Oracle Java audits push firms to open-source, cost savings sought
The survey, conducted jointly by Azul and the ITAM Forum, reveals that Oracle Java remains a significant concern, as 73% of respondents reported undergoing an Oracle Java audit within the past three years. Nearly eight in ten organisations stated they have migrated, or intend to migrate, to open-source Java alternatives to manage risk and cost more effectively.
Licence management complexities
The research points to a shifting landscape shaped by hybrid cloud architectures and a growing inventory of business applications. These changes have resulted in more complex vendor terms, complicating compliance and visibility across teams. The report notes that many organisations face difficulties in tracking software usage consistently, whether in on-premises environments or across cloud platforms, which increases vulnerability during vendor audits and exposes organisations to financial penalties.
The scope and responsibilities of ITAM and SAM functions have sharpened in response. Once viewed as straightforward asset tracking roles, these functions are now regarded as critical for safeguarding budgets, mitigating audit risks, and guiding key technology decisions within enterprises.
Common compliance challenges
Compliance and the management of excessive licensing were identified as the leading challenges by 37% of survey participants. In addition to the substantial financial outlay for resolving licence issues - which encompass audits, unexpected licence purchases, and penalties - participants cited complex software configurations as a major hurdle, with 25% reporting difficulties in tracking application usage across increasingly intricate systems.
The survey found that 29% of respondents struggle to manage software usage information, especially when tracking across different teams or between on-premises and cloud infrastructures. Additional compliance and management challenges included aligning teams such as IT, software development, legal, and procurement (27%), resource constraints in handling compliance (24%), higher prices related to renewals and licences (24%), and coping with evolving vendor rules (23%).
Self-managed audits and persistent difficulties
The majority of organisations (74%) reported handling licence discovery and software audits primarily or entirely with internal teams. Despite this self-reliance, many face challenges in maintaining accurate records (26%), comprehending licensing terms (23%), and delivering precise compliance metrics (23%).
The survey indicates that 81% of organisations conduct licence audits at least twice a year, with 25% doing so continuously. About a quarter of organisations experience regular financial penalties and legal actions, underscoring the operational and budgetary disruptions caused by audits.
More than 30% of respondents noted that audits have led to significant operational disruptions, including unplanned budget impacts, a shift in vendor relationships, and stalled projects.
Migration from Oracle Java
Oracle Java licensing and audit pressures were a source of concern for 96% of those surveyed, with issues stemming primarily from Oracle's employee-based pricing model. Many companies are investing in new tracking tools, monitoring systems, and internal audit procedures to ensure they comply with licensing requirements or avoid needing Oracle licences altogether.
In response, 79% of organisations have migrated, are migrating, or plan to migrate to open-source Java alternatives. Security and reliability were the main factors in this decision for 51% of those considering migration, while cost reduction and simpler compliance were cited by 42% and 40% respectively. Among organisations that had already completed migration, 57% highlighted security and reliability as their chief reasons.
There was also a strong perception of financial benefit: 66% of respondents estimated potential savings of at least 40% compared to Oracle Java licensing costs. Only 1% believed that migration would not yield savings.
