A corporate headquarters district at dusk
Guide · Oracle · Support

Oracle Third Party Support Providers. How to choose.

Two providers of scale, a long tail of specialists, and one hard constraint: no Oracle patches after you leave. Score fit before you score price.

Contact Us →Read the analysis Oracle Practice
500+Enterprise clients
$2B+Under advisory
Industry Recognized
500+ Enterprise Clients
$2B+ Under Advisory
11 Vendor Practices
100% Buyer Side Independent

Oracle third party support is supplied by two publicly reported scale providers and a long tail of specialists. The right one is decided by your module and version list, not by brand.

The saving is real and large. So is the constraint: the day you leave, Oracle patches, upgrades and new regulatory updates stop arriving.

This page is the selection framework we use on the buyer side. Read it with the third party support guide and the legal position.

Key takeaways
  • The market is small. Two providers of real scale, plus specialists who go deep on one product line. Fit beats size in almost every selection we score.
  • The price anchor is 50 percent. Providers position against your current Oracle bill, which is 22 percent of net license fees a year under Oracle's own policy.
  • You cannot buy patches back. After termination there are no new Oracle Critical Patch Updates, no new tax and regulatory updates, and no upgrade rights.
  • Reinstatement is 150 percent. Oracle's published technical support policies price a return at 150 percent of the last annual fee you paid.
  • Matching service levels bites first. You usually cannot move part of a license set. The rest of the set has to be terminated or repriced.
  • Support Rewards die with the contract. If you use OCI credits to offset on premises support, leaving Oracle support removes the thing they offset.

Who actually supplies Oracle third party support?

Two providers operate at scale across database, middleware and applications, and a set of specialists cover narrower product lines. Rimini Street is publicly listed and files audited results and litigation disclosure with the United States Securities and Exchange Commission.

Spinnaker Support is the other broad provider. Below them sit firms that specialize by product line, by region, or by regulatory jurisdiction. Provider scope changes, so read the current disclosures rather than a two year old comparison.

The three tiers you will actually meet

  • Scale providers. Broad catalog across database, middleware, applications. Follow the sun staffing. Formal security programs. Higher list price than a specialist.
  • Product specialists. Deep on one family, commonly PeopleSoft, JD Edwards, Siebel or E Business Suite. Often staffed by former Oracle development or consulting people.
  • Regional and regulatory specialists. Narrow footprint, strong on local payroll and statutory reporting, weaker on 24 hour coverage.

Why a public filer is easier to diligence

A listed provider publishes audited financials, customer concentration and litigation status. You can read the risk factors instead of asking for them. That is a genuine diligence advantage on a contract you intend to run for five years or longer.

It is not a quality signal by itself. A specialist with 40 engineers who have shipped PeopleSoft tax updates for a decade can serve a PeopleSoft estate better than a larger firm with two people on that product.

What the provider is actually selling you

You are buying incident response, break fix engineering, and, where offered, tax, legal and regulatory updates written by the provider. You are not buying Oracle intellectual property, and no provider can give you it.

How much does third party support actually save?

Providers price against your current Oracle bill, and the usual anchor is a cut of about 50 percent to the annual fee. Oracle's Premier Support for technology programs runs at 22 percent of net license fees per year, so the arithmetic starts from a number you already know.

Oracle's Software Technical Support Policies also reserve the right to apply renewal adjustments each year. In the renewals we reviewed in 2024 and 2025, uplift landed between 0 and 4 percent depending on whether a cap had been negotiated into the original order.

Five year cost picture on a 5 million dollar net license estate

LineStay on OracleMove to third party
Year 1 support fee1,100,000 at 22 percent550,000 at the usual anchor
Annual uplift assumption0 to 4 percentOften fixed for the term
Five year gross fees5.5 to 6.0 million2.7 to 2.9 million
New Oracle patchesIncluded while in PremierNone after termination
Upgrade rightsIncludedLost from the termination date
Cost to return in year 3Not applicable150 percent reinstatement plus back fees

The savings that never make it into the business case

Four costs sit outside the support line and are routinely missed. Each one has moved a decision we worked on.

  • Support Rewards. Oracle credits a share of OCI consumption against on premises technology support fees. Terminate the support contract and the credit has nothing left to offset.
  • Repricing of what stays. Oracle reprices the remaining licenses in an order at current list less your standard discount when part of it is terminated.
  • Internal engineering. Someone has to own the security compensating controls that used to arrive as a quarterly patch. Budget one to two full time equivalents on a large estate.
  • Deal leverage. Support spend is a bargaining chip in cloud negotiations. Removing it changes how the account team treats your next renewal.

