An insurance group was priced on its full global headcount for Java SE under the employee metric, including thousands of staff who never touched a Java runtime.
The client, a multinational insurance group with roughly twenty two thousand employees, had used Oracle Java for years under the older processor and Named User Plus model that governed Java SE before 2023. When Oracle moved Java SE to the Universal Subscription, priced per employee rather than per deployment, the group did not act, and an Oracle soft audit arrived priced on its entire global headcount. The opening position counted every employee, every contractor, and every temporary worker as a billable Java SE Universal Subscription user, producing a claim of $11.5M in back maintenance and forward subscription.
The Java SE Universal Subscription is structurally punishing because the metric is decoupled from usage. Oracle counts the total employee population of the organisation, defined to include full time and part time employees, agents, contractors, and consultants who support internal operations, regardless of whether any individual has ever run a Java application. A group with twenty two thousand employees and Java installed on three hundred servers is billed as though all twenty two thousand are Java users. The arithmetic gap between the deployed footprint and the chargeable population is the entire exposure.
The group's actual Java estate was far smaller than the claim implied. Much of it was legacy: old application servers running Java versions that predated the subscription, third party software that shipped its own bundled and separately entitled Java runtime, and developer workstations where an open source distribution would serve identically. None of this had been mapped, which left Oracle free to price the maximum population against an estate nobody had measured.
The group needed an independent count of where Oracle Java genuinely ran, a separation of Oracle binaries from third party and open source runtimes, and a defensible position on the employee metric before committing to any subscription at all.
The Containment phase mattered because Java audits are driven by data the customer volunteers. We took control of the discovery so that what Oracle received reflected verified Oracle runtimes, not every Java string found on every machine, and ensured no scan output left the perimeter without buyer side review and classification.
The Measure phase reconstructed the genuine Oracle Java footprint. We inventoried every Java installation across servers and endpoints, identified the vendor and distribution of each runtime, and separated Oracle JDK installations that required a subscription from OpenJDK and third party bundled runtimes that did not. We then mapped the legacy estate that could be removed or migrated to an open source distribution entirely, shrinking the Oracle dependency to the components that genuinely needed it.
The commercial analysis ran in parallel. We assessed the employee metric definition in Oracle's subscription terms and built the count the group could actually defend, distinguishing the staff who support the deployed Java applications from the broad headcount Oracle had assumed. We modelled the cost of a right sized subscription against the cost of migrating the removable estate off Oracle Java, so the negotiation was anchored to a credible alternative rather than to Oracle's opening number.
In the Negotiate phase we argued the deployment reality against the headcount assumption. By presenting the verified Oracle footprint, the open source migration path for the legacy estate, and a defensible reading of the employee population, we reduced the chargeable scope dramatically and removed the back maintenance exposure that rested on runtimes the group had already retired.
The Convert phase locked the outcome in. The group migrated its removable Java estate to a supported OpenJDK distribution, retained an Oracle subscription only for the components that required it, and documented a runtime governance policy so new Java deployments are classified at install time and the employee metric exposure cannot silently regrow.
The Java SE employee metric prices your headcount, not your usage. The defence is to shrink the Oracle dependency until the metric applies to as little of the estate as possible.
The $11.5M claim settled at $2.8M, a reduction of 76 percent, covering only the Oracle Java components that genuinely required a subscription after the legacy estate was migrated off. The table shows how the chargeable scope was reduced.
| Exposure category | Oracle claim | Settled |
|---|---|---|
| Full headcount subscription plus back maintenance | $11.5M | n/a |
| Back maintenance on retired runtimes | -$4.6M | removed |
| Estate migrated to OpenJDK | -$4.1M | excluded |
| Right sized Oracle Java subscription | $2.8M | $2.8M |
The settlement covered a defined, minimised Oracle Java footprint rather than the group's entire headcount. By migrating the removable estate to a supported open source distribution, the group cut its forward subscription to the components that genuinely depend on Oracle Java, and the back maintenance claim on already retired runtimes was removed entirely.
The group adopted a runtime governance policy that classifies every Java installation at the point of deployment, so the boundary between Oracle and non Oracle runtimes stays clear and the employee metric exposure cannot quietly expand again. It now holds a Java position it can evidence and a clear rule for keeping the Oracle dependency contained.
For the buyer side perspective on this product line, our Oracle Java licensing team and our Oracle audit defence practice work the same playbook on every engagement. Compare outcomes across the full case study library.
If an Oracle Java claim prices your entire headcount, the deployed estate is almost always far smaller than the bill. We measure it and define the defensible subscription before you respond.
Request a Consultation