How to Use This Assessment
This tool is structured around the same 20 risk vectors Redress Compliance reviews in every Oracle estate engagement. Each item includes an expert note drawn from real audit findings, ULA certifications, Java SE remediation projects, and Oracle negotiation outcomes across the energy sector. Work through each point methodically. Any item where your answer is "unsure" or "no" represents a live financial or compliance exposure.
For this engagement, the estate covered Oracle Database Enterprise Edition, Oracle E-Business Suite, Oracle Primavera P6 EPPM, Oracle WebLogic Server, Oracle Java SE across tens of thousands of employee endpoints, and extensive middleware running on a VMware vSphere infrastructure distributed across multiple continents. The majority of the $22M saving came from six of the 20 items below — four of which are consistently the highest-value findings in global energy sector Oracle audits.
— Fredrik Filipsson, Redress Compliance
Section 1: Oracle Database Licensing Fundamentals
Oracle Database Enterprise Edition remains the highest-risk product in most energy sector estates. Processor licensing, core factors, and inadvertent options/packs activation together account for the majority of Oracle audit findings. Global oilfield services companies typically run Oracle DB across large x86 server clusters at multiple facilities worldwide — making every calculation in this section extremely high-stakes.
Confirm that your Oracle Database processor licence count equals the total physical cores on every server running Oracle software, multiplied by the applicable core factor from Oracle's Processor Core Factor Table. Intel Xeon and AMD EPYC processors typically carry a 0.5 factor; IBM POWER carries 1.0. Verify the exact processor model in each server, apply the correct factor, and round up to the nearest whole number. Compare against every current entitlement in your licence portfolio.
Oracle installs all options and management packs alongside Database Enterprise Edition by default. Any feature used — even once, even unintentionally by a DBA running a routine diagnostic — is treated as licensed and creates a perpetual obligation. Run Oracle's Feature Usage Statistics view (DBA_FEATURE_USAGE_STATISTICS) across all database instances. Map every feature where CURRENTLY_USED = TRUE or DETECTED_USAGES > 0 to a specific licence entitlement. Common unlicensed features found in energy and manufacturing Oracle estates include Diagnostic Pack, Tuning Pack, Advanced Compression, Active Data Guard, Oracle Partitioning, and the Real Application Testing option.
If any Oracle Database instances are licensed on a Named User Plus (NUP) metric, Oracle requires a minimum of 25 NUPs per processor licence (calculated using the core factor method). Validate that your NUP count meets this floor on every NUP-licensed server. This minimum is frequently violated when processor counts change following hardware refreshes, virtualisation migrations, or server consolidations — none of which typically trigger a licence review in organisations without a mature SAM programme.
Oracle requires DR and standby database servers running Oracle software to be licensed, unless a specific licensing exception applies. The Active Data Guard option — required for any reporting workload on a standby — must be separately licensed. Passive failover configurations may qualify for Oracle's 10-day DR policy, but only if precise conditions are met, documented, and maintained. Inventory every DR and HA database instance and validate which policy governs each one.
Section 2: Virtualisation & Infrastructure Risk
Oracle's virtualisation licensing policy is the single most contentious and financially significant risk area for energy companies running modern IT infrastructure. Oracle does not recognise VMware vSphere, Microsoft Hyper-V, or most third-party hypervisors as "hard partitioning" — meaning that Oracle software deployable on any host in a cluster creates licensing obligations across the entire cluster, regardless of where the software actually runs.
If Oracle Database or Middleware VMs are hosted in a VMware vSphere cluster, Oracle's licensing position requires all physical hosts in that cluster to be fully licensed — not just the hosts where Oracle VMs currently reside. Identify every VMware cluster hosting Oracle workloads. Count the total physical cores across all hosts in each cluster, apply the appropriate core factors, and compare the result against current entitlements. If you have not performed this calculation recently, assume you are materially under-licensed.
Any Oracle VM that has the potential to migrate — via VMware vMotion, DRS, or automated load-balancing — to an unlicensed host creates an immediate compliance exposure. Oracle's LMS audit scripts capture vCenter migration logs. Even historical vMotion events triggered by maintenance operations can be used to assert licensing obligations across destination hosts and their clusters. Disable automated DRS migration for all Oracle VMs. Document and enforce VM affinity rules. Audit all vMotion history for Oracle instances.
