Malak

Investor relationship management for founders, honestly reviewed. What you actually get when you self-host it — and what you give up.

TL;DR

• What it is: Open-source (AGPL-3.0) investor relationship platform — investor updates, KPI tracking, fundraising pipeline, cap table, and deck management in one self-hosted tool [1][2].
• Who it’s for: Early-stage founders who send regular investor updates, track financial metrics, and want to own that data rather than route it through Carta, AngelList Raise, or a Mailchimp + Notion stack [1].
• Cost savings: Carta starts around $149/mo for early-stage cap table management; AngelList Raise has opaque pricing for full feature access. Malak Cloud starts at $30/mo, and self-hosting runs on whatever you’re already paying for a VPS [3].
• Key strength: Connects directly to financial data sources (Mercury, Brex, Stripe) to pull metrics automatically, so updates are data-driven rather than manually assembled [1][2].
• Key weakness: 57 GitHub stars as of this writing — this is a very early-stage project with minimal community track record, no third-party reviews available, and no evidence of production use at scale [1].
• License caveat: AGPL-3.0, not MIT. If you embed Malak in a product you offer to others over a network, you must publish your modifications. For internal use, this doesn’t matter. For building a product on top of it, it does [1].

---

What is Malak

Malak is a self-hosted investor relationship hub built by Ayinke LLC. The pitch is straightforward: founders who have raised money need to communicate with investors regularly (typically monthly updates), track and share KPIs, manage fundraising pipelines, and eventually maintain a cap table. Most tools that handle this are either expensive SaaS platforms with opaque pricing, or they’re stitched-together workflows across email, Notion, and spreadsheets.

The README is unusually direct about why Malak exists. It calls out the specific problem with incumbent tools: “these tools are very limited in terms of control and customization. Or can cost thousands of $ to run and still be limited to certain features subsets. Or have your data being used to cross-sell to other businesses for their own gain” — citing a tweet from Karri Saarinen (Linear co-founder) about Stripe’s data practices as evidence that entrusting investor data to closed platforms has real risks [1].

The product is built on a sensible stack: Go backend, PostgreSQL, Redis, NextJS frontend, Tailwind CSS, optional Stripe for payments. The codebase is open — you can inspect exactly what runs on your infrastructure [1]. A hosted version exists at app.malak.vc if you don’t want to self-host, but the differentiation from competitors is the self-hosted option.

At 57 GitHub stars, Malak is early. The README links to a YouTube walkthrough rather than case studies or testimonials, which is the honest signal of a tool that hasn’t yet accumulated public users willing to speak about it. The site says “Beta now available” in the hero [2]. Manage expectations accordingly.

---

Why people choose it

No independent third-party reviews of Malak currently exist — the tool is too new and niche. What follows is based entirely on first-party sources (GitHub, website, pricing page) and the problem space context.

Founders choose tools like Malak for one of three reasons:

Data control. Every time you send an investor update through a third-party platform, that platform has your metrics, your investor relationships, your funding stage, and your company trajectory. The README’s callout of cross-selling is a real concern — Carta has faced criticism for using founder data to surface deal flow to VCs on their platform. Self-hosting removes that attack surface entirely [1].

Cost. Carta’s cap table management pricing isn’t published on their site (a red flag in itself), but community reports consistently put early-stage plans at $149–$300/mo once you add cap table, equity management, and investor relations features. AngelList Raise pricing is similarly opaque. At $30/mo for Malak Cloud — or $0 for software on your own VPS — the cost argument is strong if the features match your needs [3].

Customization ceiling. The README mentions white-label by design, ready to deploy on your own domain [1]. For founders who want their investor portal to live at investors.yourcompany.com rather than app.carta.com/company/xyz, Malak supports that. Whether it works reliably in practice is harder to verify without community evidence.

What founders don’t choose Malak for: maturity, ecosystem, or community support. If you need a tool that’s been battle-tested by thousands of startups, this isn’t it yet.

