Apache SpamAssassin, the open source mail spam filter whose spamd daemon and rules engine score every message so your mail system can flag or reject junk.
Apache SpamAssassin is the long established open source anti spam platform. Its spamd daemon scores each message against a large, regularly updated rule set that combines header and body heuristics, Bayesian statistical filtering, DNS blocklists, SPF and DKIM checks and network tests, then returns a spam score and a verdict. Mail systems hand messages to it through the fast spamc client or a milter, so a message that crosses the score threshold is tagged with spam headers your mail server can act on, filing it, quarantining it or rejecting it. It runs as a single self contained service with no database to administer, and its behaviour is driven entirely from readable configuration files, so the whole filtering policy lives in text you can version and review.
It suits anyone running their own mail: pairing it with Postfix or Exim to score inbound mail, giving a small team a self hosted spam filter they own inside their own cloud account, or scoring messages on demand from a script.
SpamAssassin has no login of its own, so what matters is that the scanning daemon is never left open, and cloudimg ships it exactly that way. The spamd daemon runs as a dedicated non root system user and is bound to loopback with its accept list restricted to loopback, so nothing off the instance can reach it until you explicitly widen access to your own mail hosts with the bundled sa access tool. A current rule set is fetched at build time and the maintenance timer is left enabled so every instance keeps its rules fresh, the configuration is checked clean before the image is sealed, and a first boot service records the instance details to a root only file. Every deployment comes with a paired deploy guide and 24/7 cloudimg support.