Oracle Java SE — Migration Playbook — Buyer-Side

Oracle Java SE to Azul Zulu and Platform Core: A Predictable Commercial Exit from the Employee Metric

An Oracle Java SE to Azul migration is the cleanest exit when the customer needs a commercially supported OpenJDK distribution with predictable per-server pricing and zero Employee Metric exposure. Azul has been an OpenJDK commercial supplier for two decades and is the largest pure-play Java company outside Oracle. Azul Zulu is the free, TCK-certified OpenJDK build; Azul Platform Core is the paid commercial support contract; Azul Platform Prime is the differentiated pauseless GC product for low-latency workloads. This playbook lays out the buyer-side framework we use to displace the Java SE Universal Subscription onto Azul: the runtime decision per workload, the commercial negotiation, the forensic discovery, the deployment plan, and the audit defence on the historical Oracle Java footprint. Every step is benchmarked against real engagements — 600+ Oracle programmes, $1.8B in advised spend, and a 100% Java audit defence record.

Published 30 April 2026 15 min read Tags: Oracle Java SE · Azul Zulu · Platform Core
Former Oracle insiders25+ years600+ engagements$1.8B advised100% Java audit defence record100% buyer-side
Defend my Java audit → Java Licensing Service

Why Azul is a credible Oracle Java SE displacement target

Azul is the largest pure-play Java commercial vendor outside Oracle and has been shipping OpenJDK distributions since 2002. Azul Zulu has been TCK-certified for every OpenJDK release since Java 6, ships builds for every relevant CPU and operating system combination (Linux x64/aarch64, Windows x64, macOS x64/aarch64, Solaris, AIX, ARM32, MIPS, PPC), and is the OpenJDK distribution behind dozens of OEM embedded Java deployments. Azul's engineering organisation contributes back to OpenJDK across GC, JIT, security, and observability — and the company maintains a separate commercial codebase (Platform Prime) for differentiated low-latency workloads. This is not a re-badged binary; it is a first-party Java company with its own engineering investment.

The buyer-side reason to choose Azul over the bundled-support distributions (Microsoft Build of OpenJDK, Amazon Corretto) is commercial predictability for organisations without a qualifying Microsoft or AWS support relationship. Azul Platform Core pricing is a per-server, per-JVM, or per-developer commercial contract — not an Employee Metric. The contract is negotiable on volume, term, and metric. Azul also ships security CPUs four weeks ahead of OpenJDK GA, which is a material operational advantage for security-sensitive estates. The differentiated Platform Prime offering with the pauseless C4 garbage collector is the right answer for trading platforms, real-time analytics, and any workload where standard OpenJDK GC pauses are a measurable problem.

Where Azul wins as the migration target

  • Predictable commercial pricing — Per-server / per-JVM / per-developer; not Employee Metric.
  • Negotiable contract — Volume, term, and metric all negotiable, unlike Oracle's posture.
  • Security CPUs ahead of GA — Four-week head-start on every quarterly OpenJDK CPU.
  • Platform Prime pauseless GC — Differentiated for low-latency and high-throughput workloads.
  • Two decades of OpenJDK engineering — First-party Java company, not a re-badge.
  • Widest CPU and OS coverage — Solaris, AIX, ARM32, MIPS, PPC builds available.

Azul is not always the right default. AWS-bundled support customers benefit more from Amazon Corretto. Azure-bundled customers benefit more from Microsoft Build of OpenJDK. Vendor-neutrality-required customers benefit more from Eclipse Temurin. The buyer-side methodology selects the runtime per workload. See the Oracle Java licensing guide for the Employee Metric exposure that drives the decision.

Zulu, Platform Core, and Platform Prime — the product decision

The Azul product portfolio has three distinct offerings and the per-workload decision determines the eventual commercial bill. Zulu is the free, TCK-certified OpenJDK build that any organisation can deploy at zero licence cost. Platform Core is the commercial support contract layered over Zulu — vendor-backed SLA, dedicated escalation engineering, ahead-of-GA security CPUs, and the supported binary stream. Platform Prime is the technically differentiated product with the C4 pauseless garbage collector, ReadyNow class pre-loading, and Falcon JIT compiler — targeted at workloads where standard OpenJDK GC is the operational bottleneck.