What should you check before you sign a provider?

Check fit and contract language, in that order, before you look at price. The provider must name every module and version you run, state which jurisdictions it writes regulatory updates for, and stand behind its own method in writing.

The twelve questions we put to every provider

  1. Name every product, module and version in our estate that you support, as a schedule to the contract.
  2. Which of those do you support with engineers who have shipped a fix in the last 12 months?
  3. Which tax, legal and statutory jurisdictions do you deliver updates for, and on what calendar?
  4. How are payroll and year end updates tested, and by when do they ship relative to the statutory date?
  5. What is your security model in the absence of vendor patches, in writing, at a level our CISO can review?
  6. What exactly does your indemnity cover, what does it exclude, and what is the cap?
  7. Does the indemnity survive termination for claims arising during the term?
  8. What are the response and resolution commitments by severity, and what is the remedy if you miss them?
  9. Who owns the fixes you write for us, and what happens to them if we leave?
  10. Give us three references running our exact product line at our scale.
  11. What is your notice period, and what does handover include on exit?
  12. What happens to our service if you are acquired or you exit this product line?

Coverage has to be a schedule, not a statement

A sales answer of yes we support PeopleSoft is not coverage. Coverage is a named schedule listing product, version, PeopleTools release, localization and interface, attached to the agreement and updated when your estate changes.

Every gap we have seen turn into an incident was visible in the schedule before signature. Nobody read it against the actual estate inventory.

Regulatory updates are the hardest part to replace

Tax, payroll and statutory reporting updates are the highest risk area in an applications move. They are time bound, legally mandated, and they do not tolerate a late delivery.

Ask for the last two years of delivery dates by jurisdiction against the statutory deadline. A provider that tracks this will have the table ready. One that does not is telling you something.

Provider evaluation matrix

CriterionWhat good looks likeWhat it costs you to get it wrong
Module coverageNamed schedule, every versionAn unsupported module found during an incident
Regulatory updatesJurisdiction list plus delivery historyA late payroll filing and a regulator letter
Security modelDocumented controls your CISO signs offAn unpatched exposure with no vendor fix
IndemnityDefense and settlement, no method carve outYou fund your own defense
Service levelsSeverity based, with a credit remedyBest efforts on a production outage
ReferencesSame product line, similar scaleYou are the reference customer
Exit termsNotice, handover, artifact returnA blocked or expensive move back

How do providers handle security without Oracle patches?

They do not patch the code. They reduce and watch the attack surface instead, because Oracle's Critical Patch Updates are Oracle intellectual property and cannot lawfully be redistributed by a third party.

Oracle publishes its patch cadence and advisories on its Critical Patch Update and Security Alerts pages. Read the last eight quarters for your products before you decide. That is the stream you are giving up.

What replaces a quarterly patch

  • Virtual patching. Rules at the network, database firewall or application layer that block the exploit path rather than fixing the code.
  • Configuration hardening. Removing components, ports, sample schemas and default accounts you never use.
  • Segmentation. Keeping the unpatched estate off any path a hostile party can reach directly.
  • Monitoring and detection. Compensating controls with an owner, a runbook and evidence for the auditor.

The five questions your CISO will ask

Take these to the provider before you take the proposal to the board. In our experience they decide whether security signs the paper.

  1. How do you learn about a new Oracle vulnerability, and how fast do you issue guidance?
  2. Do you write a compensating control per advisory, or a generic hardening baseline?
  3. What evidence do we hand an auditor who asks why a known vulnerability is unpatched?
  4. Which of our components sit outside your security scope entirely?
  5. What happens on a zero day in a component that faces the internet?

The distinction most buyers get wrong

Sustaining Support and third party support are not the same thing, and the difference is expensive. Sustaining Support is still an Oracle contract at the same 22 percent fee.

Under Oracle's policy, Sustaining Support gives you access to updates, fixes and patches created during Premier and Extended Support, but no new ones, no new tax or regulatory updates, and no 24 hour Severity 1 commitment.

Sustaining Support is the worst of both worlds at full price. If the estate is stable enough for Sustaining Support, it is stable enough to price the alternative properly.

What does it cost to go back to Oracle?

Oracle prices reinstatement at 150 percent of your last annual support fee, and its published policies say so plainly. That number, plus the fees for the lapsed period, is the price of changing your mind.