---

Features

Based on the README and website:

Investor updates:

• Rich email updates sent from your own domain to a list of investors [1][2]
• Supports embedded videos, photos, and document attachments [2]
• Allows investors to leave feedback directly on updates [2]
• Core plan caps at 200 investor recipients; Scale plan removes the cap [3]

KPI and metrics tracking:

• Connect financial data sources: Mercury (banking), Brex (corporate cards), Stripe (revenue) — full list at malak.vc/integrations [1][2]
• Track and share KPIs in a single dashboard visible to investors [2]
• Metrics pulled automatically from connected sources, not entered manually [1]
• Analytics retention: 7 days on Core, 30 days on Scale [3]

Fundraising pipeline:

• Mini CRM for managing investor meetings and status [2]
• Track the state of investor conversations during a raise [2]
• Manage pitch decks and data rooms [2]

Cap table:

• Basic cap table management listed as a feature [1]
• The pricing page doesn’t call this out as gated, but the depth of cap table tooling compared to Carta is unclear [3]

Deck and data room management:

• Create and share pitch decks [1]
• Unlimited data rooms on Scale plan, capped on Core [3]

Security and audit:

• TLS across the platform, encrypted data, vulnerability scanning, automated testing [2]
• Audit logs (gated to Scale plan) [3]
• Backups stored in separate regions from infrastructure [2]
• Open source development: “Be certain what we say is what we run” [2]

Self-hosting:

• Full documentation at docs.malak.vc/self-hosting/installation [1]
• Container-based deployment (specific details in docs)
• Attestation verification for container images via GitHub attestation [1]
• Stripe is listed as optional — you can run without payment processing for the self-hosted version [1]

What’s notably absent from the feature list: any AI functionality, despite the ai-ml category it’s been tagged with. This appears to be a miscategorization. Malak is an investor relations CRM, not an AI product.

---

Pricing: SaaS vs self-hosted math

Malak Cloud:

• Core: $30/mo (billed monthly) — 200 investor recipients, 2 users, 5 integrations, 7-day analytics, cap table, deck management, fundraising pipeline. 14-day free trial [3].
• Scale: $60/mo — everything in Core plus unlimited recipients, unlimited data rooms, all integrations, up to 20 users, audit logs, 30-day analytics [3].
• No per-email or per-seat pricing beyond the tier caps.

Self-hosted:

• Software: $0 (AGPL-3.0)
• Infrastructure: whatever you’re already paying. A small Go app + Postgres + Redis runs comfortably on a $6–12/mo VPS.
• Your time for setup and maintenance.

Comparable tools for context:

Carta doesn’t publish pricing, but community-reported estimates for a seed-stage startup (simple cap table, basic investor updates) run $149–$199/mo. Their equity management tools for post-Series A companies run considerably higher.

AngelList Raise is free for basic functionality but the investor relations and portfolio management features are bundled into their broader platform with unclear standalone pricing.

Visible.vc — a direct competitor to Malak focused on investor updates — starts at $79/mo for their Growth plan.

The math:

If you’re currently using Carta at $149/mo and your primary use case is investor updates + fundraising pipeline (not complex equity management), switching to Malak Cloud at $30/mo saves $119/mo, or roughly $1,400/year. Self-hosting brings that to ~$1,700/year saved if you’re on Carta, assuming $6/mo for infrastructure. The caveat: Carta’s cap table tooling is far more mature. If you’re managing option grants, 409A valuations, and secondary transactions, Malak’s cap table feature is unlikely to cover your needs at this stage of the product.

For founders currently using a manual stack (Mailchimp for updates, Notion for tracking, Google Sheets for cap table), Malak at $30/mo is additive cost, not a replacement savings. The value argument shifts to consolidation and data ownership rather than cost reduction.

