In short
SpamAssassin ships with cPanel and filters bulk spam well, but it relies on generic rules that need manual tuning and wasn't built for targeted phishing or BEC fraud. Clisec filters on the same server, without changing MX records, and adds phishing, BEC and malware detection, a quarantine with message release, and the reason behind every decision.
What SpamAssassin does well
- It's included. No extra cost on cPanel.
- It's mature and well known. It's been in use for many years and has plenty of documentation.
- It stops bulk spam well, especially what's already on reputation lists.
- It's configurable with custom rules if you have time to maintain them.
Where it falls short
- Targeted phishing and BEC fraud. Its generic rules don't detect messages written for one person, from new domains or compromised accounts. We explain this in this guide.
- Manual tuning. The threshold and lists are configured account by account, and custom rules have to be maintained by hand.
- No central view. Spam stays in each mailbox's folder. The administrator has no shared quarantine or log with the reason behind each decision.
- Malware handled separately. Scanning attachments requires turning on and maintaining ClamAV separately.
SpamAssassin and Clisec, side by side
| SpamAssassin in cPanel | Clisec | |
|---|---|---|
| Price | Included in cPanel | Flat fee per server, from CLP $15,000/month |
| Activation | Per account, or server-wide from WHM | Server-wide, when the agent is installed |
| MX records | No changes | No changes |
| Bulk spam | Yes | Yes |
| Targeted phishing and impersonation | Limited | Specific detection |
| BEC fraud | Limited | Specific detection |
| Links and destination pages | Rules and reputation lists | Analyzes links and destination pages |
| Malware in attachments | Needs ClamAV separately | Included |
| Quarantine | Spam folder in each mailbox | Quarantine with message release |
| Reason for each decision | Headers inside the message | Log with reason, timestamp and SMTP transcript |
| Self-service for users | Per-account lists in cPanel | Safe lists, blocks and false-positive release |
| Support | Documentation and community | Technical support by email in Spanish |
When does each one make sense?
SpamAssassin can be enough if you manage a small server, with no business clients, and have time to tune the filter account by account.
Clisec makes sense if you host business email, have already had phishing or BEC fraud incidents with your clients, or spend too much time maintaining rules and answering spam tickets.
What switching looks like
- Choose how many servers to protect on the pricing page and activate your account.
- Install the agent on the server, and the plugin becomes available in every cPanel.
- Turn on protection for the whole server. MX records don't change and there's no per-account setup.
If you have questions, our technical support answers by email in Spanish. More details on the cPanel plugin.
Frequently asked questions
Does Clisec change my MX records?
No. Clisec filters incoming mail on your own server and turns on when the agent is installed, without changing any domain's MX records.
How much does it cost?
A flat fee per server, from CLP $15,000/month including tax, with no limit on accounts. Current prices are on the pricing page.
How long does installation take?
Usually less than five minutes, with no downtime.
Does it protect every account on the server?
Yes. A single activation protects the whole server, with all its domains and email accounts.
See Clisec on your own server
We'll show you how it behaves with your real mail and answer your questions about installation.