Oracle · Java Licensing Review
2026 Escalation Alert: Java audit volume has sharply increased this year. Oracle is systematically converting soft licensing inquiries into formal audit notices with 30-day response windows. Oracle's fiscal year ends 31 May — the next six weeks are the highest-risk period for unreviewed Java estates. Know your position before Oracle does.

Oracle Java Licensing Review — Buyer-Side Only, Former Oracle Insiders | Know Your Exposure First | Gartner Recognised

We identify every Java installation across your estate — including the ones Oracle will find before you do — quantify your financial exposure under Oracle's per-employee SE subscription model, and build your remediation plan before a formal audit notice lands. 300+ reviews completed. Average exposure identified per engagement: $2.8M.

Gartner Recognised 300+ Java Reviews Buyer-Side Only Former Oracle Insider Team 2–4 Week Delivery

We have no commercial relationship with Oracle. We do not resell Oracle software, participate in Oracle's partner programme, or receive referral fees from any vendor. This is not a marketing statement — it is the structural foundation of how we operate. Everything we find in your review is your proprietary work product. None of it goes to Oracle.

300+
Java Reviews Completed
47K
Avg Installations Discovered
$2.8M
Avg Exposure Identified
95%
Enterprises With Unknown Exposure
2–4 wks
Typical Review Timeline
The Problem

Oracle Changed the Rules in 2023. Most Enterprises Still Have Not Caught Up.

Oracle's January 2023 Java SE subscription shift from named-user and processor licensing to a per-employee model fundamentally changed the financial exposure landscape for every enterprise running Java. Under the old model, an organisation with 5,000 Java users might owe Oracle for 5,000 licences. Under the new model, Oracle counts every employee in the organisation — regardless of whether they touch Java.

The result: enterprises that believed they had contained or manageable Java costs suddenly face theoretical exposure measured in millions of dollars — based on total headcount, not actual Java usage. A 10,000-employee organisation running a handful of Java applications may owe Oracle many times what they have historically paid for software support.

The gap between what most enterprises believe they owe and what Oracle's methodology actually calculates is the single largest source of unrecognised software licensing risk in enterprise IT today. Until you conduct a structured independent review, you are operating blind against an organisation that audits enterprises for a living.

In one recent engagement, a global logistics company with 15,000 employees completed a Java licensing review with Redress. We identified $2.8M in potential exposure they were unaware of — and restructured their subscription to eliminate the risk for $340,000 annually, 88% less than Oracle's initial ask.

Why Internal Reviews Fall Short

The Problem Is Not That You Have Not Looked. It Is What You Are Not Seeing.

Standard IT asset management tools and internal reviews consistently miss the Java installations that generate the largest Oracle claims. Our 300+ reviews have identified the same pattern repeatedly: the discovered estate is on average 9x larger than the internally reported position.

  • Java installations in containers, Kubernetes clusters, and CI/CD pipelines are invisible to standard ITAM tools
  • Oracle's employee count methodology often includes subsidiaries, contractors, and affiliated entities that internal teams overlook
  • Embedded Java in middleware, application servers, and vendor-supplied software is rarely counted in internal reviews
  • OpenJDK distributions that trigger Oracle licensing obligations are not flagged by most discovery tools
  • Historical Java usage on retired or decommissioned systems can still generate audit claims under Oracle's methodology
  • Cloud processor calculations for Oracle Java on AWS, Azure, and GCP follow separate rules that most IT teams misapply
Client Outcomes

What Our Java Licensing Reviews Have Found — and Resolved

View All Case Studies →
European Pharmaceutical Group
$3.2M
Exposure identified. Resolved for $180K before Oracle made contact.

A 12,000-employee pharmaceutical group engaged us after receiving an Oracle "licensing inquiry" letter. Our review found 47,000 Java installations, including 12,000 running Oracle Java SE against a declared position of approximately 5,000. The exposure under Oracle's per-employee model was $3.2M. Through a structured migration of 38,000 installations to OpenJDK and a targeted SE subscription covering the remaining 9,000 business-critical deployments, the position was resolved for $180,000 before Oracle issued a formal audit notice.

North American Financial Institution
$6.7M
Theoretical Oracle claim eliminated through pre-audit remediation.

A bank with 28,000 employees had assumed their Java position was manageable based on a SAM tool report showing approximately 2,000 Oracle Java users. Our independent review discovered 89,000 Java instances across 400+ servers, including embedded Java in middleware and trading infrastructure that the SAM tool had not catalogued. Oracle's per-employee calculation for a 28,000-headcount organisation would have produced a $6.7M claim. Pre-audit remediation completed within six weeks reduced the actual licensing obligation to $340,000.

Asia-Pacific Retail Conglomerate
$4.1M
Full exposure eliminated as part of planned cloud migration.

A 45,000-employee retail group conducted our review as a strategic exercise ahead of a planned cloud migration. The review identified $4.1M in potential Oracle Java SE exposure from legacy on-premises installations, cloud lift-and-shift workloads running unmodified Java SE, and containerised environments with embedded Oracle JDK. By restructuring the cloud migration specifically to eliminate the Oracle Java obligation — completing OpenJDK migration alongside the cloud transition — the group entered their cloud environment with zero Java licensing exposure and no Oracle audit risk.

