Exim Review, Pricing & Features

Exim is a free, GPL-licensed mail transfer agent powering cPanel hosting and Debian servers. See how it compares to Postfix and Sendmail in 2026.

Category
Communication
Pricing
Open Source, from Free
Verified
Not yet
Last updated
July 18, 2026
Founded
1995
APIOpen SourceSelf-Hosted

Overview

Exim is a free, open-source mail transfer agent (MTA) that runs on Unix-like operating systems, handling the routing, filtering, and delivery of email between servers. It was created in 1995 by Philip Hazel at the University of Cambridge Computing Service as a more flexible successor to the older Smail-3 mailer, and it is distributed under the GNU General Public License (GPL-2.0-or-later).

Rather than being a consumer-facing app, Exim operates behind the scenes: it is the software that shared-hosting control panels, ISPs, and Linux distributions rely on to actually send and receive SMTP mail. It is the default MTA on Debian Linux and is bundled with cPanel/WHM, one of the most widely used hosting control panels in the world.

Key Features

Exim's configuration is split into access control lists (ACLs), routers, transports, retry rules, rewrite rules, and authenticators, giving administrators granular control over exactly how each message is accepted, routed, and delivered. A built-in string-expansion language lets policy logic be expressed directly in the configuration file, and a content-scanning framework allows easy integration with antivirus and antispam engines such as ClamAV and SpamAssassin.

It supports modern email authentication and encryption standards including TLS, SMTP AUTH, DKIM, DMARC, ARC, and DANE, and offers extensibility through a local_scan() C API and embedded Perl support for custom logic beyond what the configuration language alone can express.

Pricing

Exim is completely free and has no paid tiers, subscriptions, or licensed editions; the GPL license guarantees the source code and binaries remain free to use, modify, and redistribute indefinitely. There is no vendor entity selling Exim, so there are no official support contracts - organizations that want commercial-grade help typically hire independent consultancies, some staffed by long-time Exim maintainers, rather than paying a central company.

Project infrastructure such as hosting and continuous integration is covered by volunteer sponsor organizations (for example Mythic Beasts, MacStadium, and Schlittermann) rather than by product revenue, which is typical for community-governed open-source infrastructure projects of this kind.

Key Features

Pros & Cons

Pros

  • Completely free under the GPL with no paid tiers, licensing fees, or vendor lock-in.
  • Extremely configurable ACL and routing system that supports very granular, per-domain mail policy, which is why it underpins large multi-tenant hosting platforms.
  • Long track record and huge installed base, including being the default MTA on Debian and the mailer bundled with cPanel/WHM.
  • Actively maintained on GitHub by an experienced volunteer team with regular security and feature releases.

Cons

  • Has a notable history of serious security vulnerabilities, including remote-code-execution flaws, that require diligent and timely patching.
  • Lacks a central queue manager, which its own documentation admits can hurt performance under very large mail queues compared to Postfix.
  • Configuration syntax and string-expansion language have a steep learning curve for administrators new to Exim.
  • No official vendor or paid support contract exists; commercial help must come from third-party consultancies.

Pricing

Frequently Asked Questions

What is Exim?

Exim is a free, open-source mail transfer agent (MTA) that routes and delivers email on Unix-like systems. It was created in 1995 by Philip Hazel at the University of Cambridge and is licensed under the GNU General Public License.

Is Exim free to use?

Yes. Exim has always been free under the GPL-2.0-or-later license, with no paid editions, subscription tiers, or usage fees. Anyone can download, modify, and redistribute it.

Who maintains Exim today?

Philip Hazel retired from Cambridge in 2007, and maintenance passed to a volunteer group known as the Exim Maintainers, including contributors such as Heiko Schlittermann and Jeremy Harris, who coordinate development on GitHub and via public mailing lists.

How does Exim compare to Postfix?

Both are free, GPL-licensed MTAs, but Postfix uses a modular multi-process queue manager that generally handles very large queues more gracefully, while Exim offers a more flexible single-binary configuration language favored by hosting control panels for granular, per-domain policy.

Why is Exim so widely used in web hosting?

Exim ships as the default mail server in cPanel/WHM, one of the most widely deployed hosting control panels, and is also the default MTA on Debian Linux, which together give it one of the largest installed bases of any MTA on the public internet.

Has Exim had major security vulnerabilities?

Yes. Notable examples include CVE-2019-10149, a remote-code-execution flaw actively exploited by a Linux worm in 2019, and the '21Nails' cluster of vulnerabilities disclosed in 2021, making prompt patching important for any Exim deployment.

Related Tools