Marketing Automation & ABM
M

Mautic

Mautic is open source marketing automation for teams that want control over their campaigns, data and hosting. Forms, landing pages and website activity feed a contact database. Segments and point rules organize that audience, while a visual campaign builder runs timed actions, conditional branches and handoffs to connected systems.

The software can run on a customer's own infrastructure or through a managed partner. That choice sets the operating model: the organization can own the application and database directly, or pay a provider to maintain them. Core features do not require a software subscription, although hosting, delivery and implementation still contribute to the bill.

Campaigns can change website content as well as send messages. A contact can move between journeys or jump to another step, and preferences can pause communication or suppress a particular channel. Salesforce integration maps Leads and Contacts, with activity represented as a custom object or timeline link. REST interfaces, webhooks and community plugins extend the product around an existing stack.

AI is optional and varies by implementation. Webmecanik added subject generation and send time optimization for the industrial technology business 1Life; those capabilities are distinct from a common AI service run by the Mautic project. Conventional segmentation and automation remain useful without models.

Prospectiva reports an ROI increase above 80 percent after introducing Mautic with Codefive and a custom plugin for its multiple business relationships. No measurement period or calculation accompanies the figure. The case reflects both the software and the implementation around it.

Privacy controls include IP anonymization, configurable tracking and cleanup of old records. The security team maintains core software and official plugins, while each operator secures its installation. Contact exports and database access support portability; a managed provider's contract determines its own data return and deletion commitments.

Last VerifiedOctober 12, 2026
Compare Mautic with other vendors
Founded
—
Headquarters
—
Website
mautic.org
Categories
marketing-automation-abm
Assessment

Capability Axes

Capability grades

17 of 17 axes rated · 12 graded A or B

AI Capability
AI CentralityAI CentralityWhether AI is the product or a feature veneer. The removal test: peel the AI label off, and does anything sellable remain?
CC on AI CentralityAI features on a conventional platform. Peel the AI label off and the product still works roughly as before.
Vendor Published

Mautic runs campaigns through segments, point rules, conditions and scheduled actions. Those functions work without a language model. At 1Life, the underlying segmentation and journeys were supplemented by Webmecanik features that generated email subjects and optimized send times from contact activity. That is a partner implementation, rather than a standard AI service operated by the Mautic project.

The practical center remains marketer designed automation: capture a lead, update its profile, change its campaign path and pass it to sales when the configured conditions are met. Downloadable assets can influence contact scores and journeys. Files may reside locally or in Amazon S3, and UTM parameters on asset links feed download reports.

Autonomy and Oversight ModelAutonomy and Oversight ModelWhat the system does without a human. Draft for review, auto send, or fully agentic, and what contains a bad run.
BB on Autonomy and Oversight ModelThe human in the loop posture is described substantively (draft versus auto send, approval flows) but the failure containment story is incomplete.
Vendor Published

The Campaign Builder executes positive and negative branches, conditions and actions configured by a marketer. Delays can use a specific date or an elapsed period, and a contact can jump to another step or move into a different campaign. Forms and segment membership determine entry. On the contact timeline, scheduled events can be rescheduled or canceled, while completed decisions expose their evaluated fields and results. Mautic offers no described approval or rollback step for external integration actions, and a campaign can change connected records once activated.

AI Disclosure and Model TransparencyAI Disclosure and Model TransparencyWhat models power the product, whether AI generated outreach discloses itself, and whether scoring and routing logic is explainable.
CC on AI Disclosure and Model TransparencyThe product is described as AI powered with the stack, the disclosure behavior, and the scoring logic all unstated.
Vendor Published

AI behavior depends on the service or plugin attached to a Mautic installation. The project does not operate a common hosted model service, and its proposed approach allows local or external models. Segment and campaign creation assistance remains a direction for development, rather than a single standard model stack. In the core campaign engine, decisions follow configured conditions and scoring rules. Model identities, generated content markings and inference retention therefore have no common setting across partner offerings; these remain properties of the selected extension and provider.

Operational and Outcome EvidenceOperational and Outcome EvidenceMeasured outcomes with a stated basis: replies, meetings, pipeline, win rates. Logos are not evidence and prestige is not measurement.
BB on Operational and Outcome EvidenceReal outcome evidence published, with named customers and numbers, but the measurement basis is incomplete: population, period, or definition unstated.
Vendor Published

Prospectiva used Mautic with Codefive to coordinate marketing across its engineering and consulting businesses. A custom plugin handled contacts with several contracts and business relationships, cutting duplicate messages while supporting cross selling. The customer reports an ROI increase above 80 percent, without a measurement period or calculation basis, and the result reflects implementation work and custom development as well as the software.

