← Back to home
Comparison · Comms

Maddy vs Synapse

A side-by-side editorial comparison of Maddy and Synapse — release velocity, themes, recent moves, and the top alternatives to consider.

Shared themes:self-hosted

Maddy vs Synapse: at a glance

FeatureMaddySynapse
SectorCommsComms
Velocity score0.05.0
Sparks · 30d00
Top themesmail-server, self-hosted, golang, securitymatrix-protocol, homeserver, security-patches, spec-compliance
Last editorial update1d ago5h ago
WebsiteVisit →Visit →

What is Maddy?

maddy's latest release is a security fix, five months after its last feature work.

maddy is an all-in-one Go mail server for SMTP and IMAP. Its most recent release, 0.9.6 in October, requires explicit trust for PROXY protocol headers and closes an auth misconfiguration that could skip password checks. Before that, the 0.9 line ran from March to May: no-downtime config reload in 0.9.0, an LDAP injection fix, and removal of long-deprecated commands.

Read the full Maddy trajectory →

What is Synapse?

Synapse 1.164 advertises Matrix v1.16 and v1.17 amid a run of dependency security patches

Synapse keeps its two-to-three-week cycle of candidates and stables. 1.164.0 went stable on 27 October with support for Matrix v1.16 and v1.17 and a dedicated endpoint for scheduling delayed events (MSC4140). The surrounding releases are security dependency bumps: certifi, a rustls-webpki update that distrusts the compromised eMudhra intermediate CAs, Pillow 13.0.0 for critical image-handling flaws, and msgpack against memory exhaustion on the public room list.

Read the full Synapse trajectory →

Maddy vs Synapse: editorial side-by-side

M
Maddy
COMMS
0.0

maddy's latest release is a security fix, five months after its last feature work.

◆ Current state

maddy is an all-in-one Go mail server for SMTP and IMAP. Its most recent release, 0.9.6 in October, requires explicit trust for PROXY protocol headers and closes an auth misconfiguration that could skip password checks. Before that, the 0.9 line ran from March to May: no-downtime config reload in 0.9.0, an LDAP injection fix, and removal of long-deprecated commands.

◆ Where it's heading

The project is moving from convenient defaults to safer ones, accepting breaking changes on the way. Older conveniences such as SASL LOGIN, STARTTLS plaintext fallback and the maddyctl symlink have been removed, and 0.9.1 flagged several DNS providers for removal in 0.10.0. Two of the last four releases were security fixes.

◆ Prediction

0.10.0 is scoped by the deprecations announced in 0.9.1: expect the flagged DNS providers to go and gandi to require Bearer tokens. The five-month gap gives no date for it.

S
Synapse
COMMS
5.0

Synapse 1.164 advertises Matrix v1.16 and v1.17 amid a run of dependency security patches

◆ Current state

Synapse keeps its two-to-three-week cycle of candidates and stables. 1.164.0 went stable on 27 October with support for Matrix v1.16 and v1.17 and a dedicated endpoint for scheduling delayed events (MSC4140). The surrounding releases are security dependency bumps: certifi, a rustls-webpki update that distrusts the compromised eMudhra intermediate CAs, Pillow 13.0.0 for critical image-handling flaws, and msgpack against memory exhaustion on the public room list.

◆ Where it's heading

The homeserver tracks the spec closely, stabilising MSCs as they land in Matrix releases, while backporting each security bump to the previous stable line. Sticky Events and User Status work suggest continued alignment with newer client features.

◆ Prediction

1.165 release candidates should follow within about two weeks, likely with further MSC stabilisations.

Alternatives to Maddy and Synapse

Other Comms products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Maddy or Synapse.

See all Maddy alternatives → · See all Synapse alternatives →

Recent activity from Maddy and Synapse

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 1d agoSynapseSynapse 1.164.2 patch release
  2. 6d agoSynapseSynapse 1.164.1: msgpack memory-exhaustion fix, status clearing
  3. 7d agoSynapseSynapse 1.164.0: Matrix v1.16/v1.17 support goes stable
  4. 11d agoSynapseSynapse 1.164.0rc3: Pillow 13 security bump
  5. 11d agoSynapseSynapse 1.163.2: Pillow critical security backport
  6. 12d agoSynapseSynapse 1.164.0rc2: certificate trust updates
  7. 1mo agoMaddymaddy 0.9.6 fixes PROXY trust and auth bypass misconfig
  8. 5mo agoMaddymaddy 0.9.5 fixes nested pipeline logging and systemd reload reporting
  9. 6mo agoMaddymaddy 0.9.4 removes the maddyctl symlink and implicit run command
  10. 6mo agoMaddymaddy 0.9.3 patches an LDAP injection flaw in auth.ldap
  11. 7mo agoMaddymaddy 0.9.2 fixes an rspamd panic on unspecified tls_client
  12. 7mo agoMaddymaddy 0.9.1 flags libdns providers for removal in 0.10.0

Frequently asked questions

What is the difference between Maddy and Synapse?

Both compete on the same themes — self-hosted — within Comms. Synapse is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Maddy better than Synapse?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Synapse is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Comms products to evaluate alongside.

What are the best alternatives to Maddy?

Top Maddy alternatives in Comms are ranked by recent ship velocity. Browse the "Maddy alternatives" section above for the current picks, or visit /alternatives/maddy for the full list with editorial commentary on each.

What are the best alternatives to Synapse?

Top Synapse alternatives in Comms are ranked by recent ship velocity. Browse the "Synapse alternatives" section above for the current picks, or visit /alternatives/synapse for the full list with editorial commentary on each.