← Back to home
Comparison · Comms

Mailu vs Misskey

A side-by-side editorial comparison of Mailu and Misskey — release velocity, themes, recent moves, and the top alternatives to consider.

Mailu vs Misskey: at a glance

FeatureMailuMisskey
SectorCommsComms
Velocity score5.05.0
Sparks · 30d00
Top themesmaintenance-branch, roundcube, cve-patching, self-hosted-mailfediverse, activitypub, self-hosted, security patches
Last editorial update3h ago1h ago
WebsiteVisit →Visit →

What is Mailu?

Mailu's October: patched PHP for webmail, and a resolver that reports DNS failures

Mailu's 2024.06 branch shipped six pinned releases in October, each tied to a single issue. Three dealt with the resolver: handling the DNSSEC KSK rollover, then making the healthcheck fail on SERVFAIL, re-shipped once. Three were webmail: Roundcube 1.6.20, mitigations for the PHP2Shell CVEs, and then the patched PHP runtime. Late September releases fixed boolean settings that could not be turned off and stale webmail sessions after switching accounts via SSO.

Read the full Mailu trajectory →

What is Misskey?

Misskey moves to Sentry v11 and keeps shipping security fixes in its monthly releases.

Misskey, the ActivityPub social server, shipped 2026.10.0 with a security fix and an HTTP Signatures fix, then 2026.10.1, which moves to Sentry SDK v11 and replaces sendDefaultPii with a dataCollection setting. The 2026.10.2 alpha improves how quote posts from Mastodon and other software display and makes the server stop safely on a bad job-queue config.

Read the full Misskey trajectory →

Mailu vs Misskey: editorial side-by-side

M
Mailu
COMMS
5.0

Mailu's October: patched PHP for webmail, and a resolver that reports DNS failures

◆ Current state

Mailu's 2024.06 branch shipped six pinned releases in October, each tied to a single issue. Three dealt with the resolver: handling the DNSSEC KSK rollover, then making the healthcheck fail on SERVFAIL, re-shipped once. Three were webmail: Roundcube 1.6.20, mitigations for the PHP2Shell CVEs, and then the patched PHP runtime. Late September releases fixed boolean settings that could not be turned off and stale webmail sessions after switching accounts via SSO.

◆ Where it's heading

The project remains in one-fix-per-release maintenance on the 2024.06 line, with upstream webmail and PHP security driving much of the cadence. Nothing in the entries points to a new main release.

◆ Prediction

The next releases will most likely follow upstream Roundcube or PHP security fixes, as three of the last six did.

M
Misskey
COMMS
5.0

Misskey moves to Sentry v11 and keeps shipping security fixes in its monthly releases.

◆ Current state

Misskey, the ActivityPub social server, shipped 2026.10.0 with a security fix and an HTTP Signatures fix, then 2026.10.1, which moves to Sentry SDK v11 and replaces sendDefaultPii with a dataCollection setting. The 2026.10.2 alpha improves how quote posts from Mastodon and other software display and makes the server stop safely on a bad job-queue config.

◆ Where it's heading

Each version goes through alpha and beta tags before stable, and security fixes appear in most stable releases since 2026.9.0. Federation polish, such as how other servers' quotes and signatures are handled, is the main user-facing thread.

◆ Prediction

Expect 2026.10.2 stable soon after its alpha, carrying the quote display and deck fixes, with 2026.11 alphas following on the monthly cadence.

Alternatives to Mailu and Misskey

Other Comms products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Mailu or Misskey.

See all Mailu alternatives → · See all Misskey alternatives →

Recent activity from Mailu and Misskey

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 2d agoMisskey2026.10.2 alpha improves quotes from Mastodon
  2. 9d agoMisskeyMisskey 2026.10.1 changes requirements and Sentry config
  3. 10d agoMailuMailu ships patched PHP for PHP2Shell CVEs
  4. 11d agoMailuMailu mitigates PHP2Shell webmail CVEs
  5. 12d agoMailuMailu 2024.06.65: Roundcube 1.6.20 update
  6. 13d agoMisskeyMisskey 2026.10.1 alpha.1 pre-release
  7. 18d agoMailu2024.06.64 re-ships the resolver healthcheck fix
  8. 20d agoMailu2024.06.63 makes the resolver healthcheck catch SERVFAIL
  9. 20d agoMisskeyMisskey 2026.10.1 alpha.0 moves to Sentry SDK v11
  10. 21d agoMailu2024.06.62 handles the DNSSEC KSK rollover
  11. 1mo agoMisskeyMisskey 2026.10.0: security and HTTP Signatures fixes
  12. 1mo agoMisskey2026.9.2 alpha fixes HTTP Signatures query strings

Frequently asked questions

What is the difference between Mailu and Misskey?

They serve adjacent needs but don't currently overlap on shipped themes. Mailu and Misskey are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Mailu better than Misskey?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Mailu and Misskey are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Comms products to evaluate alongside.

What are the best alternatives to Mailu?

Top Mailu alternatives in Comms are ranked by recent ship velocity. Browse the "Mailu alternatives" section above for the current picks, or visit /alternatives/mailu for the full list with editorial commentary on each.

What are the best alternatives to Misskey?

Top Misskey alternatives in Comms are ranked by recent ship velocity. Browse the "Misskey alternatives" section above for the current picks, or visit /alternatives/misskey for the full list with editorial commentary on each.