Pricing
Hermes SEG Pro is licensed per server. Choose monthly or annual billing, with or without prepaid support incidents. Community Edition is free forever; the same codebase powers both editions.
The entire product is free — including for commercial use
Community Edition is not a crippled demo or a “personal use only” tier. It is the complete Hermes SEG platform under the AGPLv3, free to run in production at a business at no cost: the secure email gateway, a full Dovecot mail server, Nextcloud groupware, Authelia SSO and MFA, S/MIME + PGP + TLS encryption, the complete SPF/DKIM/DMARC/ARC authentication stack, quarantine, and automated Let’s Encrypt certificates. No per-mailbox fees, no per-seat fees, no sales call.
You pay only when you want the Pro operational add-ons — Link Guard, organization-wide signatures and disclaimers, the firewall and intrusion-prevention UIs, and LDAP / Active Directory pass-through — or direct vendor support. Everything that actually protects your mail is already in the free edition.
Community
Free, open source, no time limit.
$0
- Every email-security feature
- SMTP TLS, S/MIME, PGP, encrypted PDF
- SPF, DKIM, DMARC, ARC, OpenDKIM, OpenDMARC, OpenARC
- Dovecot 2.4 mailbox hosting
- Nextcloud Files, Mail, calendars, contacts
- Authelia SSO, TOTP, WebAuthn, Duo Push
- AdminLTE 4 console + end-user portal
- AGPLv3 source on GitHub
Pro — License only
Pro features, no prepaid support incidents.
$750/server / year
or $69 / server / month
- Everything in Community
- Link Guard (time-of-click link protection)
- Email disclaimers
- Organizational signatures
- Intrusion Prevention (IPS) UI
- Console firewall UI
- LDAP RemoteAuth (incl. Active Directory)
- Community support (GitHub, Matrix)
Pro + Support
Pro features and direct vendor support.
$899/server / year
or $83 / server / month
- Everything in Pro
- 2 support incidents per year
- Email support direct with Deeztek engineers
- Reasonable response SLA
- Additional incidents available at $150 each
Support Incident
One-off support, no subscription.
$150/ incident
- One issue worked to resolution
- Use with any Pro or Community install
- No expiry; use whenever you need it
Why per-server beats per-mailbox
Hosted email-security services bill per mailbox, every month. Hermes SEG Pro is $750 per server per year — for unlimited mailboxes. The more people you protect, the more lopsided that comparison becomes.
| Mailboxes protected | Per-mailbox service (illustrative, $3 / mailbox / month) |
Hermes SEG Pro ($750 / server / year) |
|---|---|---|
| 25 | $900 / yr | $750 / yr |
| 100 | $3,600 / yr | $750 / yr |
| 500 | $18,000 / yr | $750 / yr |
The per-mailbox figure is illustrative — hosted secure-email-gateway pricing is typically quote-based and commonly runs $2–$6 per mailbox per month. At $3, Hermes SEG Pro pays for itself at roughly 20 mailboxes; above that the difference is pure savings, and Community Edition remains free at any scale.
Try Pro free for 30 days
Not ready to commit? Grab a 30-day Hermes SEG Pro trial — no credit card, no time wasted on a sales call. Every Pro feature unlocked. One trial per email and per appliance.
Community vs Pro
Both editions share the same gateway, mail server, encryption, and Nextcloud integration. Pro adds six administrative, operational, and security features on top.
