Features
Everything you need to run email
From one-command installation to AI-powered spam filtering. CeyMail handles the complexity so you can focus on your business.
One-Command Install
Deploy a production-ready mail server with a single curl command. Postfix, Dovecot, OpenDKIM, SpamAssassin — all configured automatically.
AI Spam Screening
Screen inbound and outbound email with 99.2% accuracy. Cloud AI detects phishing, scams, and spoofing. Local AI keeps everything on your server.
AI Log Analysis
Automatically analyze Postfix, Dovecot, and OpenDKIM logs with AI. Detects authentication failures, delivery issues, and misconfigurations before they become problems. No other self-hosted mail server offers this.
Self-Hosted & Private
Your server, your data, your rules. No third-party scanning, no data mining. Full control over your email infrastructure.
Modern Dashboard
Manage domains, users, aliases, DKIM keys, mail queues, and server health from a beautiful web interface. No SSH required.
Dashboard
Everything in one place
Manage domains, mailboxes, aliases, DKIM signing, mail queues, and server health from a modern web dashboard. No SSH sessions, no config file editing.
- Domain and mailbox CRUD with real-time status
- Mail queue monitoring and management
- Server health metrics at a glance
- Role-based access for team admins
Domains
12
Mailboxes
248
Uptime
99.7%
AI Screening
Inbound and outbound spam protection
Screen both inbound and outbound email with 99.2% accuracy. Cloud mode uses advanced AI to catch phishing, scams, spoofing, and spam. Local mode runs entirely on your server for maximum privacy. Outbound screening protects your IP reputation by catching compromised accounts before they damage deliverability.
- Cloud AI — highest accuracy, detects phishing and spoofing (recommended)
- Local AI — on-device model, zero data leaves your server
- Outbound screening protects sender IP reputation
- Configurable thresholds with reject, tag, or quarantine actions
- Allow/block lists and real-time screening logs
Off
SpamAssassin only
Cloud
Advanced AI
Local
On-device AI
AI Log Analysis
Proactive issue detection
CeyMail is the only self-hosted mail server with built-in AI log analysis. It reviews Postfix, Dovecot, and OpenDKIM logs every 4 hours, detects authentication failures, delivery problems, and misconfigurations — then surfaces actionable recommendations before issues escalate.
- Automatic analysis every 4 hours with on-demand trigger
- Detects DKIM failures, auth attacks, delivery issues, DNS problems
- Severity ratings with specific issues and fix recommendations
- Your Gemini API key — log data goes server-to-Google, never through us
- An industry-first — no other self-hosted mail server offers this
Detected 2 issues in the last 4 hours across 342 log lines.
DKIM signature failures
12 outbound messages failed DKIM signing for startup.io
Repeated auth failures
47 failed IMAP logins from 3 IPs targeting admin@acme.com
Recommendations
Reliability
Self-healing mail infrastructure
CeyMail watches your mail services around the clock. If any critical service crashes, the watchdog detects it within minutes, automatically restarts it, and emails you only if recovery fails. Most outages resolve themselves before you even wake up.
- Monitors all services essential to sending and receiving email
- Automatic restart on crash with verification
- Email alerts sent through your configured SMTP relay
- Dashboard banner with one-click restart for all services
- Dismiss or permanently hide alerts for services you don't use
Recovery Timeline
Deliverability
DNS that configures itself
CeyMail generates the exact DKIM, SPF, DMARC, and PTR records your domain needs. Copy them into your DNS provider and you’ll pass every deliverability check.
- Auto-generated DNS records per domain
- DKIM key rotation with zero downtime
- DMARC reporting and alignment monitoring
- IP reputation and blacklist checking
MTA-STS
One-click MTA-STS for Gmail and Outlook
Senders enforcing MTA-STS will defer or bounce your mail if the policy host is missing or misconfigured. CeyMail provisions a per-domain virtual host serving the policy file, requests a Let’s Encrypt certificate, and renews it automatically — then runs live readiness checks so you know it’s working.
- Per-domain policy host at mta-sts.{domain} provisioned in one click
- Let’s Encrypt certificate issued and renewed automatically
- Four live readiness checks: DNS, HTTPS, certificate, policy ID
- TLSRPT record included so you receive TLS failure reports
- Removes the manual vhost, ACME, and renewal work that usually breaks MTA-STS
Per-domain policy host serving /.well-known/mta-sts.txt with an automatic Let's Encrypt certificate.
DNS resolves to this server
HTTPS policy endpoint reachable
Certificate valid
expires Jul 26, 2026
Policy ID in DNS matches server
Technical comparison
CeyMail vs self-hosted alternatives
Feature-by-feature comparison against the most popular open-source mail server platforms.
| Capability | Mailcow | Mail-in-a-Box | iRedMail | CeyMail |
|---|---|---|---|---|
| Web dashboard | Basic | Paid | ||
| One-command install | Docker | |||
| AI spam screening | Local + Cloud | |||
| AI log analysis | ||||
| Service watchdog | ||||
| Self-healing recovery | Partial | |||
| DKIM management UI | Auto-only | Paid | ||
| Backup & restore UI | CLI only | |||
| Two-factor authentication | ||||
| IP access control | ||||
| Role-based access | ||||
| Audit trail | ||||
| In-dashboard updates | CLI | |||
| Bulk user import | Paid | |||
| Mailbox quota management | Paid | |||
| Outbound rate limiting | Manual | |||
| Greylisting UI | ||||
| Domain aliases | Manual | |||
| TLS policy management | Manual | |||
| Sender rewriting (SRS) | ||||
| Per-user spam thresholds | Paid | |||
| SMTP relay config | Manual | |||
| Blacklist monitoring | ||||
| Deliverability scoring | ||||
| Auto-rollback on failure |
Web dashboard
One-command install
AI spam screening
AI log analysis
Service watchdog
Self-healing recovery
DKIM management UI
Backup & restore UI
Two-factor authentication
IP access control
Role-based access
Audit trail
In-dashboard updates
Bulk user import
Mailbox quota management
Outbound rate limiting
Greylisting UI
Domain aliases
TLS policy management
Sender rewriting (SRS)
Per-user spam thresholds
SMTP relay config
Blacklist monitoring
Deliverability scoring
Auto-rollback on failure
Under the hood
Battle-tested foundations
CeyMail builds on proven open-source infrastructure trusted by millions of mail servers worldwide.
Postfix
SMTP relay and delivery
Dovecot
IMAP and POP3 server
OpenDKIM
DKIM signing and verification
SpamAssassin
Rule-based spam filtering
Mission Control
Web dashboard (Next.js)