← Back to home
Comparison · Comms

Mailu vs VerneMQ

A side-by-side editorial comparison of Mailu and VerneMQ — release velocity, themes, recent moves, and the top alternatives to consider.

Mailu vs VerneMQ: at a glance

FeatureMailuVerneMQ
SectorCommsComms
Velocity score5.02.5
Sparks · 30d00
Top themesmaintenance-branch, roundcube, cve-patching, self-hosted-mailmqtt, message-broker, clustering, shared-subscriptions
Last editorial update5h ago1h ago
WebsiteVisit →Visit →

What is Mailu?

Mailu's October: patched PHP for webmail, and a resolver that reports DNS failures

Mailu's 2024.06 branch shipped six pinned releases in October, each tied to a single issue. Three dealt with the resolver: handling the DNSSEC KSK rollover, then making the healthcheck fail on SERVFAIL, re-shipped once. Three were webmail: Roundcube 1.6.20, mitigations for the PHP2Shell CVEs, and then the patched PHP runtime. Late September releases fixed boolean settings that could not be turned off and stale webmail sessions after switching accounts via SSO.

Read the full Mailu trajectory →

What is VerneMQ?

VerneMQ follows its year-in-the-making 2.2.0 with a quick round of subscription fixes.

VerneMQ releases infrequently; 2.2.0 on August 9 gathered about a year of cluster and connection work, including a socket-counting fix under rapid reconnects and faster inter-node readiness checks. 2.2.1 on October 16 followed with fixes for stale shared subscriptions after trie restarts, enforcement of non-zero message ids, and new webhook connect options.

Read the full VerneMQ trajectory →

Mailu vs VerneMQ: editorial side-by-side

M
Mailu
COMMS
5.0

Mailu's October: patched PHP for webmail, and a resolver that reports DNS failures

◆ Current state

Mailu's 2024.06 branch shipped six pinned releases in October, each tied to a single issue. Three dealt with the resolver: handling the DNSSEC KSK rollover, then making the healthcheck fail on SERVFAIL, re-shipped once. Three were webmail: Roundcube 1.6.20, mitigations for the PHP2Shell CVEs, and then the patched PHP runtime. Late September releases fixed boolean settings that could not be turned off and stale webmail sessions after switching accounts via SSO.

◆ Where it's heading

The project remains in one-fix-per-release maintenance on the 2024.06 line, with upstream webmail and PHP security driving much of the cadence. Nothing in the entries points to a new main release.

◆ Prediction

The next releases will most likely follow upstream Roundcube or PHP security fixes, as three of the last six did.

V
VerneMQ
COMMS
2.5

VerneMQ follows its year-in-the-making 2.2.0 with a quick round of subscription fixes.

◆ Current state

VerneMQ releases infrequently; 2.2.0 on August 9 gathered about a year of cluster and connection work, including a socket-counting fix under rapid reconnects and faster inter-node readiness checks. 2.2.1 on October 16 followed with fixes for stale shared subscriptions after trie restarts, enforcement of non-zero message ids, and new webhook connect options.

◆ Where it's heading

Two months between 2.2.0 and 2.2.1 is quick for this project, which suggests 2.2 is getting active maintenance. The work stays inside the broker: subscriptions, clustering and protocol correctness rather than new features.

◆ Prediction

Further 2.2.x patches are more likely than a new minor; the feed gives no sign of 2.3 work.

Alternatives to Mailu and VerneMQ

Other Comms products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Mailu or VerneMQ.

See all Mailu alternatives → · See all VerneMQ alternatives →

Recent activity from Mailu and VerneMQ

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 10d agoMailuMailu ships patched PHP for PHP2Shell CVEs
  2. 11d agoMailuMailu mitigates PHP2Shell webmail CVEs
  3. 13d agoMailuMailu 2024.06.65: Roundcube 1.6.20 update
  4. 17d agoVerneMQVerneMQ 2.2.1
  5. 18d agoMailu2024.06.64 re-ships the resolver healthcheck fix
  6. 20d agoMailu2024.06.63 makes the resolver healthcheck catch SERVFAIL
  7. 21d agoMailu2024.06.62 handles the DNSSEC KSK rollover
  8. 2mo agoVerneMQSocket-count fix, WS(S) anonymous override, faster cluster readiness
  9. 6mo agoVerneMQTesting candidate later folded into 2.2.0
  10. 7mo agoVerneMQSUBACK error-path fix and routing-table memory reduction
  11. 1y agoVerneMQSyslog boot fix and an HTTPS config regression from 2.1.0
  12. 1y agoVerneMQBreaking on-disk metadata format change

Frequently asked questions

What is the difference between Mailu and VerneMQ?

They serve adjacent needs but don't currently overlap on shipped themes. Mailu is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Mailu better than VerneMQ?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Mailu is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Comms products to evaluate alongside.

What are the best alternatives to Mailu?

Top Mailu alternatives in Comms are ranked by recent ship velocity. Browse the "Mailu alternatives" section above for the current picks, or visit /alternatives/mailu for the full list with editorial commentary on each.

What are the best alternatives to VerneMQ?

Top VerneMQ alternatives in Comms are ranked by recent ship velocity. Browse the "VerneMQ alternatives" section above for the current picks, or visit /alternatives/vernemq for the full list with editorial commentary on each.