Every feature you need.
Nothing you don't.

Vectis Mail replaces Mailcow, iRedMail, and external email APIs with a single, declarative platform.

Core Mail Stack

Production-grade mail delivery out of the box.

Postfix MTA

Battle-tested mail transfer agent handling inbound and outbound SMTP. Virtual domain hosting with SQL-driven lookups — no config reload needed when adding domains or mailboxes.

Dovecot IMAP/POP3

IMAP and POP3 access with SSL/TLS, Argon2id password hashing, per-mailbox quotas, and LMTP delivery. ManageSieve for server-side filter rules.

Rspamd Spam Filtering

ML-based spam detection with Bayes classifier, neural network training, DKIM verification, SPF checks, greylisting, and configurable score thresholds.

ClamAV Antivirus

Optional antivirus scanning for inbound mail. Profile-gated — enable it in config.yaml when you need it, omit the container when you don't.

Developer Platform

APIs and webhooks for building on top of Vectis Mail.

Sending API

POST /api/v1/send with JSON payload. HTML + text bodies, attachments, custom headers. Domain-scoped API keys with rate limiting. Batch sending up to 100 messages per call.

Inbound Webhooks

Email arrives, Vectis parses it, POSTs the full content to your app. Body text, HTML, attachments, SMTP envelope — HMAC-SHA256 signed with exponential backoff retry.

Message Storage API

Query sent and received message metadata with full-text search. Filter by domain, direction, status, sender. Cursor-based pagination for large datasets.

Engagement Tracking

Optional open and click tracking via tracking pixel and redirect URLs. HMAC-signed tokens prevent spoofing. Opt-in per message.

Operations & Security

Built for production from day one.

Atomic Updates

6-phase orchestrator: snapshot, migrate, pull, deploy, health check, complete. Automatic rollback on failure. Advisory lock prevents concurrent operations.

Backup & Restore

Scheduled backups with AES-256-GCM encryption. Database, mail data, DKIM keys, and config archived. One-click restore from the dashboard.

RBAC + MFA

Three-tier roles: super_admin, admin, domain_admin. TOTP multi-factor auth. OIDC SSO with Google, Azure AD, and Keycloak. API key management with domain scoping.

Observability

Prometheus metrics, optional Grafana dashboards, Loki log aggregation, per-domain analytics, alertmanager rule templates. Everything you need to monitor at scale.

View Pricing Install Now