Market dynamics and sector growth
These findings emerge against a backdrop of sector growth, with the ITAM market expanding from USD $1.15 billion in 2019 to USD $1.49 billion in 2023. The SAM market subset is expected to grow at a 16% compound annual growth rate through to 2029, reflecting increased spending on software - now accounting for roughly 29% of total IT budgets - as well as the greater intricacy of cloud-based and virtualised licensing models and raised regulatory compliance requirements. "The results highlight a fundamental mismatch between the complexity of modern software licensing and the resources organizations rely on to effectively manage software compliance. ITAM and SAM professionals are becoming increasingly vital as organizations increasingly recognize that poor license management can result in significant financial penalties and operational disruptions. They must have the resources and executive buy-in to ensure compliance and successful license management," said Martin Thompson, founder of the ITAM Forum. "The data reveals a concerning trend where the increasing complexity of vendor licensing and pricing has turned routine upkeep into recurring six-figure compliance exercises. When 73% of enterprises have been audited and one in four now spends more than $500,000 a year cleaning up license issues, the cost of merely staying compliant with software licensing and pricing is unsustainable. Specifically, when it comes to the uncertainty of Oracle's ever-shifting Java licensing terms, organizations shouldn't have to burn ITAM resources, interrupt projects, or absorb surprise penalties just to run their applications. Moving to open-source alternatives lets them break free from the audit treadmill, regain budget and focus on delivering value," said Scott Sellers, co-founder and CEO at Azul.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Techday NZ
2 hours ago
- Techday NZ
Retab raises USD $3.5 million to expand document AI platform
Retab has launched from stealth with a pre-seed funding round totalling USD $3.5 million to support its document AI platform and developer-first tools. The company's funding round was supported by several early-stage investors, including VentureFriends, Kima Ventures, and K5 Global, alongside individual investors Eric Schmidt (via StemAI), Olivier Pomel (CEO of Datadog), and Florian Douetteau (CEO of Dataiku). The capital is earmarked for further platform development and community growth as Retab looks to serve demand from vertical AI startups and innovation teams within enterprises. Platform focus Retab offers a software development kit (SDK) designed to help developers automate document processing tasks that use large language models (LLMs). The platform allows developers to define the data schema needed for their applications, while Retab manages data set labelling, evaluations, prompt engineering, and model selection. This orchestration is aimed at streamlining the document automation workflow and addressing common production challenges within the space. Louis de Benoist, Co-Founder and Chief Executive Officer, said, "People keep building demos that look like magic, but break the moment you put them into production. We lived that pain ourselves. Wiring up fragile pipelines just to extract a few fields from a PDF. We built Retab because it's the developer-first platform we always wished we had." Retab's founding team, composed of engineers with backgrounds in logistics workflow automation, identified greater value in the orchestration layer they had previously developed to make AI models usable at scale. This tooling now forms the basis of the Retab platform, which is being utilised by multiple companies to extract structured data from a variety of document types. System capabilities The platform is positioned not as an LLM itself, but as a middleware solution that integrates with LLMs from major providers such as OpenAI, Google, and Anthropic. Retab's system ensures accuracy and reliability by enabling developers to specify required outputs, while the platform oversees processes to maintain verifiable data extraction quality. Key features of the platform include self-optimising schemas, which use AI agents to test and refine extraction instructions before deployment. The model-agnostic system benchmarks and routes each automation task to the most suitable LLM for requirements such as cost, speed, or accuracy. Retab states this approach can reduce costs by up to 100 times compared to conventional solutions. Another element is guided reasoning and k-LLM consensus, where multiple models are used in parallel to reach a quantified consensus, supporting error reduction and increased trustworthiness in outputs. "Retab is the OS for reliably extracting structured data. It wraps the best models in a layer of logic that actually makes them usable with error handling and structured outputs. That's what devs need if they want to build production apps, not just prototypes," said de Benoist. Industry adoption Retab reports adoption across logistics, finance, and healthcare sectors. A logistics firm has employed Retab to find the smallest, fastest LLM configuration for 99% accuracy, reducing operational costs. A financial services client utilises the platform to extract both quantitative metrics and qualitative risk factors from long quarterly reports, a process that previously required several days of manual analysis. Other customers are using the system to automate claims processing, medical records, identity verification, and onboarding processes. Florian Douetteau, Co-Founder and Chief Executive Officer of Dataiku, and investor in Retab, observed, "the AI-fication of the economy depends on the capability to convert operations based on millions of documents into verified, structured data that autonomous systems can utilize. On a large scale, this process hinges on quality control, cost efficiency, and rapid implementation. The team at Retab understands this thoroughly and is uniquely positioned to solve it for the thousands of AI first companies that are emerging." Outlook The company is extending its extraction capabilities to handle data from websites and is launching integrations with workflow automation platforms such as n8n, Zapier, and Dify. Retab's stated long-term strategy is to serve as intelligent middleware between unstructured data and AI systems, with the objective to make such data usable and programmable for a range of applications, from contract processing to customs management. With a workforce of ten and a growing developer user base, Retab aims to become a key component in AI infrastructure for document automation workflows.