At a wider scale, the project counts more than 200,000 companies using Mautic, a measure of adoption rather than outcomes. Prospectiva's gain came from a new data model, campaign design and implementation together.

Compliance and Risk
Outreach Compliance PostureOutreach Compliance PostureHow the product handles regulated outreach: consent, DNC scrubbing, opt out mechanics, caller ID conduct, and the public enforcement record.
BB on Outreach Compliance PostureSubstantive compliance features documented in product, but material questions (litigation history, caller ID practices, where responsibility transfers to the customer) go unaddressed.
Vendor Published

Contact preferences can suppress individual channels, pause messages for a date range and limit communication frequency. Removing a channel creates a Do Not Contact entry for that channel, so an email opt out does not automatically represent an SMS opt out. Categories and segments provide more granular subscriptions, and the unsubscribe page can expose these preferences. Marketers control the page labels and visible choices. These are concrete controls for an existing audience, while consent verification and telephone screening depend on what each installation adds.

Data Privacy PostureData Privacy PostureGDPR and CCPA posture: lawful basis, data subject rights handling, DPA availability, subprocessor disclosure.
BB on Data Privacy PostureA real privacy program is visible (DPA available, policy substantive) with a gap on the hard question, commonly lawful basis for enriched or tracked individuals.
Vendor Published

Mautic can disable email and link tracking, anonymize visitor IP addresses and place website tracking behind a marketing cookie consent choice. Cleanup tasks remove old anonymous visitors, audit logs and inactive contacts, while progressive forms collect information over successive interactions. A self hosted organization controls the database and the processing environment.

The software project is not the processor for every installation: a managed host supplies its own processing contract, subprocessors and transfer terms. There is no single DPA or hosting policy that governs all Mautic deployments.

Data Licensing and ProvenanceData Licensing and ProvenanceWhere the data comes from and on what legal footing: licensed, contributed, public record, or scraped, and who stands behind the answer.
BB on Data Licensing and ProvenanceProvenance is substantively described but incompletely: sourcing classes named without the legal footing, or indemnification unstated.
Vendor Published

Audience records arrive through customer forms, CSV imports, website activity and connected systems. The contact history distinguishes imports, form submissions, API creation and integration activity, giving marketers a way to trace how a person entered the database. Custom identifiers and email addresses help merge related records. Mautic does not supply a common prospect database with a shared sourcing license. Rights to imported lists and enrichment remain with the organization and its suppliers, and no indemnity for those external datasets comes with the software.

Platform Terms ExposurePlatform Terms ExposureWhether the product operates inside the terms of the platforms it touches, and the restriction risk a buyer inherits when it does not.
BB on Platform Terms ExposureThe method is described and mostly conformant, with one real ambiguity the vendor does not resolve, or conformance asserted without the partnership evidence that would settle it.
Vendor Published

Salesforce connectivity uses an authorized connected app and API credentials. Field mappings connect Mautic contacts with Salesforce Leads and Contacts, while campaign or form actions can push records into the integration. This is an API workflow rather than a browser session acting as a seller. Developers can also connect systems through REST calls and webhooks.

Sending runs through whichever email service the operator configures, and the managed plans let a customer authenticate several of its own sending domains in one installation. Third party plugins extend the operating surface, so their permissions and methods vary independently of the core connector.

AI Safety and Data StewardshipAI Safety and Data StewardshipThe cross client boundary: whether customer data trains models that serve competitors, plus retention and deletion posture.
CC on AI Safety and Data StewardshipSecurity language exists but the training question, the one this axis turns on, is unanswered: a buyer cannot tell whether their pipeline data improves a competitor’s instance.
Vendor Published

A self hosted Mautic database stays in the environment selected by its operator until a configured integration sends data elsewhere. The project does not host an AI service that pools those databases for model development. Adding external generation or predictive tools creates a separate data path governed by that provider. Cleanup controls can reduce stored visitor and contact information, but do not by themselves delete data already sent to an AI service. Training and retention terms differ by plugin, with no common policy across the ecosystem.