Azul productWhat it isWhere it fits
Azul ZuluFree, TCK-certified OpenJDK distributionDevelopment workstations, non-critical workloads, community-support tolerance
Azul Platform CoreCommercial support contract over ZuluProduction workloads requiring vendor-backed SLA and ahead-of-GA CPUs
Azul Platform PrimeCommercial product with C4 GC, ReadyNow, Falcon JITLow-latency trading, real-time analytics, high-throughput services with GC pause problems

The buyer-side methodology splits the estate into three tiers and applies a different commercial decision to each. Tier 1 (development workstations and non-critical workloads) gets free Azul Zulu with no commercial contract. Tier 2 (production workloads requiring vendor support) gets Azul Platform Core. Tier 3 (a small population of latency-sensitive workloads where the business case justifies the premium) gets Azul Platform Prime. Most enterprise estates land at 60 to 70 percent on free Zulu, 25 to 35 percent on Platform Core, and 0 to 10 percent on Platform Prime. The structural commercial outcome is a multi-tier estate with predictable per-server economics, against the Oracle Employee Metric which charges full price for every employee regardless of actual deployment.

Buyer-side note: Azul's sales team will push for a flat per-employee or per-VM contract that simplifies their commercial picture. Push back. The per-server (or per-JVM) metric is the one that aligns Azul's cost to your actual deployment, and the one that protects you from headcount growth. Negotiate the metric explicitly before the price.

Independent Azul commercial benchmark

We benchmark your Azul proposal against the alternative OpenJDK distributions and against published Platform Core / Platform Prime price points. Buyer-side methodology, ten-day turnaround.

Defend my Java audit →

Commercial negotiation framework against Azul

Azul is a commercial vendor with a sales motion, and the contract terms matter. The negotiation framework we apply against Azul is the same buyer-side framework we apply against Oracle, with a different fact base. The framework defends against the four commercial risks of any Azul commercial contract: metric drift, headcount-based pricing, term escalation, and exit obstruction. Each risk is contestable in negotiation if the customer enters the discussion with a documented baseline and an alternative.

The four-point Azul commercial negotiation framework

  • Metric definition — Per-server or per-JVM beats per-employee for almost every estate. Negotiate this first.
  • Volume bands and uplift caps — Cap annual renewal uplift at CPI plus a margin; require volume discount tiers.
  • Term flexibility — Annual or two-year contracts preserve the migration option; avoid five-year commitments.
  • Exit assistance and source preservation — Explicit clauses preserving the right to migrate to alternative OpenJDK.

The benchmark price points we see across engagements: Azul Platform Core typically lands at $200 to $600 per server per year for standard enterprise SLA coverage; Azul Platform Prime typically lands at $1,500 to $3,500 per server per year for the differentiated pauseless GC. The total commercial spend on Azul for a typical mid-size enterprise estate (500 to 2,000 servers) lands at $300K to $1.2M per year — against an Oracle Java SE Employee Metric exposure of $2M to $8M per year for the same population. The structural saving justifies the migration; the negotiation framework right-sizes the eventual Azul bill. The Contract Negotiation service covers the framework end to end.

Forensic discovery of the Oracle Java footprint

The forensic discovery phase is identical across all OpenJDK migration targets. The audit defence framework requires a complete, evidence-based inventory of every Oracle Java installation in the estate, identified by vendor, version, deployment context, and licensing surface. Most organisations underestimate their Oracle Java footprint by a factor of three to ten because the binary is bundled inside dozens of third-party products and gets installed by default by package managers and developer tooling.

Discovery surfaceWhat to look forAudit exposure
Endpoint inventory (workstations)Oracle JRE / JDK on Windows / macOS / Linux desktopsEmployee Metric applies regardless of usage
Server-side application serversTomcat, Jetty, JBoss, WAS, custom JVMsProduction Java SE installations
Low-latency trading platformsJava-based trading engines, market data, riskFrequent Platform Prime candidate; high audit value
Batch and ETL processingInformatica, DataStage, custom Java batchServer-side Java SE installations
Build and CI toolingJenkins, GitLab Runner, Bamboo, Maven, GradleDeveloper tooling Java; Oracle binaries trigger metric
Third-party software with bundled JavaTrading platforms, BI tooling, scientific applicationsOracle Java bundled inside vendor packages
Container imagesDocker / OCI images on private registriesEach image with Oracle Java multiplies the surface
OT and ICS environmentsSCADA, manufacturing, embedded engineering toolingFrequently overlooked; high audit value

