Liferay DXP
liferay.com
What it is
Liferay DXP is an enterprise platform for building digital experiences for business customers, consumers, and employees. Its modules cover content management, digital assets, commerce, sites, low-code tools, and personalization. It also supports headless delivery, experimentation, and experience analytics. Organizations can choose SaaS, PaaS, or self-hosted deployment, including on-premise or a customer’s cloud for self-hosted installations. Integrations include SOAP, REST, GraphQL, RSS, and proprietary APIs; identity options include SAML 2.0, OpenID, Kerberos, CAS, and OpenIM. Security controls include multi-factor authentication, LDAP validation, roles, fine-grained permissions, and restrictions on access to personal information. Liferay lists ISO/IEC 27001, ISO/IEC 27017, and ISO/IEC 27018 certifications. The Free Tier costs nothing and requires a free activation key and acceptance of the EULA. Free trials include a 7-day SaaS option and a 30-day sandbox. Enterprise subscription prices are on request.
Spec sheet
- Purpose
- Liferay DXP combines capabilities for enterprise digital experiences and supports B2B, B2C, and B2E use cases.Read 4 Oct 2026 · liferay.com
- Headquarters
- Diamond Bar, California, USARead 28 Sep 2026 · liferay.com
- Founded
- 2004Read 28 Sep 2026 · liferay.com
- Access controls
- Security features include multi-factor authentication, LDAP validation, roles, fine-grained permissions, and controls for restricting access to personal information.Read 4 Oct 2026 · liferay.com
- Cloud infrastructure
- Liferay says its SaaS and PaaS offerings are backed by Google Cloud and provide self-healing, high availability, and automated disaster recovery.Read 4 Oct 2026 · liferay.com
- Content and commerce
- The platform’s listed modules include content management, digital asset management, commerce, sites, low-code, and personalization.Read 4 Oct 2026 · liferay.com
- Deployment choices
- Liferay offers SaaS, PaaS, and self-hosted deployment, with self-hosted deployments on-premise or in a customer’s cloud.Read 4 Oct 2026 · liferay.com
- Free Tier setup
- The Free Tier requires downloading the software or using Docker, creating a Liferay account, accepting the Marketplace EULA, and obtaining an activation key.Read 4 Oct 2026 · liferay.com
- Identity integrations
- Liferay DXP supports SAML 2.0 identity providers and also lists OpenID, Kerberos, CAS, and OpenIM authentication protocols.Read 4 Oct 2026 · liferay.com
- Integration protocols
- Its integration framework supports SOAP, REST, GraphQL, RSS, and proprietary APIs.Read 4 Oct 2026 · liferay.com
- SaaS security
- The Trust Center says Liferay SaaS includes patching, upgrades, 24/7 monitoring, and ongoing security management.Read 4 Oct 2026 · liferay.com
- Security certifications
- Liferay says it is certified in ISO/IEC 27001, ISO/IEC 27017, and ISO/IEC 27018.Read 4 Oct 2026 · liferay.com
- Subscription limitation
- OSGi customization is not included in Liferay SaaS, while it is included in PaaS and Self-Hosted subscriptions.Read 4 Oct 2026 · liferay.com
- Trial options
- Liferay describes a free 7-day SaaS prebuilt trial and a free 30-day sandbox trial that can run self-hosted or locally.Read 4 Oct 2026 · liferay.com
- Who it is for
- Liferay describes DXP as suited to enterprise businesses with complex requirements, including organizations in regulated industries such as financial services, insurance, healthcare, and the public sector.Read 4 Oct 2026 · liferay.com
Plans and prices
Strong points and limits
Strong points
- Supports content, commerce, sites, and personalization.
- Offers SaaS, PaaS, and self-hosted deployment.
- Includes headless delivery, experimentation, and analytics.
- Lists multiple identity protocols and access controls.
- Free Tier and two trial options are available.
Limits
- OSGi customization is not included in SaaS.
- Enterprise subscription pricing is on request.
- Free Tier setup requires an activation key and EULA acceptance.
Who it suits
Liferay describes DXP as suited to enterprise organizations with complex requirements, including businesses in financial services, insurance, healthcare, and the public sector. Its deployment options may suit organizations choosing between managed services and self-hosting.
Liferay DXP in depth
Read the full write-up
Liferay DXP is an enterprise platform for delivering digital experiences across customer, business, and employee use cases. It is best suited to organizations with complex requirements, especially in regulated industries. Its breadth and deployment flexibility are compelling, but SaaS excludes OSGi customization and the Free Tier requires several setup steps.
Overview
DXP brings content management, digital asset management, commerce, sites, low-code tools, and personalization into one platform. Headless delivery, experimentation, and experience analytics broaden its role beyond publishing. That breadth can help teams coordinate different kinds of digital experience; organizations looking only for a straightforward content system may not need so much scope.
Integration protocols include SOAP, REST, GraphQL, RSS, and proprietary APIs. Identity support covers SAML 2.0 providers, OpenID, Kerberos, CAS, and OpenIM. Multi-factor authentication, LDAP validation, roles, fine-grained permissions, and controls on access to personal information give administrators multiple ways to govern access. Liferay is certified in ISO/IEC 27001, ISO/IEC 27017, and ISO/IEC 27018.