Techday NZ
11 hours ago
- Techday NZ
Azul launches Managed Services Programme for Java insights
Azul has introduced a Managed Services Provider Programme for its Azul Intelligence Cloud, enabling managed service providers to integrate Java software asset management, vulnerability detection and code inventory capabilities into their service offerings. The new programme allows partners to utilise sublicensing and white-label rights for Azul Intelligence Cloud's Software-as-a-Service tools - JVM Inventory, Azul Vulnerability Detection, and Code Inventory. Through these tools, MSPs can offer detailed analytics and insights on their customers' Java environments, including active Java Virtual Machines from Oracle, Azul, and any OpenJDK distribution. Partners will be equipped to deliver reports and analyses that provide customers with greater visibility into Oracle Java license management, application security vulnerabilities and opportunities to streamline code maintenance. The solution is designed to help organisations reduce non-compliant licensing risks and improve their security posture without needing to deploy or manage new tools themselves. Features of the programme The Managed Services Provider Programme permits channel and services partners to deliver Java license, security and efficiency insights as part of their broader managed service packages. Under the agreement, MSPs create a secure, tenant-specific Intelligence Cloud environment for each end customer. Partners can then manage onboarding, deploy agents, oversee data collection, configure alerts and generate scheduled reports - all under their own brand, with results presented as "Powered by Azul." Through the service, partners can bundle Java license compliance advisories, application modernisation initiatives and managed DevOps services, adapting to varying service delivery and revenue models. The aim is to provide end customers with ongoing assurance of compliance and security with minimal operational involvement on the customer's part. Evan Boyd, Managing Director of Software Licensing Consultants, highlighted the visibility and operational benefits provided by the solution: "Azul Intelligence Cloud lets us see every JVM our customers use and depend on - whether it's Oracle, Azul, or any other OpenJDK distribution - and immediately understand compliance or security gaps. Embedding Intelligence Cloud into our managed service portfolio, particularly the annual Java advisory services we provide, means we can deliver faster, more accurate license reconciliation and real-time compliance for our customers while removing the operational burden." Reducing risk and false positives Azul has outlined a range of capabilities available through the Intelligence Cloud, including continuous runtime detection of all JVMs - covering vendor, version, installation and application details - which helps pinpoint Oracle JVMs subject to commercial licensing. This data can be attributed to the responsible teams and applications to ensure license compliance. Azul Vulnerability Detection makes use of class-level runtime data to reduce security vulnerability false positives by up to 99%, enabling MSPs to focus on actionable security risks. The Code Inventory feature helps identify unused and redundant Java code, allowing partners to offer advice on code base modernisation and maintenance. The detection of obsolete code can result in efficiency improvements and cost savings, and according to Azul, advisory services delivered through the programme could enable developers to reallocate as much as 40% of their time to other business priorities due to reduced code maintenance burdens. Because MSPs manage deployment, data gathering and insight delivery, clients are spared the complexity of operating additional software consoles, and are instead provided with actionable reporting about their Java estate health and risks. Partners and benefits The managed delivery approach is intended to simplify how customers access continuous insights into Java usage, compliance, security incidents and code efficiency - potentially supporting organisations in lowering audit exposure and licensing costs, bolstering security and reclaiming developer productivity. Simon Taylor, Vice President of Global Channel and Alliances at Azul, described the company's intent behind the programme: "Java estates continue to expand across a myriad of deployment environments, and the cost, time and resources required to get the right licensing and security insights for compliance-oriented decision making can be enormous. By giving partners full, managed access to Azul Intelligence Cloud, we're equipping them to deliver turnkey services where they can put clear, actionable reporting and insights into the hands of their customers' decision makers. Ultimately, this mitigates license audit risk and cost, surfaces critical vulnerabilities proactively and reclaims developer capacity for their customers."