The forensic discovery has to be performed under audit-defensible methodology. We combine endpoint scanning, package manager inventories, container registry scans, third-party vendor inventories, and structured interviews of OT / engineering teams to surface the embedded footprint. The output is the Java installation register that drives both the migration plan and the audit defence. The discovery also identifies the Platform Prime candidate workloads — low-latency trading, real-time analytics, large-heap services with measured GC pause problems. The Java Licensing service covers the discovery framework end to end.

Wave-based deployment plan and rollback

The Azul deployment follows the same wave-based sequence we use for every OpenJDK migration, with one additional phase: the Platform Prime evaluation phase for the small population of latency-sensitive workloads. The standard wave-based deployment puts free Azul Zulu on Tier 1, Azul Platform Core on Tier 2, and the Platform Prime evaluation on the candidate Tier 3 workloads. The Platform Prime evaluation is a structured benchmark against the existing Oracle binary and standard OpenJDK on the same workload — the only honest way to decide whether the premium is justified.

PhaseDurationActivity
1. Pilot deployment2 weeksDeploy Azul Zulu on 3 to 5 non-critical workloads; functional validation
2. Performance baseline2 weeksCompare GC behaviour, throughput, latency against Oracle baseline
3. Platform Prime evaluation4 weeksBenchmark Platform Prime on candidate latency-sensitive workloads
4. Wave 1 deployment4 weeksDeploy Zulu / Platform Core to 20 to 30 percent of low-risk workloads
5. Wave 2 deployment6 weeksDeploy to mid-risk workloads; retain Oracle binary fallback
6. Wave 3 deployment8 weeksDeploy to high-risk workloads; full rollback plan; Platform Prime production
7. Endpoint rollout4 weeksWorkstation replacement via endpoint management tooling
8. Oracle Java removal3 weeksForensic removal of Oracle binaries; verification scan
9. Audit-defensible documentation2 weeksEvidence package for the future Oracle audit defence

The Platform Prime evaluation phase is the one we recommend customers run with the most rigour. The Platform Prime commercial premium is justified only when the workload demonstrably benefits from the pauseless GC — typical measurable benefits include sub-10ms 99.99-percentile latency, elimination of GC-related throughput dips, and the ability to run substantially larger heaps without pause problems. Where the benefit is not measurable, Azul Platform Core on the standard Zulu binary is the correct commercial decision and the Platform Prime line item should be removed from the contract.

Java migration sequencing — fixed-fee build

We sequence the Azul wave-based deployment, run the Platform Prime evaluation, and right-size the eventual Azul commercial contract. Buyer-side methodology, ten-day turnaround.

Brief us on the migration →

Audit defence on the historical Oracle Java footprint

The migration to Azul closes future Oracle Java SE exposure. It does not close the historical exposure. Oracle's GLAS / LMS Java audit team reviews the customer's historical Oracle Java SE deployment to determine retroactive Employee Metric exposure and publishes a back-licence claim. The defence framework is the same regardless of which OpenJDK distribution the customer migrated to — the forensic defence sits alongside the migration, not after it.

The forensic defence framework contains four lines of argument. First, the licensing model in effect at the time of deployment was the historical metric (Processor or NUP), not the 2023 Employee Metric — Oracle's retroactive application is contestable. Second, the actual Oracle binary deployment count, not the inferred deployment from desktop installation telemetry, is the basis for any back-licence claim — Oracle's audit methodology routinely overstates by a factor of two to four. Third, the Oracle Java No-Fee Terms and Conditions (NFTC) that applied to JDK 17 between September 2021 and September 2024 created a covered-deployment window that excludes those deployments from back-licence claims. Fourth, the bundled-Java distributions of Oracle Java that came with Oracle products (Database, WebLogic, Fusion Middleware) carry application-specific entitlement and cannot be treated as standalone Java deployments.

