Skip to content
SPECIFICTION
Get listed

DejaCode

public.dejacode.com

From $500/mo Free trial WebLinuxAPISelf-hosted
Visit public.dejacode.com
Spec score 8.4 #4 of 28 in Open Source License Compliance Software

What it is

DejaCode is an enterprise application for managing open-source license compliance and software supply-chain integrity across products and teams. It tracks open-source and third-party components, with unlimited products, components, and packages in each plan. Teams can store and manage SBOMs, retain historical records for audits, and import CycloneDX, SPDX, or AboutFile formats. Usage policies can be set at license or package level and linked with ScanCode; enforcement is advisory. Integrations include GitHub, GitLab, Jira Cloud, SourceHut, and Forgejo, with REST API and webhook options for other services. AboutCode connections include ScanCode.io for package scanning, PurlDB, and VulnerableCode for vulnerability data. Deployment documentation covers Docker, enterprise, and local development setups. For enterprise deployments, the guidance recommends running your own related service instances to avoid sending sensitive or private data to public endpoints. Team starts at $500 a month and Business at $1,500 a month, each billed annually at the start of the subscription period. Enterprise pricing is custom and not listed. A private evaluation instance with all features and support is available for 30 days.

Spec sheet

Purpose
DejaCode is an enterprise application for automating open-source license compliance and software supply-chain integrity.Read 4 Oct 2026 · github.com
Audience
The maker describes DejaCode as a SaaS enterprise application for legal and business managers to manage open-source usage and governance across products and teams.Read 4 Oct 2026 · nexb.com
Deployment
The documentation describes Docker-based installation, enterprise deployment, and local development installation.Read 4 Oct 2026 · dejacode.readthedocs.io
Integrations
Documented platform integrations include GitHub, GitLab, Jira Cloud, SourceHut, and Forgejo, with REST API and webhook options for other services.Read 4 Oct 2026 · dejacode.readthedocs.io
Support
Team and Business plans list technical training and web and email support.Read 4 Oct 2026 · nexb.com
Headquarters
United StatesRead 28 Sep 2026 · public.dejacode.com
Founded
2003Read 28 Sep 2026 · public.dejacode.com
AboutCode tools
Its documented AboutCode integrations include ScanCode.io for package scanning, PurlDB, and VulnerableCode for vulnerability data.Read 4 Oct 2026 · dejacode.readthedocs.io
Inventory
It tracks open-source and third-party components across products and supports unlimited products, components, and packages in each plan.Read 4 Oct 2026 · nexb.com
Open source
The DejaCode repository identifies its license as GNU Affero General Public License version 3.Read 4 Oct 2026 · github.com
Policies
Users can define and apply usage policies at the license or package level and integrate them with ScanCode.Read 4 Oct 2026 · public.dejacode.com
Private trial
A private evaluation instance supports customer data and all features, includes free support, and is limited to 30 days.Read 4 Oct 2026 · public.dejacode.com
SBOMs
It can capture, store, and manage SBOMs and maintain historical data for audits.Read 4 Oct 2026 · public.dejacode.com
Security guidance
For enterprise deployments, the documentation recommends running your own ScanCode.io, PurlDB, and VulnerableCode instances so sensitive or private data is not submitted to public endpoints.Read 4 Oct 2026 · dejacode.readthedocs.io

Plans and prices

Team $500 a month Annual subscription paid at the start of the subscription period Starting at 5 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation Read 4 Oct 2026 · nexb.com
Business $1,500 a month Annual subscription paid at the start of the subscription period Starting at 25 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation Read 4 Oct 2026 · nexb.com
Enterprise Priced on request Custom based on your requirements; annual subscription paid at the start of the subscription period Starting at 50 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation Read 4 Oct 2026 · nexb.com

Every DejaCode plan and price →

Strong points and limits

Strong points

  • Unlimited products, components, and packages.
  • Stores SBOM history for audits.
  • Imports CycloneDX, SPDX, and AboutFile.
  • REST API and webhook integration options.
  • Private 30-day evaluation includes all features and support.

Limits

  • Policy enforcement is advisory.
  • Team starts at $500 a month, billed annually.
  • Business starts at $1,500 a month, billed annually.

Who it suits

DejaCode is aimed at legal and business managers responsible for governing open-source use across products and teams. It also suits organizations that need component inventories, SBOM history, and license or package policies.

Verdict

DejaCode combines component tracking, SBOM management, and policy workflows, with several documented integrations and deployment choices. Check the annual billing terms and advisory enforcement model against your governance needs.

Where Specifiction places it

Alternatives to DejaCodeAll alternatives →