Recipient Disclosure and AuthenticityRecipient Disclosure and AuthenticityHow the product presents itself to the people it targets: whether automated outreach and AI agents disclose themselves, whether sender personas are real, and whether personalization is grounded in verifiable fact. Measured as known compliance with Article 50 of the EU AI Act, in force since August 2, 2026, which requires AI systems that interact with individuals to disclose that fact.
CC on Recipient Disclosure and AuthenticityNothing published on whether recipients are told they are dealing with software. For a product whose AI talks to prospects, silence here is now a regulatory posture, not a style choice.
Vendor Published

Campaign emails use the marketer's sender identity, content and contact fields. Preference pages can carry the organization's branding and translated labels, while dynamic content changes the offer or call to action according to a contact's profile. These are conventional marketing messages rather than a standard conversational agent pretending to be a salesperson. AI extensions can contribute text to that workflow.

The core product adds no automatic label to generated content, and Article 50 handling is left to each installation. The selected extensions and campaign settings shape the recipient's experience in each installation.

Integration and Deployment
Ecosystem and Integration DepthEcosystem and Integration DepthDocumented depth of CRM and stack integration: objects, sync direction, API surface, marketplace presence that matches the claims.
AA on Ecosystem and Integration DepthDeep, documented, bidirectional integration with the systems of record: named CRM objects and sync behavior, a public API with real docs, and a marketplace presence that matches the claims.
Vendor Published

The Salesforce connector maps contact fields, pushes Mautic contacts into Leads and pulls Salesforce Leads or Contacts back into marketing. Activity can flow into a custom Salesforce object for reporting, or appear as a link to the Mautic timeline. REST endpoints and webhooks support custom connections beyond the packaged plugins. The application marketplace installs community plugins and themes and checks compatibility against the installed Mautic version. The result is an extensible integration layer in which choices such as field ownership and activity representation stay visible to the administrator.

Deployment Model and Data ResidencyDeployment Model and Data ResidencyWhere the product runs and where customer data lives, including residency options for EU buyers.
AA on Deployment Model and Data ResidencyHosting, regions, and residency options documented: where data lives, what EU customers can choose, and what is single tenant versus shared.
Vendor Published

Mautic can run on infrastructure the customer owns, in a private environment or with a managed hosting partner, and the operator decides where the application and database live, including in the EU. Self hosting calls for a virtual private or dedicated server rather than shared hosting, PHP 8.2 to 8.5 for the current 7.x series, MySQL 5.7 or MariaDB 10.2 and later, and Apache or Nginx. Patch releases arrive monthly, feature releases quarterly and major versions every two years. A managed provider may run a different tenancy arrangement, so residency and isolation follow the chosen architecture and host.

Security Certifications and Trust CenterSecurity Certifications and Trust CenterVerifiable security posture: enumerated current certifications and a trust center an outsider can actually read.
CC on Security Certifications and Trust CenterSecurity is claimed in general terms. Asserting certifications without enumerating them is weaker than it looks, and this band is where that lands.
Vendor Published

The Mautic Security Team handles core software, officially supported plugins and project infrastructure, takes private reports through GitHub and follows coordinated disclosure, keeping issues private until a fix ships. As a CVE naming authority under MITRE, it issues CVEs for anything in the Mautic namespace, and it gives at least two weeks' notice before any unscheduled security release.

Third party plugins and individual installations sit outside that response boundary, so administrators must apply releases and secure their own servers. No SOC 2 report or ISO certification covers Mautic deployments as a whole, and a hosting partner's certifications cover only its own service.

Commercial and Operational
Commercial TransparencyCommercial TransparencyWhether a buyer can budget without a sales call. Published pricing graded on completeness, not on the price itself.
BB on Commercial TransparencyPartial pricing published (entry tiers real, enterprise opaque) or pricing published with load bearing exclusions.
Vendor Published

The downloadable software carries no license subscription and includes the core marketing automation features under the GPL. The operating bill comes from infrastructure, email delivery, maintenance and any implementation or support. Managed plans from Dropsolid start at €247.50 a month billed annually, or €275 quarterly, for up to 50,000 contacts and 50,000 emails a month, with Professional from €1,237 a month and Enterprise quoted; 40 percent of that revenue goes to the community. Older versions can buy extended security support in one year blocks. A self hosted production deployment has no single price, since capacity and services vary.