| Feature | Community | Pro |
|---|---|---|
| Anti-spam & anti-malware | ||
| SpamAssassin, postscreen, RBLs, allow/block lists | ✓ | ✓ |
| ClamAV + Fangfrisch-managed third-party signature feeds | ✓ | ✓ |
| Quarantine, message history search, queue management | ✓ | ✓ |
| Link Guard (time-of-click safe links) | — | ✓ |
| Encryption | ||
| SMTP TLS, S/MIME, PGP (via CipherMail) | ✓ | ✓ |
| Encrypted PDF fallback delivery | ✓ | ✓ |
| Dovecot mail-crypt at-rest encryption | ✓ | ✓ |
| Internal CA for S/MIME certificate issuance | ✓ | ✓ |
| Let’s Encrypt (ACME) automation | ✓ | ✓ |
| Email authentication | ||
| SPF check, multi-instance OpenDKIM, OpenDMARC, OpenARC | ✓ | ✓ |
| DKIM key generation and management UI | ✓ | ✓ |
| DMARC report aggregation | ✓ | ✓ |
| Identity, MFA & SSO | ||
| Authelia SSO with TOTP, WebAuthn, Duo Push | ✓ | ✓ |
| OpenLDAP local user store + app passwords | ✓ | ✓ |
| haveibeenpwned password check | ✓ | ✓ |
| LDAP RemoteAuth (Active Directory pass-through) | — | ✓ |
| Mail server & mailbox hosting | ||
| Dovecot 2.4: IMAPS, POP3S, Submission, LMTP | ✓ | ✓ |
| Per-domain and per-mailbox quotas, Sieve, vacation | ✓ | ✓ |
| Shared mailboxes & folders, signed mobile profiles | ✓ | ✓ |
| Personal email signatures (per user, template gallery) | ✓ | ✓ |
| Organizational signatures (per domain, central template) | — | ✓ |
| Email disclaimers (per-domain, milter-level) | — | ✓ |
| Nextcloud bundle | ||
| Files, webmail, calendars (CalDAV), contacts (CardDAV) | ✓ | ✓ |
| OIDC SSO + auto-provisioning via Authelia | ✓ | ✓ |
| Administration & operations | ||
| AdminLTE 4 console, dashboard, message statistics | ✓ | ✓ |
| End-user self-service portal | ✓ | ✓ |
| Searchable event logs, Ofelia scheduled-tasks UI | ✓ | ✓ |
| Unbound local recursive DNS resolver | ✓ | ✓ |
| Console firewall management UI | — | ✓ |
| Intrusion Prevention (Fail2ban) management UI | — | ✓ |
| Licensing & support | ||
| Source code (AGPLv3 on GitHub) | ✓ | ✓ |
| Community support (GitHub, Matrix) | ✓ | ✓ |
| Direct vendor support incidents | — | Pro + Support tier |
Need detail on any Pro feature? See the Pro feature page for full descriptions.
Frequently asked questions
What’s a “server” for licensing purposes?
One Pro license activates one Hermes SEG installation, bound to that machine’s hardware UUID on first activation. If you run two Hermes installs — production and a hot standby, or two separate gateways serving different domains — you need two licenses. Running the same license on a different machine requires unbinding the previous binding; contact us to do so.
Do you sell to managed-service providers?
Yes — per-server pricing is the same whether you operate one Hermes install or fifty. For MSPs running ten or more Pro servers, contact us about volume pricing and consolidated billing. Most MSPs purchase license-only (no incidents) for their customer fleet and a smaller number of license-plus-support seats for their own engineering teams.
Monthly versus annual — which should I pick?
Annual costs roughly 10% less per month than the monthly option and locks in your rate for the term. Monthly is friendlier to cash flow and lets you cancel any time. There’s no commitment penalty for switching from monthly to annual later; the difference is purely billing cadence.
How does support work?
Pro + Support includes two support incidents per twelve-month subscription period. An incident is one defined issue — “DKIM signing is failing for domain X” or “console certificate didn’t auto-renew” — worked to resolution. Open an incident via the support portal; you’ll get a response from a Deeztek engineer. Bulk-incident packs and annual support contracts are available for larger deployments; contact us.
What payment methods do you accept?
Credit and debit card via Stripe. All prices are in U.S. dollars.
Running ten or more servers?
For MSPs, multi-site deployments, and organizations with significant Pro footprints, we offer volume pricing, consolidated annual invoicing, and dedicated support arrangements. Tell us about your deployment and we’ll work out terms that match.