Not ready to call? Download our Oracle Java Licensing Guide first.

84 pages covering SE subscription mechanics, per-employee counting rules, OpenJDK migration strategy, and Oracle audit response — written by former Oracle insiders who built the methodology.
How It Works

From Engagement to Defensible Java Position in 2–4 Weeks

Every Java licensing review follows a structured five-phase methodology developed across 300+ engagements. You receive a complete picture of your estate, a quantified risk position, and a prioritised remediation roadmap — all under NDA and entirely independent of Oracle.

01
Scope and Discovery Brief

We work with your IT and procurement teams to define the review scope, including on-premises servers, cloud environments (AWS, Azure, GCP, OCI), containers (Kubernetes, Docker), CI/CD pipelines, and any third-party software that may embed Java. We agree the discovery methodology and data collection approach upfront with no Oracle involvement.

Days 1–3 • Kickoff and scoping
02
Independent Java Estate Discovery

Using our proprietary discovery methodology — independent of Oracle's LMS scripts — we identify every Java installation across your estate. This includes Oracle JDK, Oracle Java SE, embedded Java in middleware and application servers, OpenJDK distributions that may trigger licensing obligations, and cloud-hosted Java workloads. We find what Oracle's team would find, before they do.

Days 3–10 • Comprehensive discovery
03
Licensing Obligation Mapping

We apply Oracle's current licensing rules — including the 2023 per-employee SE subscription metric, cloud processor calculation methodologies, container and virtualisation counting rules, and any applicable legacy named-user or processor entitlements — to produce an accurate picture of your licensing obligation under Oracle's rules. This is not Oracle's calculation. It is our independent expert interpretation of what Oracle can legitimately claim.

Days 8–14 • Obligation analysis
04
Financial Risk Quantification

We produce a structured financial risk report showing your current contractual position, the exposure Oracle could claim under maximum interpretation of its licensing rules, the defensible position our analysis supports, and the cost of resolving any gap before Oracle initiates a formal audit process. This gives your CFO and legal team the numbers they need to make informed, defensible decisions.

Days 12–16 • Risk report
05
Remediation and Migration Roadmap

We deliver a prioritised remediation plan covering all cost-effective paths to eliminate or reduce your Oracle Java exposure, including OpenJDK migration for qualifying workloads, SE subscription rightsizing for business-critical deployments, cloud architecture adjustments to reduce processor counts, and contractual strategies for existing Oracle relationships. You decide which path fits your timeline and risk tolerance.

Days 14–20 • Remediation roadmap
What You Receive

Your Review Deliverables

  • Complete Java installation map across all on-premises, cloud, and container environments
  • Licensing obligation analysis under Oracle's current per-employee SE subscription model
  • Cloud and container Java deployment breakdown covering AWS, Azure, GCP, and Kubernetes
  • Quantified financial risk report: Oracle's maximum possible claim versus your defensible position
  • OpenJDK migration opportunity analysis by workload and business criticality
  • Prioritised remediation roadmap with realistic implementation timelines
  • Executive summary formatted for CIO, CFO, and General Counsel presentation
  • Ongoing advisory support during the remediation and migration phase
"We thought we had maybe 5,000 Java installations. The review found 47,000 — including 12,000 on Oracle Java SE creating immediate exposure. Without the review, Oracle would have found it first and we would have been negotiating from a position of zero leverage." — Director of IT Procurement, European Pharmaceutical Group
Why Redress Compliance

Four Reasons Enterprise Buyers Choose Us Over Every Alternative

Not every Java licensing advisor has Oracle insider experience. Many have vendor relationships that compromise their advice. Here is what makes Redress structurally different.

01
Former Oracle Insiders on Every Engagement

Our advisors formerly operated Oracle's LMS audit methodology and Oracle licensing strategy from the inside. We built the scripts Oracle uses. We know exactly where Oracle's counting methodology produces inflated claims, where it can be legally challenged, and how Oracle values and settles Java disputes. This is why our review findings are defensible when Oracle arrives.

02
100% Buyer-Side. Zero Vendor Conflicts.

We do not resell Oracle software. We do not participate in Oracle's partner programme. We have never received a referral fee from Oracle or any software vendor. This structural independence is not a marketing claim — it is the reason we can tell you the truth about your position, even when that truth involves recommending you move away from Oracle Java entirely.

03
300+ Reviews. No Guesswork.

Our methodology is refined across 300+ completed Java licensing reviews across every major industry, geography, and estate complexity. We know what Oracle finds in pharmaceutical environments, what triggers escalations in financial services, and how retail and manufacturing estates generate hidden container and embedded Java exposure. Our benchmarks mean your findings are calibrated against real outcomes, not theory.

