and filters mail before it reaches the mailbox, so it suits teams with control over server infrastructure rather than people seeking a standalone consumer inbox app.
Who it's for
Choose SpamAssassin if you administer a mail system using procmail, sendmail, Postfix or qmail and want to configure filtering rules and detection behavior. It is a less suitable choice for users who want a hosted, turnkey filter or do not want responsibility for server deployment, configuration and report-template contact details. Questions can go to the user mailing list, where developers and PMC members respond as time permits; security issues can be emailed to the project or reported in Bugzilla with the Security component selected.
Pros and cons
- Pros: Multiple detection methods, scoring and plugins allow configurable classification rather than reliance on a single signal.
- Pros: API integration with four named mail systems supports filtering within existing server workflows.
- Pros: Free, open-source software avoids a software subscription charge.
- Cons: Self-hosted deployment and plain-text rule management place setup and maintenance on administrators.
- Cons: The report template needs its default contact details replaced with the administrator's own support information.
Alternatives
Browse Email Anti-Spam Software to compare category options. Choose MailWasher instead if you want a freemium option for Android, iOS or Windows; its free plan covers one email account and has no support, while its Pro plan is $49.95 a year, with renewal at $34.95 per year. Rspamd is another free, self-hosted option for Linux or macOS; consider it when you want an alternative open-source engine, or its listed Scale plan at £100 a month.
JetEmail offers a web-based marketing suite, including a free tier that does not expire and covers 1,000 subscribers and 1 GB of image storage, so it is for email marketing rather than server-side spam filtering. Mailprotector is worth considering for a free email security check through its Radar plan; its other product pricing is custom. MailChannels Inbound Filtering is a paid API or web alternative with pricing by sales contact.
Mimecast Data Leak Prevention is a paid web option with contact-for-pricing plans, aimed at a different need than spam filtering. Cleanmail is a paid self-hosted or web alternative with a free trial. Forcepoint ZTNA is a paid option with pricing by request.
Verdict
Apache SpamAssassin is a strong fit for mail administrators who want free, configurable filtering that can be integrated into established server workflows. Its breadth of detection methods is the central reason to choose it; look elsewhere if you need a managed service or want to avoid deployment and maintenance responsibilities.
Getting started
- Open the Apache SpamAssassin website
- Deploy it on a self-hosted Linux server
- Install the command-line filtering tools and Perl modules
- Connect the Mail::SpamAssassin API to procmail, sendmail, Postfix, or qmail
- Adjust plain-text tests, settings, and rules for your mail flow
Limits worth knowing
The listed plan is free open-source software, with no free-trial period. Deployment is self-hosted, and the core distribution centers on command-line tools and Perl modules.
Questions
How much does Apache SpamAssassin cost?
The Apache SpamAssassin plan costs nothing. It is open-source software, and a free plan is available.
Which platforms does it support?
Listed platforms are API, Linux, and self-hosted deployment.
Can it connect to mail systems?
Yes. Its Mail::SpamAssassin API can integrate with procmail, sendmail, Postfix, and qmail.
What detection does it provide?
It uses header and text analysis, Bayesian filtering, DNS blocklists, collaborative databases, scoring, plugins, and local or network tests. Phishing, malware, and attachment scanning are listed.
What release is listed?
The downloads page lists version 4.0.2 as the released version.
Alternatives to Apache SpamAssassin
- 1
Rspamd
Free planOpen sourceWebAPILinuxmacOS8.2From £100 a month - 2
SPAMfighter
Free planAndroidiOSExtensionmacOS8.0From $29 a year - 3
MailWasher
Free planAndroidiOSSelf-hostedWindows7.8From $49.95 a year - 4
JetEmail
Free planWebAPI7.1From $10 a month - 5

Mailprotector
Free planWebAPI7.0Free plan - 6

Symantec IT Management Suite
WebAPILinuxmacOS6.8