---

Deployment reality check

The self-hosting guide lives at docs.malak.vc/self-hosting/installation [1]. The README links to it but doesn’t reproduce the steps, so the depth of documentation is hard to assess without working through it.

What you’ll need:

• A Linux VPS (Go + Postgres + Redis is lightweight — 1GB RAM is probably sufficient for a small founding team)
• Docker or a deployment method compatible with the containerized images published to ghcr.io/ayinke-llc/malak [1]
• A domain and reverse proxy for HTTPS
• Optionally: Stripe keys if you want payment functionality
• API credentials for Mercury, Brex, Stripe if you want automatic metric ingestion

The attestation approach is a good sign. The README shows how to verify container image attestations via GitHub’s attestation toolkit — this is a meaningful security practice that larger open-source tools often skip [1]. It means you can verify that the container you’re running matches the code in the repository.

Realistic time estimate:

• Technical founder comfortable with Docker and Linux: 1–3 hours to a working instance.
• Non-technical founder following a guide: this is likely not a weekend project without help. The stack isn’t exotic, but connecting financial integrations (Mercury, Brex) requires API credentials and some configuration.
• If you’ve never touched a Linux server: budget either a full afternoon with a technical friend, or pay a deployment service to set it up once.

Unknown risks (honest gaps):

• No community reports of production use at scale — we don’t know how Malak handles 1,000 investor update sends or concurrent metric syncs from multiple data sources.
• Upgrade path and migration story are unclear for self-hosted instances.
• With 57 stars and what appears to be a small team, bug turnaround time and long-term maintenance are open questions.

---

Pros and Cons

Pros

• Data sovereignty is real. AGPL means the server-side code is open, auditable, and doesn’t call home to a third party. Your investor list, metrics, and fundraising status stay where you put them [1][2].
• Financial integrations out of the box. Mercury, Brex, and Stripe connections mean KPIs can be pulled automatically rather than manually entered — that’s a meaningful time save for founders sending monthly updates [1][2].
• Consolidated feature set. Updates, KPIs, fundraising pipeline, cap table, and deck management in one tool beats a Mailchimp + Notion + Google Sheets stack [1][2].
• Reasonable pricing. $30/mo for Malak Cloud is genuinely cheap compared to Carta and Visible.vc for founders whose needs don’t extend to complex equity management [3].
• Security posture is explicit. TLS, encrypted data, code scanning, peer review culture, automated testing, and open-source development are all stated clearly — not buried in a compliance FAQ [2].
• Container attestation. The ability to verify that running containers match the published source is a non-trivial security feature [1].
• White-label friendly. Deploy on your own domain; investors see your branding, not Malak’s [1].

Cons

• 57 GitHub stars. This is the clearest signal: almost no one is publicly using this tool yet. Community ecosystem, plugin/integration contributions, and community-reported bugs are essentially nonexistent [1].
• AGPL-3.0, not MIT. The AGPL’s network copyleft clause matters if you’re embedding Malak in a product. For internal founder use it’s irrelevant, but worth understanding before you build on it [1].
• No third-party reviews. Zero independent assessments of reliability, UX, or production performance are available as of this writing. You’d be one of the first production users.
• Beta status. The homepage prominently says “Beta now available” [2]. Beta software in a category where data loss (investor communications, cap table records) would be damaging is a real risk to weigh.
• Cap table depth is unverified. The feature is listed but how far it goes — option pools, vesting schedules, convertible notes — is unclear from available documentation. Carta’s depth here is built from years of iteration.
• Analytics retention is short. 7 days on Core, 30 days on Scale [3]. For investor update analytics (did my investors open the update?), this is thin. Comparable tools offer 90+ days by default.
• Small team, unknown longevity. Ayinke LLC has no visible VC backing listed, no public team size data, and a 57-star project. The README doesn’t mention company size or funding. Long-term maintenance is an open question.
• User cap on Core is low. 2 users on the $30/mo plan [3] means a founding team of 3+ immediately needs the Scale plan at $60/mo.