Exit and Data PortabilityExit and Data PortabilityWhat happens when a customer leaves: completeness of data export, rights to enriched or licensed data after termination, deletion commitments, and auto renewal mechanics, graded from published terms and documentation.
BB on Exit and Data PortabilityReal export capability documented, with a material exit question unstated in public terms, commonly post termination rights to licensed or enriched records.
Vendor Published

Contact lists export as CSV or Excel, and a contact's change log can be downloaded separately. CSV exports arrive through a link that requires the requesting user to sign in; the current export path supports up to one million contacts. Self hosting also gives the operator access to the underlying database and software under the GPL license. That makes continued operation possible without renewing a software subscription.

A managed host's backup handover, deletion schedule and cancellation terms remain separate, rather than a uniform offboarding promise from the project. Deleting an asset removes its download statistics, while contact points already earned from that asset remain. Unpublishing limits availability without that deletion.

Deliverability and Sending DisciplineDeliverability and Sending DisciplineThe operational craft of sending: warmup, rotation, volume governance, spam rate monitoring, and what happens when reputation degrades.
BB on Deliverability and Sending DisciplineReal deliverability features documented, with the operating discipline (limits, monitoring, intervention) asserted rather than specified.
Vendor Published

Email and SMS frequency rules apply globally or per contact, and marketing email waits once a contact reaches the configured limit. The setting that allows sending to unsubscribed contacts treats a message as transactional and leaves it out of those counts, which matters when several journeys reach the same person. Delivery infrastructure belongs to the chosen host and sending service.

On the managed plans from Dropsolid, the project's official hosting partner, Essential sends from a shared IP at up to 100 emails a minute and Professional from a dedicated IP at up to 2,000, both with sending reputation monitoring.

Segment and Market CoverageSegment and Market CoverageWho the product actually serves, evidenced: segments, geographies, languages, and customers that match the claim.
BB on Segment and Market CoverageSegment focus is clear and evidenced with a gap in geographic or language specifics.
Vendor Published

Mautic serves teams that want to shape marketing automation around their own data and technical environment, and the project counts more than 200,000 companies as users. Prospectiva's engineering and consulting businesses and Druid's software operation show B2B uses, while the wider base includes education and consumer services. Multilingual campaigns, conditional website content and custom plugins support programs across business units and markets. Managed plans place no limit on team members. Support and localization come from the provider an organization selects, or from the community forum and Slack.

Alternatives

Alternatives to Mautic

Vendors in the same categories as Mautic whose graded profiles look most alike, with a line on what each product does.

Similar is not the same, so check that each one does the job you need. No vendor pays for placement.

Aritic PinPoint coordinates B2B lead capture and nurture across email, SMS, WhatsApp and push notifications.

Ontraport keeps CRM, marketing automation, payments and website management on one customer database.

Act-On runs marketing programs around an existing CRM, connecting audience behavior with email, web, SMS and sales handoffs.

Constant Contact Lead Gen & CRM is the continuing SharpSpring product, bringing marketing automation and a sales pipeline into one application.

Salesforce Account Engagement is the B2B marketing automation product formerly called Pardot.

ActiveCampaign pairs email marketing, contact segmentation and automated followup with optional sales and messaging tools.

Ordered by how closely the graded profiles match across the seventeen axes, inside the same categories. See how each axis is graded in the methodology.

Head to Head

Compared With

Editorial comparisons are published only where the index assesses two vendors as direct competitors for the same buyer. Each carries a verdict, the buyer conditions that favor each vendor, and a graded side by side.

Commercial

Pricing

What this vendor charges, what it commits to in writing, and where the bill can move. Figures the vendor publishes itself are labeled Vendor Published. Figures labeled Estimated come from other sources and the vendor has not confirmed them.

What it costs
Vendor Published
$0 software license
hosting and services extra
$0 lowest published figure
In short
  • ›Mautic has no core software subscription. Organizations can operate it on their own infrastructure or buy a managed service from a partner. The license price is zero; the total bill depends on hosting, delivery volume and the people or provider maintaining the installation.

How the price works

What you are charged for, and what makes the bill go up.

Open source software with separately purchased infrastructure and services

What the contract says about your data

What the vendor commits to in writing once your data is in the product.

Depends on the selected hosting provider.

Getting started

What it costs and what is included before the product is running.

Set by the implementation or managed service provider. Managed plans from Dropsolid, the project's official hosting partner, start at €247.50 a month billed annually.

What to watch for

Where this pricing can surprise a buyer who has not read it closely.

The free download includes core features. Hosting, sending capacity, maintenance, support and optional extensions contribute to the operating cost.

Contact us

Found a vendor we missed? Have feedback on the index? We’d love to hear from you.