Download websites that use JavaServer Pages

About JavaServer Pages

A file extension is a confession. Plenty of server side technology hides behind clean URLs and reverse proxies, but pages built with JavaServer Pages have historically carried their runtime in the address bar, and older deployments still do. Detection is direct rather than inferential, which is unusual in this part of the stack and worth stating before anything else.

What the runtime implies about an organisation matters more than the runtime itself. The technology arrived in 1999 as part of the enterprise Java platform, in the era when a web tier was something an application server rendered on request. Systems built that way tend to be internal to large organisations, wired into databases and back office processes, and expensive to replace, so they survive long after fashion moved elsewhere. Banks, universities, insurers, government portals, logistics systems and hardware vendor consoles are the shapes that recur.

Version data here reflects a specification rather than a product. We see 8 distinct versions across the detected population, and a commonly observed one is 2.3, which is a specification level rather than a release number. Coarse versioning of that kind is useful and limiting at once. The specification level indicates roughly which generation of application server sits underneath, but it says nothing about the vendor, the patch level or whether the container has been maintained, and those are the details a security question actually needs.

Stewardship has changed hands more than once. Eclipse Foundation now maintains the technology under the Apache 2.0 licence and under a renamed specification, after the original owner and its acquirer each held it in turn. Renaming rarely reaches the deployment. Servers keep serving pages with the original extension, configuration keeps the original names, and the installed base stays legible under the older identity, which is the identity a crawler sees.

As of September 2026 we detect JavaServer Pages on 3,497 sites in the Web frameworks category. Undercounting is certain and worth understanding rather than glossing. URL rewriting, front controllers and modern frameworks running on the same runtime remove the extension entirely, so a large population of Java applications is invisible under this label even though the underlying technology is present and busy. Read the count as the extension exposing part of a considerably larger estate.

The list exists to answer questions about that estate rather than about any single address. Vendors selling modernisation, application server support, observability or security tooling want the organisations still running the older tier, sorted by country and sector. Consultancies and recruiters want to know where those skills are still being paid for. Researchers want to correlate the runtime with other markers of an ageing stack, which is where a joined download earns its keep. A per domain lookup can confirm one site. Only the full file shows the shape of the estate, which is what every one of those questions is really asking about.