Hermes Secure Email Gateway
7.7#3 in email security gatewaysFree planFree planWebLinuxSelf-hosted
VisitHermes Secure Email Gateway vs Rspamd
What both publish
| Fact | Hermes Secure Email Gateway | Rspamd |
|---|---|---|
| Deployment | It can run as a gateway in front of Microsoft 365, Google Workspace, Exchange, or Postfix, as a full mail server, or in hybrid mode. | The project describes the engine as runnable on-premises, with message data staying in the user's environment and no mandatory vendor cloud dependency. |
| Documentation depth | Online documentation is organized into installation/reference material, a 60-page administrator guide and an 11-page user guide. | Documentation includes installation, configuration, modules, workers, tutorials, developer architecture and protocol material, a Lua API reference and FAQ. |
| Email authentication | The stack checks SPF, signs and verifies DKIM, enforces and aggregates DMARC, and signs and verifies ARC. | Rspamd validates SPF, DKIM, DMARC and ARC, including cryptographic signing capabilities. |
| Filtering | Inbound mail passes through Postfix postscreen and RBL checks, then Amavisd-new orchestrates SpamAssassin and ClamAV scanning. | It combines reputation, sender authentication, content analysis, and machine learning to score and filter messages. |
| Malware scanning | ClamAV and Amavisd-new scan messages, with Fangfrisch-managed third-party signature feeds. | Rspamd can integrate with ClamAV and commercial antivirus engines to detect malware and dangerous attachment types. |
Hermes Secure Email Gateway plans
- Community EditionFree
- Pro Edition$750
Rspamd plans
- Open-source RspamdFree
- Scale£100 a month
- EnterprisePriced on request
- HostedPriced on request
Pick Hermes Secure Email Gateway if…
Hermes is aimed at SMBs, MSPs, self-hosters, privacy-focused teams, and organizations adding a gateway before Microsoft 365 or Google Workspace. It requires a Linux host capable of running its specified Docker components.
Pick Rspamd if…
Rspamd suits organizations operating their own mail systems that need gateway filtering and control over deployment. It may also suit teams seeking premium engineering support or enterprise SLA options.