Fonoster
Fonoster Cloud starts charging for calls as the project moves to fonoster.ai.
Comparison · Comms
Rspamd vs Stoat
A side-by-side editorial comparison of Rspamd and Stoat — release velocity, themes, recent moves, and the top alternatives to consider.
Rspamd vs Stoat: at a glance
What is Rspamd?
Rspamd 4.2 hardens its parsers and ships memory-safety fixes three releases running.
The 4.2 line opened in September with a public suffix lookup replacing the old TLD tables, attachment content extraction for SVG, OOXML and DOCX, and one scheduler over the symbol dependency graph. 4.2.1 fixed critical memory-safety bugs including an HTTP heap overflow. 4.2.2 added wallet-address detection across twelve named currencies and changed MIME digests. 4.2.3 stopped trusting ARC forwarders whose seal fails and merged duplicate RBL queries, so a rule scores once per matched value.
What is Stoat?
Stoat moves to release candidates and Gerrit, and gives server admins more control.
Stoat's 0.16.0 release candidates add server controls: invites with expiry and use limits, permission to block external emojis, and bot roles that grant permissions when a bot joins. The team is also piloting Gerrit as its main source control and will now ship release candidates and backports.
Rspamd vs Stoat: editorial side-by-side
Rspamd
5.0COMMS
Rspamd 4.2 hardens its parsers and ships memory-safety fixes three releases running.
◆ Current state
The 4.2 line opened in September with a public suffix lookup replacing the old TLD tables, attachment content extraction for SVG, OOXML and DOCX, and one scheduler over the symbol dependency graph. 4.2.1 fixed critical memory-safety bugs including an HTTP heap overflow. 4.2.2 added wallet-address detection across twelve named currencies and changed MIME digests. 4.2.3 stopped trusting ARC forwarders whose seal fails and merged duplicate RBL queries, so a rule scores once per matched value.
◆ Where it's heading
The input-hardening walk from 4.1.x has become line-wide policy: limits on untrusted UCL, bounded PDF and decompression work, and HTML parsing that matches browsers so content cannot hide from the scan. Detection moves the same way, into what attachments and hidden text actually contain. Point releases keep carrying incompatible changes to digests and scoring, so operators need to read the notes on every update.
◆ Prediction
Expect more browser-parity fixes in HTML and URL handling, and attachment extraction beyond the SVG and OOXML set. The planned flip of allow_file_and_shm_inputs to false does not appear in the 4.2 notes, so it remains the breaking change to watch.
Stoat
5.0COMMS
Stoat moves to release candidates and Gerrit, and gives server admins more control.
◆ Current state
Stoat's 0.16.0 release candidates add server controls: invites with expiry and use limits, permission to block external emojis, and bot roles that grant permissions when a bot joins. The team is also piloting Gerrit as its main source control and will now ship release candidates and backports.
◆ Where it's heading
The feature list is about moderation and bot management for server owners, and rc.1 adds OpenTelemetry tracing for the file service. The process change toward RCs and backports suggests the team wants steadier releases for self-hosters.
◆ Prediction
A final 0.16.0 should follow the two RCs; the entries do not say when.
Alternatives to Rspamd and Stoat
Other Comms products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Rspamd or Stoat.
Netcore Cloud
Netcore's blog keeps pitching search-plus-email on one data core, with no product release.
Superhuman
Superhuman gives team admins a console and Enterprise a usage report that counts MCP.
Slack
Slack's CLI now points coding agents to its MCP server and Skills plugin
Synapse
Synapse opens the 1.165 cycle on schedule after two 1.164 patches
Whereby
Whereby folds three months into one digest and still lists nothing specific
See all Rspamd alternatives → · See all Stoat alternatives →
Recent activity from Rspamd and Stoat
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 15d agoRspamd4.2.3: ARC trust fix, merged RBL queries, browser-style HTML parsing
- 22d agoStoatStoat 0.16 RC1 adds OpenTelemetry tracing
- 22d agoStoatStoat 0.16 RC adds invite limits and bot roles
- 25d agoRspamd4.2.2: crypto wallet detection and changed MIME digests
- 1mo agoRspamd4.2.1: critical HTTP and memory-safety fixes
- 1mo agoRspamd4.2.0: public suffix lookup and attachment content extraction
- 2mo agoRspamdCloses an arbitrary file read reachable by any TCP client
- 3mo agoRspamdController accepted any password on a malformed hash
Frequently asked questions
What is the difference between Rspamd and Stoat?
They serve adjacent needs but don't currently overlap on shipped themes. Rspamd and Stoat are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Rspamd better than Stoat?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Rspamd and Stoat are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Comms products to evaluate alongside.
What are the best alternatives to Rspamd?
Top Rspamd alternatives in Comms are ranked by recent ship velocity. Browse the "Rspamd alternatives" section above for the current picks, or visit /alternatives/rspamd for the full list with editorial commentary on each.
What are the best alternatives to Stoat?
Top Stoat alternatives in Comms are ranked by recent ship velocity. Browse the "Stoat alternatives" section above for the current picks, or visit /alternatives/stoat for the full list with editorial commentary on each.