Key features
Deployment and operations
Customers can choose SaaS, PaaS, or self-hosted deployment, with self-hosted installations running on-premise or in a customer’s cloud. SaaS includes patching, upgrades, 24/7 monitoring, and ongoing security management. Liferay says its SaaS and PaaS offerings use Google Cloud and provide self-healing, high availability, and automated disaster recovery. These managed services reduce infrastructure work for organizations choosing those deployment models, while self-hosting leaves deployment in the customer’s environment.
The key trade-off is customization: OSGi customization is included with PaaS and Self-Hosted subscriptions, but not SaaS. Teams that depend on it should rule out SaaS or confirm that the other deployment choices fit their operating requirements.
Trials and Free Tier
The free 7-day SaaS prebuilt trial offers a short route to evaluating the hosted service. A free 30-day sandbox trial can run self-hosted or locally, giving teams a different way to assess deployment. The Free Tier is not a one-click signup: it requires downloading the software or using Docker, creating a Liferay account, accepting the Marketplace EULA, and obtaining an activation key. That makes it a more involved starting point for individuals or small teams seeking a quick free account.
Pricing
The pricing model is freemium, with one free plan and custom pricing for enterprise subscriptions.
Liferay DXP Free Tier: free. It is a Free Tier download and requires a free activation key and acceptance of the EULA. The setup steps make this a better fit for teams prepared to install or run Docker than for users who want an immediate hosted workspace.
Liferay PaaS: custom pricing. This enterprise subscription includes OSGi customization, unlike SaaS.
Liferay SaaS: custom pricing. This enterprise subscription includes managed patching, upgrades, monitoring, and security management, but excludes OSGi customization.
Liferay Self-Hosted: custom pricing. This enterprise subscription includes OSGi customization and lets customers run the software on-premise or in their own cloud.
The free 7-day SaaS trial and free 30-day sandbox trial provide separate evaluation paths, but neither changes the subscription terms. No seat or usage caps are stated for these plans.
Platforms
Liferay DXP supports API, Linux, self-hosted, and web environments. Its hybrid deployment model spans hosted SaaS and PaaS as well as customer-run installations, with OSGi availability varying by subscription rather than by the broader platform range.
Who it's for
DXP is aimed at enterprise businesses with complex requirements, including financial services, insurance, healthcare, and public-sector organizations. Its content, commerce, personalization, identity integrations, and access controls suit organizations bringing multiple experience needs together. It is less compelling for teams with a narrow publishing need or those unwilling to trade SaaS convenience for OSGi customization.
Pros and cons
Broad experience toolkit: Content, digital assets, commerce, sites, low-code, personalization, headless delivery, experimentation, and analytics can serve varied digital initiatives in one platform.
Multiple deployment choices: SaaS, PaaS, and self-hosted options accommodate different infrastructure preferences, and self-hosted deployments can run on-premise or in a customer’s cloud.
Substantial security controls: Identity protocols, multi-factor authentication, LDAP validation, fine-grained permissions, personal-information access controls, and three ISO certifications support security-conscious organizations.
SaaS customization gap: OSGi customization is excluded from SaaS, so teams needing it must consider PaaS or Self-Hosted instead.
Free Tier setup burden: Download or Docker, account creation, EULA acceptance, and an activation key make the free option more demanding than a simple signup.
Alternatives
Consider these Digital Experience Platforms or Enterprise Content Management Systems if you want to compare the broader categories.
Jahia DXP is worth considering if a free open-core Docker option fits; its Community plan is for small to medium traffic and excludes enterprise modules, SLAs, and support.
Ibexa DXP is an alternative if you prefer a paid content-object tier structure, with its Headless plan starting at €39 a year and tiers capped by content-object volume.
Progress Sitefinity may suit teams seeking web content management, headless delivery, multisite management, and data integration, with a free trial available.
Siteglide is a lower-cost alternative for teams whose needs fit its Essential plan at $25 a month, which includes 100 Units and one top-level domain with SSL.
Xperience by Kentico is another paid option with pricing based on channels and deployment choice.
Bloomreach Content is another paid alternative for teams considering a content platform.
Contentstack may suit teams wanting a free hosted starting point: its Free plan is billed forever and includes one production stack, three users, 100K API calls per month, and 100 GB bandwidth.
dotCMS is another freemium option, with Starter and Professional plans described for development and production use.
Verdict
Choose Liferay DXP if your enterprise needs a broad digital experience platform with content, commerce, personalization, security controls, and a choice of managed or customer-run deployment. Its strongest case is the combination of capabilities and operational flexibility; look elsewhere if you require OSGi customization on SaaS or want a simpler free-tier setup.
Verdict
Liferay DXP combines content, commerce, and personalization capabilities with multiple deployment choices. Check the SaaS customization limitation and the Free Tier setup requirements against your needs.
Where Specifiction places it
- Digital Experience Platforms#11 of 268.0
- Enterprise Content Management Systems#12 of 267.8
- Portal Software#14 of 287.9
- Digital Experience - Enterprise Software#9 of 187.9