The Oracle Software Technical Support Policies state that where support lapsed, the reinstatement fee is 150 percent of the last annual technical support fee paid for the relevant program. Where support was never bought, it is 150 percent of the fee that would have applied at the time of reinstatement.

Matching service levels is the constraint people meet first

Oracle's policies require all licenses in a license set to sit at the same support level. You cannot quietly move half the estate and keep the rest supported.

The practical consequence is that partial moves force license terminations, and Oracle then reprices the survivors at current list less your standard discount. Model that before you scope a partial move, not after.

The 30 days before termination decide the next five years

While you still hold a support contract you still hold access to My Oracle Support. That access ends when the contract ends, and with it your ability to pull anything down.

  • Download and archive every patch, patch set and bundle you are entitled to today.
  • Archive installation media and documentation for every version you run and might roll back to.
  • Export your service request history. It is the estate's medical record and the new provider will want it.
  • Record the license set structure and the exact support fee per order line. You need it if you ever price a return.

Where the common advice on choosing a support provider is wrong

The standard advice is to pick the largest provider because scale means safety. We disagree. In roughly 18 of the 30 selections reviewed across 2024 and 2025, the deciding factor was whether the provider covered the exact module and version set with an indemnity that survived termination, not how big it was. A large provider that supports your product line thinly is weaker than a specialist that lives in it. Score every provider against your estate schedule and your indemnity requirements first, then use scale as a tiebreaker rather than as the headline criterion.

A procurement team comparing Oracle support provider proposals across a boardroom table
The provider that fits is the one whose engineers have shipped a fix on your exact release, not the one with the largest logo wall.

How do you run a third party support selection?

Run it as a structured procurement over about ten weeks, with the estate inventory finished before any provider sees a requirement. A single quote against an unverified estate is how bad selections happen.

The ten week sequence

  • Weeks 1 and 2. Baseline the Oracle contract: support fee per order line, license sets, renewal dates, caps, and any cloud commitments tied to the account.
  • Weeks 3 and 4. Inventory the estate to version and localization level. This is the document everything else hangs from.
  • Weeks 5 and 6. Issue the requirement, including the coverage schedule template and the indemnity language you want.
  • Weeks 7 and 8. Score responses, run the security review, and take references on your product line.
  • Weeks 9 and 10. Negotiate contract terms, plan the archive window, and set the termination date against the Oracle renewal.

The clauses worth spending negotiation capital on

  • Coverage schedule attached and amendable without a price change when versions move within a release.
  • Indemnity that covers defense and settlement, survives termination, and has no carve out for the provider's own support method.
  • Price held for the full term, with any renewal increase capped in writing.
  • Exit assistance: notice period, artifact return, and cooperation with a successor provider.
  • Ownership of the fixes written for you, or at minimum a perpetual license to keep using them.

Timing the termination against the renewal

Termination has to land cleanly against the Oracle support anniversary. Notice periods on Oracle support renewals are unforgiving, and a missed date buys another full year at 22 percent.

Work backwards from the anniversary: notice date, archive window, provider onboarding, and knowledge transfer. Give the archive window more time than feels necessary.

30
Provider selections reviewed
22%
Oracle annual support rate
150%
Published reinstatement fee
60 to 70%
Selections decided on coverage fit

Source: Redress Compliance advisory engagement file, 2024 to 2025, and Oracle published support policies.

Which estates suit third party support and which do not?

Stable estates on mature releases suit it. Estates in motion do not, because you cannot take an Oracle upgrade after you leave.

That single constraint decides most cases. Ask how long you intend to run the current release, then answer honestly rather than optimistically.

Good fit

  • A mature applications estate you intend to run for five years or more, such as PeopleSoft, JD Edwards or Siebel.
  • Database estates frozen on a version that already carries the patches you need.
  • Systems scheduled for replacement, where support is a holding cost until the new platform lands.
  • Estates where internal teams already do most of the diagnosis before a service request is raised.

Poor fit

  • Anything mid upgrade, or with an upgrade approved in the next 24 months.
  • Internet facing components where the security committee will not accept compensating controls.
  • Estates with heavy Oracle cloud commitments where Support Rewards already offset the fee.
  • Products where the provider cannot name an engineer who has shipped a fix on your release.

What should a buyer do next?

Work the sequence below. It takes about ten weeks and it removes almost all of the risk people associate with this decision.

