Every feature you need.
Nothing you don't.
Vectis Mail replaces Mailcow, iRedMail, and external email APIs with a single, declarative platform.
Core Mail Stack
Production-grade mail delivery out of the box.
Postfix MTA
Battle-tested mail transfer agent handling inbound and outbound SMTP. Virtual domain hosting with SQL-driven lookups — no config reload needed when adding domains or mailboxes.
Dovecot IMAP/POP3
IMAP and POP3 access with SSL/TLS, Argon2id password hashing, per-mailbox quotas, and LMTP delivery. ManageSieve for server-side filter rules.
Rspamd Spam Filtering
ML-based spam detection with Bayes classifier, neural network training, DKIM verification, SPF checks, greylisting, and configurable score thresholds.
ClamAV Antivirus
Optional antivirus scanning for inbound mail. Profile-gated — enable it in config.yaml when you need it, omit the container when you don't.
Developer Platform
APIs and webhooks for building on top of Vectis Mail.
Sending API
POST /api/v1/send with JSON payload. HTML + text bodies, attachments, custom headers. Domain-scoped API keys with rate limiting. Batch sending up to 100 messages per call.
Inbound Webhooks
Email arrives, Vectis parses it, POSTs the full content to your app. Body text, HTML, attachments, SMTP envelope — HMAC-SHA256 signed with exponential backoff retry.
Message Storage API
Query sent and received message metadata with full-text search. Filter by domain, direction, status, sender. Cursor-based pagination for large datasets.
Engagement Tracking
Optional open and click tracking via tracking pixel and redirect URLs. HMAC-signed tokens prevent spoofing. Opt-in per message.
Pro — Advanced Spam Filtering
Per-domain spam controls beyond the Starter defaults.
Per-Domain Reject Threshold
Override the global Rspamd reject score per domain. Tighten one domain to reject earlier without changing the rest.
Per-Domain Greylisting
Enable or disable greylisting on a per-domain basis. Trade off first-message delay against spam reduction wherever it matters.
Allow / Block Lists
Per-domain allow and block lists at both email-address and sender-domain scope. Edits take effect within seconds — no restart, no config file editing.
Operations & Security
Built for production from day one.
Atomic Updates
6-phase orchestrator: snapshot, migrate, pull, deploy, health check, complete. Automatic rollback on failure. Advisory lock prevents concurrent operations.
Backup & Restore
Scheduled backups with AES-256-GCM encryption. Database, mail data, DKIM keys, and config archived. One-click restore from the dashboard.
RBAC + MFA
Three-tier roles: super_admin, admin, domain_admin. TOTP multi-factor auth. OIDC SSO with Google, Azure AD, and Keycloak. API key management with domain scoping.
Observability
Prometheus-format metrics and health alerts built in; optional Grafana dashboards and Loki log aggregation (off by default). Per-domain analytics on Pro. Everything you need to monitor at scale.
Vectis Mail vs typical mail-server setups
How Vectis Mail compares to the three things people actually choose between when they need email: a raw Postfix install, a self-hosted stack like Mailcow/iRedMail, or transactional SaaS like SendGrid/Postmark.
| Capability | Vectis Mail | Raw Postfix / Dovecot | Mailcow / iRedMail | SendGrid / Postmark |
|---|---|---|---|---|
| Time to production | Minutes (single command) | Days to weeks | Hours | Minutes |
| Configuration model | Declarative YAML + REST API | Manual config files | Web UI | Dashboard + API |
| REST API for sending | Yes — 40+ endpoints | Bring your own | Partial | Yes |
| Inbound webhooks (parsed) | Yes — HMAC-signed | Bring your own | Partial | Yes |
| Mailbox hosting (IMAP/POP3) | Yes | Yes | Yes | No (transactional only) |
| Per-domain analytics dashboard | Yes (Pro) | No | Limited | Yes |
| Atomic updates with rollback | Yes — 6-phase pipeline | Manual | Manual | n/a (vendor managed) |
| Self-hosted on your VPS | Yes | Yes | Yes | No |
| Data sovereignty | Full — your server | Full | Full | None — vendor controls |
| Cost at 100K emails/mo | $49 flat (Pro + VPS) | VPS only ($5–20) + your time | VPS + your time | $20–90 metered |
| Cost at 1M emails/mo | $49 flat | VPS only + your time | VPS + your time | $90–200+ |
| Source available | Yes — Business Source License 1.1 | Yes — GPL/IBM | Yes | No |
| License model | Source-available; auto-Apache 2.0 after 4y | Open source | Open source | Proprietary SaaS |
For deep, per-product comparisons see the alternatives index — vs Mailcow, vs iRedMail, vs Mail-in-a-Box, vs SendGrid, vs Postmark.
Starter vs Pro — full comparison
Every feature, side by side. Everything below the divider is Pro-only.
| Feature | Starter (Free) | Pro ($29 USD/mo) |
|---|---|---|
| Postfix MTA (inbound + outbound SMTP) | Yes | Yes |
| Dovecot IMAP / POP3 / ManageSieve | Yes | Yes |
| Rspamd spam filtering (Bayes + neural) | Yes | Yes |
| ClamAV antivirus (optional) | Yes | Yes |
| Sending API + batch sending | Yes | Yes |
| Inbound webhooks (HMAC-signed) | Yes | Yes |
| Message storage API + search | Yes | Yes |
| Engagement tracking (opens, clicks) | Yes | Yes |
| Admin dashboard + Roundcube webmail | Yes | Yes |
| DKIM / SPF / DMARC + automatic TLS | Yes | Yes |
| Atomic updates with auto-rollback | Yes | Yes |
| Backup & restore (AES-256-GCM) | Yes | Yes |
| RBAC (super_admin / admin / domain_admin) + TOTP MFA | Yes | Yes |
| Metrics + health alerts (Grafana + Loki optional) | Yes | Yes |
| IP warmup & RBL monitoring | Yes | Yes |
| Domains | Up to 3 | Unlimited |
| Mailboxes per domain | Up to 25 | Unlimited |
| Per-domain analytics dashboard | — | Yes |
| Per-domain reject threshold (Rspamd) | — | Yes |
| Per-domain greylisting toggle | — | Yes |
| Per-domain allow / block lists | — | Yes |
| OIDC SSO (Google, Azure AD, Keycloak) | — | Yes |
| Support | Community | Priority email |