Companies Using Java

I run the crawler that records the cookies and headers every domain sends us, and Java is a row I read as a map of platforms rather than a list of Java shops. A domain counts when it sets a JSESSIONID cookie. Our October 2026 crawl puts that at 90,494 domains after cleaning, 2nd of 13 in Programming Languages, with 54,211 matched to a company. On 16 October 2026 I re-requested a random 1% of the domains, 1,038 of them, 917 of which survive the cleaning, with a plain request and then a headless browser, and resolved every address to its network. Our guide to technology detection methods explains how cookie rules work.

What the cookie means

JSESSIONID is the default session cookie of the Java servlet world. Apache Tomcat's context documentation says a context uses the name JSESSIONID unless the application sets another, and products built on a servlet container inherit that default. ColdFusion is the clearest case: it and Lucee, the two CFML engines, run on Java, and 7,524 domains set both the CFID cookie and JSESSIONID today. That is why CFML shares more domains with Java than PHP does, 7,524 against 6,082, though PHP's row is more than 260 times the size of CFML's (5,317,281 against 20,265 domains).

Sales signal: the cookie tells you a Java server answered. Find out whose server it is before you pitch.

Who sets it

Co-detection on the clean set names the platforms. CFML servers, Adobe ColdFusion or Lucee, account for 7,524 domains, and Finalsite's school and district sites are 2.74% of the clean set. Liferay portals hold 5.2%, Duda sites 4.74% and Zoho-hosted sites and help desks 3,507 domains (3.88%). WebWave sites add 1.43%, Salesforce 1,287 domains, ServiceNow portals 1,248, SAP Commerce Cloud 1,137 and Adobe Experience Manager 1,080. Two platforms show up better in the sample than in our rules: 15 of the 917 cleaned domains were SAP SuccessFactors career sites, and 35 (3.82%) were florists' shops on Teleflora's own network. Career sites dominate the top of the company list. Wipro, HCLTech, Volvo Group, Alstom, Halliburton and Engie all load SuccessFactors' recruiting pages, and the cookie comes with them.

"Two in five of the famous names on this page picked a careers vendor or a help desk, and that vendor's servers happen to run Java." - David Thomson, CTO at TechnologyChecker.io

Sales signal: for an enterprise row, the buyer is whoever owns that subdomain, usually HR, customer service or partner marketing, not central IT.

What we removed

Two groups in the raw count would have misled a prospect list, so they're out. Chinese lottery and casino fleets, sites titled 聚彩网 (927), 中彩网 (822), 彩吧网 (505) or 威尼斯人娱乐场 (394), added up to 5,260 domains, 93.9% of them on names containing digits, with 119 adult and torrent-search fleet sites beside them. And 5,493 were hosted pages stored as domains: 4,236 Alibaba.com supplier minisites, 741 on Made-in-China.com, and tenant pages on AnyDesk, Okta, LinkedIn and others. Those cookies came from Alibaba's and the other platforms' own servers. In all, 10,872 domains came out before any chart on this page was drawn.

Sales signal: if you build a Java list from any other source, filter numeric Chinese domains and platform subdomains first, or a tenth of it is noise.

How much of it is current

639 of the 917 cleaned domains (69.68%) set the cookie on a plain homepage visit on 16 October 2026. 121 (13.2%) stopped us at a bot wall, 37 didn't answer and 19 returned an error page, and an application can wait until a visitor logs in or searches before it opens a session, so a homepage visit undercounts. Since we began tracking on 16 March 2026, 10,498 domains dropped the cookie on at least one hostname, fleets included, and 961 of those still set it on another. We chart only October 2026, because earlier months predate the cleaning, and month-to-month comparisons would mix our side in anyway: the set of domains we crawl turns over every month, dead sites out and newly found ones in, and our detection widens.

Sales signal: a dropped cookie is weak churn evidence. Check the other hostnames before you call a domain lost.

Who and where

The United States holds 21,590 of the 54,211 matched companies (39.83%), Germany 3,338, the United Kingdom 2,551 and Canada 2,378. 46.29% of companies with a known size employ 1 to 10 people, yet 4,242 employ more than 1,000. Retail leads industries at 7.28%, and the three education categories together reach 8.88%. The age curve is unusual: 19.22% of companies with a founding year predate 1960, the banks, insurers and public bodies behind long-lived portals such as TD Bank's card selector and Zurich's BlueRoom.

Sales signal: split the list by size. Below 50 staff, sell to the platform's customer, a florist or a small firm on Duda; above 1,000, sell to the team that owns the portal.

Overlap with other languages

We publish no switching rows for Java, because almost every overlap is a domain running two stacks at once. 6,082 domains run Java and PHP today, 38 run Java and Python and 32 run Java and Dart. Of the 7,338 domains that have run Java and PHP together at some point since March, 6,082 (82.9%) still run both. That's one organisation running two servers side by side.

"More than four in five domains that ever ran Java and PHP together still run both. Two stacks under one roof, and neither is leaving." - David Thomson, CTO at TechnologyChecker.io

Sales signal: a domain with both usually has two owners, one per server. Find out which team runs the Java side before you pitch it.

The stack around it

Across the 90,492 clean domains in our stack base, Nginx answers on 26.94% and Apache HTTP Server on 25.28%, mostly as proxies in front of Tomcat or Jetty. Cloudflare fronts 30.54%, JavaServer Pages shows on 4.93% and Microsoft ASP.NET on 6.43%. GoDaddy's 10.59% is mostly DNS rather than hosting: 88 of the 917 cleaned sample domains use GoDaddy's nameservers. On the network side the sample splits across Cloudflare (18.1%), Amazon (15.16%), Microsoft (6.32%) and Google Cloud (4.91%).

Sales signal: nearly a third of these sites are already behind a CDN, so web security and performance offers compete with an incumbent.

What Java costs

Oracle's Java SE Universal Subscription FAQ prices support per employee: $100 a year for 1 to 10 employees, $1,000 for 11 to 100, $10,000 for 101 to 500, and from $10.50 per employee per month at 3,000 or more. The same FAQ says Oracle ships OpenJDK builds under the GPL and the Oracle JDK under its no-fee NFTC terms, which since 20 October 2026 cover Oracle JDK 25 and later only; new Oracle JDK 21 updates moved to the paid OTN license. Nothing in our signal says which JDK a server runs.

Sales signal: Java licensing reviews are a real buying moment for the enterprise tail, but our cookie can't tell you who pays Oracle.

Key takeaways

1. 90,494 domains set JSESSIONID after cleaning; 69.68% of a random 917 did so on a homepage visit on 16 October 2026.

2. We removed 10,872 domains first: gambling, adult and torrent fleets and platform-hosted pages.

3. Platforms set much of the rest: CFML (ColdFusion or Lucee) on 7,524 domains, Liferay on 5.2%, Duda on 4.74%, Zoho on 3,507 domains.

4. Enterprise rows are subdomains: careers, help desks and partner portals.

How to use this list

Segment it by platform. For SuccessFactors career sites, talk to talent acquisition; for ServiceNow portals, to customer service operations; for Liferay, to whoever owns the partner or customer portal. The full list of 90,494 domains, with 54,211 matched companies, is on TechnologyChecker.io.