EVERYTHING XIAOMI
Get listed

DejaCode

DejaCode is an enterprise application for managing open-source license compliance and software supply-chain integrity.

Place
#6 of 28
Score
6.3

What DejaCode is

DejaCode is an enterprise application for managing open-source license compliance and software supply-chain integrity. It tracks open-source and third-party components across products, with unlimited products, components, and packages in each plan. Teams can capture and manage SBOMs, keep historical records for audits, and define usage policies at the license or package level. DejaCode’s documented integrations include GitHub, GitLab, Jira Cloud, SourceHut, and Forgejo, with REST API and webhook options for other services. It also connects with AboutCode tools for package scanning and vulnerability data. Available as a web application, API, Linux software, and self-hosted deployment, it is aimed at legal and business managers overseeing open-source use across products and teams. Plans include paid Team and Business tiers, while Enterprise pricing is custom; a private evaluation instance with all features and support is available for 30 days.

Good

  • Tracks components across unlimited products, components, and packages.
  • Stores SBOMs and historical audit data.
  • Supports CycloneDX, SPDX, and AboutFile imports.
  • Includes integrations with GitHub, GitLab, and Jira Cloud.
  • Offers a private evaluation with all features for 30 days.

Watch out

  • Enterprise pricing is custom and not listed.

Who it suits

DejaCode suits legal and business managers responsible for open-source governance across multiple products and teams. It may also suit organizations that need SBOM history and license- or package-level policies.

Verdict

DejaCode brings component tracking, SBOM management, and usage policies into one application for open-source governance. Its plans include a 30-day private evaluation, while paid subscriptions are billed annually.

Plans and prices

From DejaCode's own pricing page, checked 4 Oct 2026.

All about pricing
PlanPriceWhat it gives you
Team$500 a monthStarting at 5 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation · Annual subscription paid at the start of the subscription period
Business$1,500 a monthStarting at 25 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation · Annual subscription paid at the start of the subscription period
EnterprisePriced on requestStarting at 50 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation · Custom based on your requirements; annual subscription paid at the start of the subscription period

The facts

Each one read from DejaCode's own pages, with the date it was checked.

What it does

AboutCode tools
Its documented AboutCode integrations include ScanCode.io for package scanning, PurlDB, and VulnerableCode for vulnerability data.checked 4 Oct 2026
Audience
The maker describes DejaCode as a SaaS enterprise application for legal and business managers to manage open-source usage and governance across products and teams.checked 4 Oct 2026
Deployment
The documentation describes Docker-based installation, enterprise deployment, and local development installation.checked 4 Oct 2026
Integrations
Documented platform integrations include GitHub, GitLab, Jira Cloud, SourceHut, and Forgejo, with REST API and webhook options for other services.checked 4 Oct 2026
Inventory
It tracks open-source and third-party components across products and supports unlimited products, components, and packages in each plan.checked 4 Oct 2026
Open source
The DejaCode repository identifies its license as GNU Affero General Public License version 3.checked 4 Oct 2026
Policies
Users can define and apply usage policies at the license or package level and integrate them with ScanCode.checked 4 Oct 2026
Purpose
DejaCode is an enterprise application for automating open-source license compliance and software supply-chain integrity.checked 4 Oct 2026
SBOMs
It can capture, store, and manage SBOMs and maintain historical data for audits.checked 4 Oct 2026
Security guidance
For enterprise deployments, the documentation recommends running your own ScanCode.io, PurlDB, and VulnerableCode instances so sensitive or private data is not submitted to public endpoints.checked 4 Oct 2026
Support
Team and Business plans list technical training and web and email support.checked 4 Oct 2026

The company

Founded
2003checked 28 Sep 2026
Headquarters
United Stateschecked 28 Sep 2026

Money

Private trial
A private evaluation instance supports customer data and all features, includes free support, and is limited to 30 days.checked 4 Oct 2026

Alternatives to DejaCode

All alternatives
  1. 1

    DeepFilterNet

    Free planOpen sourceAPILinuxmacOSSelf-hosted
    7.6Free plan
    Visit
  2. 2FOSSology logo

    FOSSology

    Free planOpen sourceWebAPILinuxmacOS
    7.5Free plan
    Visit
  3. 3

    ScanCode.io

    Free planWebAPILinuxmacOS
    7.0Free plan
    Visit
  4. 4

    SourceTrust

    Free planWeb
    6.7From $299 a year
    Visit
  5. 5

    FOSSA

    Free planWebAPILinuxSelf-hosted
    6.4Free plan
    Visit
  6. 6FossID Workbench logo

    FossID Workbench

    WebAPILinuxSelf-hosted
    6.2
    Visit