  1. Baseline the Oracle contract. Support fee per order line, license sets, renewal anniversary, notice period, and any negotiated uplift cap.
  2. Inventory the estate. Product, version, patch level, localization, and integration points. Sign it off with the application owners.
  3. Answer the roadmap question. How long will you run this release? If the honest answer is under two years, stop here.
  4. Model both paths over five years. Include repricing of the remaining license set, Support Rewards forfeited, and the internal engineering cost.
  5. Shortlist on fit. Two scale providers plus any specialist that genuinely lives in your product line.
  6. Score against your schedule. Coverage, regulatory jurisdictions, security model, indemnity, service levels, references.
  7. Run the security review early. A late no from your CISO wastes the whole cycle.
  8. Negotiate the exit before the entry. Notice, handover, artifact return, and the price of a return to Oracle.
  9. Run the archive window. Pull every patch, media and document you are entitled to before the contract ends.
  10. Benchmark the result. Compare the outcome against comparable deals using our benchmarking data before you sign.
Cover of the Redress Compliance Oracle white paper

White Paper · Oracle

Oracle Third Party Support

Should you leave Oracle support? Read it free.

Read the white paper
Need help? Try our AI agents. Ask the Oracle licensing AI agent → Scoped to one vendor and one problem. Runs in your browser.

Frequently asked questions

Who are the main Oracle third party support providers?

Rimini Street, which is publicly listed, and Spinnaker Support are the two providers of scale, alongside product and regional specialists. Which one is right depends on coverage of your exact modules and versions rather than provider size. Read the current filings and scope statements, because provider coverage changes year to year.

How much does Oracle third party support cost?

Providers usually anchor at about half of your current Oracle support fee, which itself runs at 22 percent of net license fees per year. The real comparison is over five years and must include repricing of any licenses you keep with Oracle, forfeited Support Rewards, and the internal engineering you take on.

Do you lose Oracle security patches if you switch?

Yes. From the termination date you receive no new Oracle Critical Patch Updates for the affected programs, because those patches are Oracle intellectual property. Providers substitute virtual patching, hardening, segmentation and monitoring, which your security team has to accept in writing before you sign.

What does it cost to go back to Oracle support?

Oracle's published technical support policies price reinstatement at 150 percent of the last annual technical support fee you paid for the relevant programs. You should also expect to pay for the lapsed period, so a return in year three is materially more expensive than most business cases assume.

Can you move only part of the estate to a third party?

Rarely, and not quietly. Oracle's matching service levels rule requires every license in a license set to sit at the same support level, so a partial move usually forces termination of the rest of that set. Oracle then reprices the surviving licenses at current list less your standard discount.

Is Oracle third party support legal?

Independent support of software you already licensed is lawful as a business model, and United States courts have never held otherwise. What the Oracle and Rimini Street litigation tested was how a provider may build and deliver updates, which is exactly why indemnity language matters. The detail is set out on our page on the legal position.

Does provider size predict satisfaction?

No. In the selections we reviewed, coverage of the exact module and version set predicted satisfaction far better than provider revenue. A specialist whose engineers have shipped fixes on your release will usually outperform a larger firm with a thin bench on that product.

How long does a provider selection take?

About ten weeks for a structured selection, and the estate inventory is the long pole. Baseline and inventory take four weeks, the requirement and scoring another four, and contract negotiation two, assuming your security review runs in parallel rather than at the end.

How Redress engages on Oracle

Redress runs Oracle support provider selection inside the Vendor Shield subscription, the Renewal Program, and the Benchmark Program, led on the buyer side by a former Oracle licensing executive. We do not resell support and we take no fee from any provider.

Read the related Oracle services page, the Oracle knowledge hub, the Oracle support costs analysis, the support options comparison, and the contact page.

Run the Oracle Java license calculator against your estate in under five minutes.
Open the Oracle Java License Calculator →
White Paper · Oracle

Oracle Third Party Support

The buyer side moves that keep your Oracle estate honest at renewal.

Independent. Buyer side. Built for Oracle customers running the next renewal cycle.

Oracle Third Party Support

Open the white paper in your browser. Corporate email only.

Open the Paper →
Pass it on

Know someone facing this exact decision?

Send this to whoever owns the renewal, the audit response, or the budget. It takes two clicks and it saves them a quarter of guessing.

Share on LinkedInShare by email
Editorial photograph of an enterprise office

Your renewal calendar is your leverage.

Renewal in twelve months. Audit notice in the inbox. RFP on the desk. We start where you are.

Oracle support market intelligence, monthly.

Provider scope changes, security models, indemnification terms, selection benchmarks, and support market intelligence from every Oracle engagement we run on the buyer side.