The independent support market is small, public, and uneven on scope. Size matters less than coverage of your exact modules, versions, and regulatory needs.
The Oracle third party support market is led by two public scale providers and a set of specialists. The right choice depends on your estate, not the brand.
Coverage of your exact modules and versions, the security model, and contractual indemnification matter more than provider size.
This guide walks the market, the selection criteria, and the process. Read it with the third party support guide.
The market is led by two public scale providers and a set of regional specialists. Rimini Street is publicly listed and files detailed disclosures with the United States Securities and Exchange Commission.
Spinnaker Support is the other broad provider, with specialists covering narrower module sets. Provider news and scope are tracked on the Rimini Street press release archive.
A publicly listed provider files audited financials and discloses litigation, which lets you assess stability before you commit a multi year support relationship to it.
Check fit, not fame. The provider must cover your exact modules and versions, supply tax and regulatory updates where you need them, and stand behind the legal position.
Provider evaluation matrix
| Criterion | What good looks like | Why it matters |
|---|---|---|
| Module coverage | Every module and version named | Gaps become unsupported risk |
| Regulatory updates | Your jurisdictions covered | Payroll and tax must stay current |
| Security model | Virtual patching and monitoring | Replaces Oracle patches |
| Indemnification | Provider stands behind method | Shifts legal risk off you |
| References | Customers on your platform | Predicts real satisfaction |
Independent providers cannot ship Oracle's patches, so they secure the estate by other means. The contrast is with Oracle's own Lifetime Support Policy, which gates patches to the premier window.
Run it as a structured procurement, not a single quote. Baseline the current support, scope the requirement, and compare providers on fit and indemnification.
The standard advice is to pick the biggest provider for safety. We disagree. In roughly 18 of the 30 selections we ran across 2024 and 2025, the deciding factor was whether the provider covered the buyer's exact module and version set with strong indemnification, not its overall size. A large provider with thin coverage of your platform is weaker than a specialist who lives in it. The buyer side move is to score every provider against your estate and your indemnification needs, then choose on fit, treating brand and scale as a tiebreaker rather than the headline criterion.
Source: Redress Compliance advisory engagement file, 2024 to 2025.
Provider size is a comfort, not a criterion. The support relationship that holds is the one matched to your exact modules, versions, and risk.
The checklist below sequences a third party support provider selection.
White Paper · Oracle
When third party support is the right call for Oracle Database, Apps, and Middleware. Read it free.
The market is led by Rimini Street, which is publicly listed, and Spinnaker Support, alongside regional specialists. The right provider depends on coverage of your exact modules and versions, not overall size.
Check module and version coverage, regulatory update scope, the security model, indemnification, service levels, and references on your platform. Fit to your estate matters more than provider scale.
Independent providers use virtual patching, configuration hardening, and monitoring in place of Oracle patches. They cannot ship Oracle's updates, so they reduce and watch the attack surface instead.
Yes, within defined bounds. The Rimini Street litigation confirmed independent support is lawful while limiting how updates may be created, which is why indemnification language matters in the contract.
No. In our selections, coverage of the exact module and version set predicted satisfaction better than size. A specialist that lives in your platform can beat a larger provider with thin coverage.
A structured selection typically runs six to twelve weeks, covering baseline, scoping, comparison, references, and indemnification negotiation, depending on the size and complexity of the estate.
Yes, but plan the exit before you sign. Confirm data and documentation handover, notice periods, and the path back to Oracle so a future switch is not blocked.
Redress baselines the support, scopes the requirement, and scores providers against your estate and indemnification needs. Every engagement is led on the buyer side by a former Oracle licensing executive.
Redress runs Oracle support provider selection inside the Vendor Shield subscription, the Renewal Program, and the Benchmark Program, led on the buyer side by a former Oracle licensing executive.
Read the related Oracle services page, the Oracle knowledge hub, the benchmarking page, and the contact page.
A buyer side reference on the Oracle Unlimited License Agreement decision. Certification scope, the exit path, audit posture, support strategy, and the commercial levers that still hold at renewal.
Used across more than five hundred enterprise software engagements. Independent. Buyer side. Built for Oracle customers running the next renewal cycle.
Open the white paper in your browser. Corporate email only.
Open the Paper →Renewal in twelve months. Audit notice in the inbox. RFP on the desk. We start where you are.
Provider scope changes, security models, indemnification terms, selection benchmarks, and support market intelligence from every Oracle engagement we run on the buyer side.
Once a month. Audit patterns, renewal benchmarks, vendor commercial signals across Oracle, Microsoft, SAP, Salesforce, IBM, Broadcom, AWS, Google Cloud, ServiceNow, Workday, Cisco, and the GenAI vendors. No follow up sales pressure.
Free providers (Gmail, Yahoo, Outlook) cannot subscribe. Work email only. Unsubscribe in one click.