Techday NZ
a day ago
- Techday NZ
Westcon-Comstor & Cohesity boost AI security in New Zealand
Westcon-Comstor has announced an expansion of its partnership with Cohesity to address the increasing demand for advanced cybersecurity and AI-powered data protection solutions in New Zealand. The collaboration comes as the New Zealand cybersecurity market is forecast to reach USD $760.80 million by 2029 with an annual growth rate of 7.64 percent. The market's growth has been driven by a rise in ransomware, phishing, and malware attacks, as well as compliance requirements under regulatory frameworks such as the Privacy Act 2020. These factors are leading organisations to adopt more robust and AI-driven approaches to data protection and cybersecurity. Cohesity provides an AI-powered data security and management platform that has been identified as crucial for organisations aiming to guard against modern digital threats. The platform combines advanced threat detection and response with simplified data backup, recovery, and governance to assist in protecting companies from cyber incidents. Westcon-Comstor's partnership with Cohesity allows it to offer solutions that combine large-scale partner enablement with AI-powered data protection technology. This, according to both organisations, ensures local businesses can safeguard assets, remain compliant with regulations, and enhance digital resilience amid an increasingly uncertain cyber environment. "Cybersecurity is no longer a back-office function, it's a boardroom priority," said Dave Rosenberg, Managing Director, Westcon-Comstor in New Zealand. "Our partnership with Cohesity enables us to deliver cutting-edge, AI-powered data security solutions that align with the strategic priorities of local businesses." Rosenberg highlighted that Cohesity's platform integrates with Westcon-Comstor's existing portfolio of vendors, enabling the provision of secure and scalable solutions for partners. He said the platform can enhance data resilience, streamline operations, and support hybrid cloud strategies, offering value across their network of clients and stakeholders. As part of the collaboration, Westcon-Comstor will use initiatives including the Imagine Series and other vendor showcase events to demonstrate Cohesity's capabilities. These activities are aimed at informing both channel partners and end users, broadening awareness and understanding of data security needs and solutions in New Zealand. Cohesity's involvement as a recent sponsor of the Imagine Series was noted as part of the companies' joint effort to promote digital resilience across the region. "As New Zealand organisations navigate an increasingly complex threat landscape, the need for integrated, AI-powered data security has never been greater," said Paul Henaghan, Regional Director and MD ANZ at Cohesity. "Our expanded collaboration with Westcon-Comstor reflects our shared commitment to delivering enterprise-grade solutions that strengthen cyber resilience, support regulatory compliance, and ensure rapid recovery in the face of disruption. Together, we are well-positioned to help businesses across New Zealand safeguard their most critical digital assets with confidence and clarity." Cohesity's platform is designed to integrate with other technologies, allowing partners to develop comprehensive security strategies that also address data management requirements. As the shift toward digital-first operations accelerates, the organisations believe there is an increasing necessity for advanced tools, training, and technological support that can help customers in the public and private sectors manage and secure their information assets effectively. The partnership between Westcon-Comstor and Cohesity places a strong emphasis on education and capability-building across the local ecosystem. By featuring Cohesity's solutions alongside its other vendor offerings, Westcon-Comstor aims to help organisations in New Zealand achieve greater operational efficiency and compliance while responding to evolving cybersecurity challenges. Increasing regulatory scrutiny, combined with a shift in the threat landscape, is prompting many enterprises in New Zealand to reprioritise how they approach cybersecurity at a strategic level. The companies state that the expanded partnership will focus on providing organisations with access to scalable, AI-driven solutions that can respond to new risks as they emerge. Westcon-Comstor and Cohesity have emphasised their commitment to supporting partners and customers in New Zealand with the resources required to adapt to the ongoing digital transformation. This will include the deployment of integrated technologies, educational initiatives, and expert support aimed at sustaining digital resilience in a data-driven and threat-prone environment.