04
Senior-Only Delivery. No Junior Intermediaries.

Every Redress engagement is delivered by senior advisors with 20+ years of Oracle licensing experience. There are no project managers between you and the expert, and no junior analysts interpreting complex rules they have not operated from the inside. The person who leads your briefing is the person who conducts your review and presents your findings.

Common Questions

What Enterprise Buyers Ask Before Engaging

Eight real questions from CIOs, CPOs, and General Counsels who have engaged us for Java licensing reviews — answered directly.

You can also explore our Java Knowledge Hub for 200+ articles on Java SE licensing mechanics, per-employee counting, cloud deployment rules, and OpenJDK migration strategy.

How do you charge for an Oracle Java licensing review? +
Engagements are structured as fixed-fee advisory retainers. The review scope, timeline, and fee are agreed upfront with no hidden charges. Engagements are typically priced based on estate complexity, geographic scope, and the number of environments covered. For most enterprises the fixed fee is recovered many times over through the exposure identified and resolved before Oracle makes contact. We discuss fee structures on the first call with no obligation and no pressure to proceed.
What is the difference between your review and running Oracle's own LMS scripts? +
Oracle's LMS scripts are designed to find what Oracle wants to find, structured to maximise the resulting claim under Oracle's most aggressive interpretation of its licensing rules. Our review uses independent discovery methodology that identifies your actual deployment profile, applies the correct licensing rules rather than Oracle's most aggressive interpretation, and builds a defensible position before Oracle ever arrives. Running Oracle's own scripts and handing the results to Oracle is the least advantageous route you can take in a Java licensing situation.
We already have a SAM tool. Can it not tell us our Java licensing position? +
SAM tools inventory what they can see on managed devices. They do not interpret Oracle's per-employee pricing model, identify container and virtualisation deployments, calculate cloud processor counts, or flag embedded Java in middleware and third-party applications. Our advisors operated Oracle's LMS methodology from the inside and know exactly where Oracle's counting rules produce inflated claims and where they can be legally challenged. A SAM tool tells you what you have. An independent review tells you what Oracle will claim and how to reduce it.
Oracle has not contacted us yet. Why would we do a review now? +
Java audit volume sharply increased in 2026. Oracle is systematically converting soft licensing inquiries into formal audit notices with 30-day response windows. Clients who engage before Oracle makes contact consistently achieve better outcomes because we control the narrative, remediate exposure proactively, and document the position before Oracle arrives. A proactive review costs a fraction of what a reactive audit defence engagement does, and typically eliminates the audit risk entirely. Waiting for Oracle to make the first move means negotiating on Oracle's timeline, not yours.
How long does the review take and what do we receive at the end? +
The typical Java licensing review runs two to four weeks from engagement confirmation, depending on estate complexity and the number of environments in scope. At completion you receive: a complete Java installation map across all environments, a licensing obligation analysis under Oracle's current per-employee SE subscription model, a quantified financial risk report showing Oracle's maximum possible claim versus your defensible position, and a prioritised remediation roadmap covering migration, rightsizing, and OpenJDK transition options. All deliverables are proprietary advisory work product provided under NDA.
What happens if the review finds we are out of compliance? +
Most reviews do find exposure, because Oracle's 2023 per-employee pricing model catches enterprises that have never been formally reviewed. Finding it ourselves means we control the remediation plan. We guide you through the most cost-effective path: purchasing the right SE subscription for essential workloads, migrating qualifying deployments to OpenJDK, or restructuring your deployment architecture to reduce your licensing obligation. None of this information goes to Oracle. It is your proprietary advisory work product, and every decision about next steps is yours to make.
Will Oracle see what we find in the assessment? +
No. All review findings are covered by mutual NDA from the first conversation if requested. Our work product is your proprietary advisory document. We do not share discovery findings, licensing positions, or any element of your Java estate with Oracle or any third party. Our entire business model depends on the trust of enterprise buyers and confidentiality is structurally non-negotiable for us.
What is the difference between this service and your Java Audit Defence service? +
The Java Licensing Review is a proactive engagement you initiate before Oracle makes contact. It gives you control, time, and options, and typically costs less than a reactive audit defence engagement. The Java Audit Defence service is a reactive engagement when Oracle has already issued a formal audit notice and the 30-day response clock is already running. Both services draw on the same advisor expertise, but proactive clients consistently achieve better financial outcomes because they negotiate from a position of knowledge rather than urgency.
Get Started

Know Your Oracle Java Position Before Oracle Does

95% of enterprises have unknown Java exposure under Oracle's 2023 per-employee pricing model. Most discover it when Oracle issues a formal audit notice, at which point the negotiating leverage shifts entirely to Oracle. A proactive Java licensing review puts the control back with you.

Our reviews typically identify $1.5M–$6M in potential exposure per engagement and resolve it for a fraction of that cost through structured remediation before Oracle makes contact. The best time to conduct a Java licensing review is before Oracle asks. The second-best time is now.

Engagements are structured as fixed-fee advisory retainers or success-based arrangements where our fee is contingent on documented savings. We explain fee structures on the first call with no obligation.

Explore Java Knowledge Hub → View Java Case Studies →