The four lines of historical Java audit defence

  • Historical metric, not retroactive Employee Metric — Oracle's retroactive application is contestable.
  • Actual deployment count, not inferred from telemetry — LMS routinely overstates by 2 to 4×.
  • NFTC covered-deployment window — JDK 17 Sep 2021 to Sep 2024 is excluded.
  • Bundled Java under product entitlement — Database, WebLogic, FMW bundles carry their own entitlement.

We hold a 100% Java audit defence record across the Java engagements we have run since 2019. Anonymised case: a North American investment bank moved its trading-platform Java estate from Oracle Java SE to Azul Platform Prime and the rest of the estate to Platform Core; the Oracle audit follow-up was challenged on the historical metric and the inferred deployment count, with the final settlement reduced by 41% from the opening Oracle position and converted to a one-off non-renewing exit fee. The Audit Defence service covers the full engagement framework. The Oracle audit guide covers the broader evidence-based methodology.

Frequently asked questions

What is the difference between Azul Zulu, Platform Core, and Platform Prime?

Azul Zulu is the free, TCK-certified OpenJDK build. Azul Platform Core is the paid commercial support contract for Zulu, with vendor-backed SLA coverage, security CPUs delivered four weeks ahead of OpenJDK GA, and dedicated engineering escalation. Azul Platform Prime is the differentiated commercial product — a pauseless garbage collector (C4) targeted at low-latency, high-throughput workloads where standard OpenJDK GC pauses are a measurable problem. Most enterprise estates need Zulu plus Platform Core; Platform Prime is a workload-by-workload commercial decision driven by latency budgets. The Oracle Java SE to Azul migration typically splits the estate across all three tiers.

How does Azul pricing compare to Oracle Java SE Universal Subscription?

Azul Platform Core is typically priced per server, per JVM, or per developer rather than on the Oracle Employee Metric. The pricing model is the major commercial advantage: Azul charges for what you run, not for every employee in the organisation. Real-world Platform Core pricing typically lands between 20 and 40 percent of equivalent Oracle Java SE Employee Metric pricing for similar enterprise SLA coverage. The Azul commercial contract is also negotiable on volume, term, and metric — unlike the Oracle Employee Metric which Oracle treats as non-negotiable.

Where does Azul fit compared to Microsoft Build of OpenJDK and Amazon Corretto?

Azul is the right default in three scenarios. First, when commercial vendor-backed support is required but the customer has no qualifying Microsoft or AWS support relationship. Second, when the customer wants the security CPUs delivered ahead of the OpenJDK GA release schedule (Azul ships them four weeks earlier). Third, when specific workloads need Platform Prime's pauseless GC for low-latency or high-throughput requirements. Microsoft Build of OpenJDK is the right default for Azure-bundled estates; Amazon Corretto for AWS-bundled estates; Eclipse Temurin for vendor-neutral requirements.

Is Azul a single-vendor risk?

Azul is a private company headquartered in California with two decades of OpenJDK contribution history. The single-vendor risk is real but bounded — if Azul commercial support became unavailable, the underlying Zulu binaries are TCK-certified OpenJDK and the customer can migrate to Eclipse Temurin, Amazon Corretto, or Microsoft Build of OpenJDK on the same Java SE bytecode contract. The exit risk is operational, not technical. We recommend that any Azul commercial contract include explicit source-availability clauses and an exit-assistance clause to preserve the migration option.

What is the audit defence framework for the historical Oracle Java footprint?

The audit defence framework is the same regardless of which OpenJDK distribution the customer migrated to. Oracle's GLAS team examines the historical Oracle Java SE footprint, applies the Employee Metric retroactively, and publishes a back-licence claim. The defence framework reduces or eliminates the claim through four lines of argument: contesting the retroactive application of the new metric, contesting the inflated installation count from telemetry, applying the NFTC covered-deployment window for JDK 17, and excluding bundled-Java distributions that carry application-specific entitlement. We hold a 100% Java audit defence record across engagements run since 2019.

Free Briefing

Oracle Licensing Brief

Twice a month. Oracle pricing moves, audit-defence tactics, migration economics, ULA exit playbooks. Written by former Oracle insiders, never marketing.

No spam. Unsubscribe any time. Independent — not affiliated with Oracle Corporation.