Oracle recognises only a narrow set of technologies as "hard partitioning" that limits Oracle licensing to a subset of a physical server. These include Oracle VM Server for x86 (with CPU pinning), Oracle Solaris Zones (capped), and IBM LPAR with dedicated CPUs. If your organisation is evaluating a move away from VMware — a common consideration following Broadcom's 2024 VMware acquisition and aggressive licensing changes — assess whether migrating Oracle workloads to dedicated bare metal or OCI eliminates the cluster-wide soft-partitioning risk permanently.
Section 3: Oracle Applications & Middleware Licensing
Oracle's application portfolio — including E-Business Suite, Primavera P6 EPPM, and WebLogic Server — carries licensing complexity that is distinct from database licensing. User count accuracy, role-based licence type mapping, and integration topology all generate significant audit exposure in global manufacturing and oilfield services organisations.
Oracle EBS is licensed on a Named User Plus metric for most modules. Validate that every active user account corresponds to a licenced named user — including service accounts, integration accounts, and external users accessing the system via APIs. Identify the precise licence type for each user based on the modules they access. EBS modules carry different per-user pricing; Finance and Procurement users require a higher licence type than limited-function users. Reconcile the licence type against actual module usage.
Oracle Primavera P6 EPPM is licensed per named user. Validate that every individual — including project managers, schedulers, engineers, and read-only reviewers — who accesses the system holds a named user licence. Pay particular attention to the integration layer: if P6 is integrated with EBS or third-party systems via APIs, the API calling accounts may themselves require licensing. Confirm also that the P6 version in deployment is covered by your current support entitlement — organisations using older P6 versions on lapsed support are in an unsupported and unlicensed position.
Oracle WebLogic Server is licensed per processor using the same core-factor method as Oracle Database. If WebLogic is deployed in a VMware environment, the same cluster-wide licensing risk applies. Confirm the edition deployed (Standard, Enterprise, or Suite) and that the features in use are covered by that edition. WebLogic Enterprise features — including clustering, session replication, active grid link, and Oracle Coherence — require Enterprise Edition or Suite licensing; Standard Edition covers only basic application server functions.
When third-party applications — ERP extensions, data integration tools, operational technology platforms — access Oracle Database, they may create additional Technology Licence obligations. Oracle's policy in some cases requires an additional "Application Specific Full Use" licence for third-party applications accessing Oracle DB. Review your integration architecture and confirm that every application touching Oracle DB is doing so within the scope of your existing Technology licences, or that an appropriate ASFU or other licence covers the integration.
Section 4: Java SE Subscription Exposure
Oracle's 2023 Java SE licensing change — from per-processor/per-named-user to per-employee (Universal Subscription) — represents the most significant licensing risk change for large employers since Oracle's database processor metric was introduced. For a global oilfield services enterprise with 30,000+ employees, Java SE exposure under the new model can reach tens of millions of dollars annually. This section is critical.
Oracle's Java SE Universal Subscription (introduced January 2023) is priced per employee of the entire organisation — not per installation, per user, or per server. If any Oracle Java SE installation exists anywhere in your estate, Oracle's position is that you owe subscriptions for every employee globally, including part-time workers. Conduct a comprehensive Java SE installation discovery across all servers, laptops, workstations, virtual machines, containers, and embedded systems. Identify every JDK and JRE version installed. Separate Oracle Java SE from OpenJDK and other free-distribution builds that do not trigger Oracle licensing obligations.
OpenJDK — specifically Eclipse Temurin (Adoptium), Azul Zulu, Amazon Corretto, or Red Hat's OpenJDK build — is a fully standards-compliant, free-distribution alternative to Oracle Java SE that does not trigger Oracle licensing obligations. Assess your Java-dependent applications for OpenJDK compatibility. Most applications certified for Java 11 or Java 17 will run without modification on the corresponding OpenJDK build. Applications relying on Oracle-specific JVM extensions may require remediation. Develop and execute a migration plan before Oracle's audit team makes contact.
Some organisations hold legacy Java SE perpetual licences or Java ULA agreements that predate Oracle's 2023 licensing model change. Review your Oracle contract portfolio for any Java SE-specific agreements. Confirm whether these agreements provide any protection against the employee-based subscription demand, what the certification terms are for any Java ULA in place, and whether Oracle's retroactive assertion of the Universal Subscription metric applies to existing agreements. Legal review of contract terms by specialist Oracle licence counsel is recommended before engaging Oracle on this point.
