Pricing
Hermes SEG Pro is licensed per server. Choose monthly or annual billing, with or
without prepaid support incidents. Community Edition is free forever; the same
codebase powers both editions.
Community
Free, open source, no time limit.
$0
- Every email-security feature
- SMTP TLS, S/MIME, PGP, encrypted PDF
- SPF, DKIM, DMARC, ARC, OpenDKIM, OpenDMARC, OpenARC
- Dovecot 2.4 mailbox hosting
- Nextcloud Files, Mail, calendars, contacts
- Authelia SSO, TOTP, WebAuthn, Duo Push
- AdminLTE 4 console + end-user portal
- AGPLv3 source on GitHub
Pro — License only
Pro features, no prepaid support incidents.
$750/server / year
or $69 / server / month
- Everything in Community
- Let’s Encrypt (ACME) automation
- Email disclaimers
- Organizational signatures
- Intrusion Prevention (IPS) UI
- Console firewall UI
- LDAP RemoteAuth (incl. Active Directory)
- Community support (GitHub, Matrix)
Pro + Support
Pro features and direct vendor support.
$899/server / year
or $83 / server / month
- Everything in Pro
- 2 support incidents per year
- Email support direct with Deeztek engineers
- Reasonable response SLA
- Additional incidents available at $150 each
Support Incident
One-off support, no subscription.
$150/ incident
- One issue worked to resolution
- Use with any Pro or Community install
- No expiry; use whenever you need it
Try Pro free for 30 days
Not ready to commit? Grab a 30-day Hermes SEG Pro trial — no credit card,
no time wasted on a sales call. Every Pro feature unlocked. One trial per email
and per appliance.
Community vs Pro
Both editions share the same gateway, mail server, encryption, and Nextcloud
integration. Pro adds six administrative and operational features on top.
| Feature | Community | Pro |
|---|---|---|
| Anti-spam & anti-malware | ||
| SpamAssassin, postscreen, RBLs, allow/block lists | ✓ | ✓ |
| ClamAV + Fangfrisch-managed third-party signature feeds | ✓ | ✓ |
| Quarantine, message history search, queue management | ✓ | ✓ |
| Encryption | ||
| SMTP TLS, S/MIME, PGP (via CipherMail) | ✓ | ✓ |
| Encrypted PDF fallback delivery | ✓ | ✓ |
| Dovecot mail-crypt at-rest encryption | ✓ | ✓ |
| Internal CA for S/MIME certificate issuance | ✓ | ✓ |
| Let’s Encrypt (ACME) automation | — | ✓ |
| Email authentication | ||
| SPF check, multi-instance OpenDKIM, OpenDMARC, OpenARC | ✓ | ✓ |
| DKIM key generation and management UI | ✓ | ✓ |
| DMARC report aggregation | ✓ | ✓ |
| Identity, MFA & SSO | ||
| Authelia SSO with TOTP, WebAuthn, Duo Push | ✓ | ✓ |
| OpenLDAP local user store + app passwords | ✓ | ✓ |
| haveibeenpwned password check | ✓ | ✓ |
| LDAP RemoteAuth (Active Directory pass-through) | — | ✓ |
| Mail server & mailbox hosting | ||
| Dovecot 2.4: IMAPS, POP3S, Submission, LMTP | ✓ | ✓ |
| Per-domain and per-mailbox quotas, Sieve, vacation | ✓ | ✓ |
| Shared mailboxes & folders, signed mobile profiles | ✓ | ✓ |
| Personal email signatures (per user, template gallery) | ✓ | ✓ |
| Organizational signatures (per domain, central template) | — | ✓ |
| Email disclaimers (per-domain, milter-level) | — | ✓ |
| Nextcloud bundle | ||
| Files, webmail, calendars (CalDAV), contacts (CardDAV) | ✓ | ✓ |
| OIDC SSO + auto-provisioning via Authelia | ✓ | ✓ |
| Administration & operations | ||
| AdminLTE 4 console, dashboard, message statistics | ✓ | ✓ |
| End-user self-service portal | ✓ | ✓ |
| Searchable event logs, Ofelia scheduled-tasks UI | ✓ | ✓ |
| Unbound local recursive DNS resolver | ✓ | ✓ |
| Console firewall management UI | — | ✓ |
| Intrusion Prevention (Fail2ban) management UI | — | ✓ |
| Licensing & support | ||
| Source code (AGPLv3 on GitHub) | ✓ | ✓ |
| Community support (GitHub, Matrix) | ✓ | ✓ |
| Direct vendor support incidents | — | Pro + Support tier |
Need detail on any Pro feature? See the Pro feature page for
full descriptions.
Frequently asked questions
What’s a “server” for licensing purposes?
One Pro license activates one Hermes SEG installation, bound to that machine’s hardware
UUID on first activation. If you run two Hermes installs — production and a hot
standby, or two separate gateways serving different domains — you need two licenses.
Running the same license on a different machine requires unbinding the previous binding;
contact us to do so.
Do you sell to managed-service providers?
Yes — per-server pricing is the same whether you operate one Hermes install or
fifty. For MSPs running ten or more Pro servers, contact us about volume pricing and
consolidated billing. Most MSPs purchase license-only (no incidents) for their
customer fleet and a smaller number of license-plus-support seats for their own
engineering teams.
Monthly versus annual — which should I pick?
Annual costs roughly 10% less per month than the monthly option and locks in your rate
for the term. Monthly is friendlier to cash flow and lets you cancel any time. There’s
no commitment penalty for switching from monthly to annual later; the difference is
purely billing cadence.
How does support work?
Pro + Support includes two support incidents per twelve-month subscription period.
An incident is one defined issue — “DKIM signing is failing for domain X” or
“console certificate didn’t auto-renew” — worked to resolution. Open an
incident via the support portal; you’ll get a response from a Deeztek engineer.
Bulk-incident packs and annual support contracts are available for larger
deployments; contact us.
What payment methods do you accept?
Credit and debit card via Stripe. All prices are in U.S. dollars.
Running ten or more servers?
For MSPs, multi-site deployments, and organizations with significant Pro footprints,
we offer volume pricing, consolidated annual invoicing, and dedicated support arrangements.
Tell us about your deployment and we’ll work out terms that match.