---

Who should use this / who shouldn’t

Use Malak if:

• You’re a solo founder or two-person founding team with 10–100 investors who need a structured investor update workflow and want to own the data.
• You already connect Mercury, Brex, or Stripe to your banking — and want those metrics to flow automatically into investor updates without manual assembly.
• You’re comfortable being an early adopter of infrastructure-level tools and can contribute bug reports back.
• The self-hosted angle matters specifically: you’re in a regulated space, you have investors who ask about data handling, or you’ve had a bad experience with a platform using your data commercially.
• Your budget is tight and $30/mo beats the next alternative by a meaningful margin.

Skip it (use Carta) if:

• You have a complex cap table with employee option pools, multiple share classes, 409A needs, or secondary transactions. Carta built its moat here over a decade; Malak isn’t a replacement yet.
• Your investors expect the Carta interface specifically — some institutional VCs have portfolio management tools that connect to Carta directly.
• You can’t tolerate beta-level stability in tools that touch investor communications.

Skip it (use Visible.vc) if:

• You want a mature, third-party-reviewed investor update platform with established support and a track record. Visible.vc is more expensive ($79/mo+) but has years of production use behind it.
• You don’t want to self-host and the Malak Cloud beta timeline concerns you.

Skip it (stay manual) if:

• You have fewer than 5 investors and send updates quarterly. A Google Doc + BCC email is free and zero maintenance.
• Your investors are passive and don’t expect regular structured updates. The cost of any tool — even $30/mo — doesn’t pencil out.

---

Alternatives worth considering

• Carta — the incumbent for cap table + investor relations. Expensive, closed-source, powerful. The choice if you need proper equity management.
• AngelList Raise — tightly integrated with AngelList’s funding ecosystem. Makes sense if you’re raising through AngelList; less compelling otherwise.
• Visible.vc — purpose-built investor updates and fundraising CRM. More expensive than Malak ($79/mo+), but significantly more mature and reviewed.
• Notion + Mailchimp — the zero-cost alternative. More manual, no automatic metric ingestion, but proven and infinitely flexible.
• Update (update.vc) — another investor update tool in this space, worth comparing on pricing and features.
• Briefings.so — lightweight investor updates with a focus on async communication.

For a founder specifically looking to self-host investor relations tooling, Malak is currently the only real open-source option in this category. That’s a moat by default — but also means there’s no community validation to lean on.

---

Bottom line

Malak is a narrow bet on a real problem. Founders do route sensitive company data through third-party investor platforms, those platforms do have commercial incentives that don’t align with founders, and a self-hosted alternative that auto-ingests Stripe and Mercury metrics is genuinely useful. The pricing is honest, the AGPL license is open, and the security approach is more thoughtful than most tools at this stage.

The hard truth is 57 stars. Not because star counts are the measure of quality — they aren’t — but because it means almost no one has validated this in production. You’d be adopting beta software for infrastructure that touches investor communications, with no community to turn to when something breaks. If that tradeoff works for your risk tolerance and you want to be the kind of early adopter who helps a tool like this mature, Malak is worth a serious look. If you need something proven, Visible.vc at $79/mo or Carta at its premium price come with track records that Malak doesn’t yet have.

If the setup is the blocker, upready.dev deploys self-hosted tools like this for founders — one-time fee, you own the infrastructure.

---

Sources

1. Malak — GitHub Repository (ayinke-llc/malak) — README, license, and codebase. https://github.com/ayinke-llc/malak
2. Malak — Official Website and Homepage — product description, features, and beta announcement. https://malak.vc
3. Malak — Pricing Page — Core and Scale plan details, feature gating. https://malak.vc/pricing/
4. Malak — Integrations Page — full list of supported data source integrations. https://malak.vc/integration/
5. Malak — Self-Hosting Documentation — installation and deployment guide. https://docs.malak.vc/self-hosting/installation