Last updated: June 2026
Somewhere in your estate, an engineer downloaded a JDK update in 2021. Oracle knows. It has the IP address, the timestamp, and the version string — and it is building a per-employee claim against your entire headcount. This white paper shows you exactly how that claim is constructed, the one email that springs the trap, and the 9-move response our team uses to hold the number to zero.
Read this before you reply to Oracle: The "Java software review" email is not a courtesy. It is a soft audit. The moment you confirm a download, a version, or a headcount in writing, you have handed Oracle the three inputs it needs to size a back-licence claim under the Java SE Universal Subscription. This paper shows you what you are — and are not — obligated to provide.
"Oracle does not need to install anything on your servers to start a Java claim. Update requests to Oracle's servers, support downloads tied to your CSI, and the version strings in those requests give Oracle's sales team a working inventory of your Java estate before they ever send the first email. By the time you receive the 'review,' Oracle already believes it knows what you owe."
"The review email is engineered to feel administrative. It asks for a spreadsheet of installs and a headcount 'to confirm your subscription needs.' Both numbers are the claim. Once you supply a headcount, Oracle multiplies it by the Employee Metric list price — and the burden flips to you to prove the number down."
"Under the Employee Metric, a single unlicensed JDK on one developer's laptop can justify a claim sized to your total workforce. We have seen 30-developer Java footprints produce six- and seven-figure quotes because the metric ignores who actually uses Java. The defense is not denying the download — it is dismantling the metric's application."
32 pages. Immediate access. No spam — only buyer-side Oracle licensing intelligence from former Oracle insiders.
Don't reply on Oracle's terms. Our Java Audit Defense service gives you independent, buyer-side representation — we challenge the data Oracle claims to hold, push back on the Employee Metric, and protect you from a back-licence claim. Read the Oracle Java Licensing Guide or talk to a former Oracle insider before you respond.