Section 5: ULA Strategy, Support Reduction & Remediation
For large Oracle customers, the Unlimited Licence Agreement is both a shield and a trap. Correctly structured and certified, a ULA can eliminate audit exposure for the products in scope. Poorly managed, it becomes a vehicle for Oracle to expand its revenue footprint at renewal. This final section covers ULA positioning, support cost reduction, and the remediation actions that generate the most durable savings.
If your organisation holds an Oracle Unlimited Licence Agreement, confirm the precise products included in scope. Oracle ULAs typically cover a named list of products — any deployment of Oracle software outside the scope list is not covered and creates separate exposure. Review the ULA certification date and process. At certification, you declare your full deployment of in-scope products, which Oracle converts to perpetual licences at that quantity. If you certify at a low deployment count, you lose the benefit of any headroom. If you have not modelled your optimal certification position, you are leaving value on the table.
At ULA expiry, organisations face a strategic decision: renew the ULA (accepting Oracle's proposed renewal terms), certify and exit the ULA (converting to perpetual licences), or use the leverage of the renewal decision to negotiate a broad restructuring of the Oracle relationship. Oracle's commercial team will strongly encourage renewal regardless of whether it serves your interests. Analyse your growth trajectory for ULA-covered products before the renewal window opens. If deployment is stable or declining, certification and exit may be the correct choice. If deployment is growing rapidly, renewal may preserve optionality.
Oracle's standard annual support rate is 22% of the net licence value. This rate applies regardless of whether you use the support services — and Oracle has no contractual obligation to reduce it. However, you have the right to terminate support on products you no longer deploy or use. Conduct a full licence and support entitlement review to identify products for which support can be legitimately terminated. Review also whether third-party maintenance providers (Rimini Street, Spinnaker Support) are appropriate for legacy Oracle products where Oracle's support roadmap has ended.
Every acquisition creates an Oracle licensing event. When you acquire a company that runs Oracle software, you inherit its Oracle estate — including any compliance gaps, unlicensed deployments, or audit notices in progress. Oracle's change of control provisions allow Oracle to renegotiate support terms or assert that the acquired entity's licences do not transfer to the acquirer without Oracle's consent. Review every acquisition completed in the last five years for Oracle estate implications. Conduct a targeted Oracle assessment on any acquired entity with a significant Oracle footprint before Oracle's account team makes contact.
Oracle Bring Your Own Licence (BYOL) allows on-premises perpetual licences to be applied to Oracle Cloud Infrastructure (OCI) workloads, potentially eliminating or significantly reducing OCI compute costs for Oracle software. If your organisation is evaluating a move to cloud for Oracle workloads, conduct a BYOL analysis before committing to any OCI deal. Additionally, Oracle's support credits and migration incentive programmes can further reduce OCI costs for organisations with a large on-premises Oracle estate. Understand the full value of your existing licence portfolio before signing any OCI commitment.
Oracle's LMS (License Management Services) audits are initiated by a formal written notice. From that point, Oracle controls the timeline, the scope, and the data collection methodology — unless you have independent expertise engaged to manage the process on your behalf. Ensure your organisation has a documented Oracle audit response protocol before an audit notice arrives. This should include: the internal escalation path (who is notified and who owns the response), the policy on what data Oracle is permitted to collect and through what mechanism, the engagement of independent Oracle licence specialists before any data is shared with Oracle, and the negotiation authority for any settlement.
Closing Notes: What $22M in Oracle Savings Actually Looks Like
The $22M figure recovered in this engagement breaks down across six primary areas, each of which corresponds directly to items in this checklist. The largest single item — VMware cluster-wide exposure elimination at $12.2M — required no licence purchase: only independent technical analysis and a structured infrastructure change. The second-largest item — Oracle Database options/packs remediation at $4.8M — required only documentation and the immediate cessation of unlicensed feature usage. The Java SE migration, worth approximately $3.8M in avoided annual subscription cost, required a 12-week OpenJDK migration sprint. The remaining $1.2M came from EBS user reclassification, support termination, and negotiated settlement of the outstanding audit notice from an acquired entity.
The pattern across all these items is consistent with what Redress Compliance observes in every large Oracle estate engagement: the most significant savings do not come from negotiating better prices for licences you need. They come from eliminating obligations you were never required to hold — through independent analysis, precise technical remediation, and expert-led negotiation before Oracle's auditors define the scope.
— Fredrik Filipsson, Redress Compliance