SAST SUITE by akquinet AG

SAP security and GRC are becoming increasingly critical as organizations operate complex SAP landscapes while simultaneously shifting toward SAP HANA, big data, and cloud solutions. Compliance with legal and regulatory requirements remains a primary driver, but security is also positioned as essential for protecting intellectual property and sensitive data such as customer information. Mature SAP security must extend beyond access governance (users, roles, profiles, workflows, approvals, and recertification) to include broader technical controls: hardened operating systems, network protections, disciplined patching using resources such as SAP Security Notes, secure configuration best practices, and capabilities to detect and prevent information leakage. Given a rapidly evolving threat landscape, real-time detection of anomalies supported by analytics, alerting, and automated responses is highlighted as increasingly important.

AKQUINET’s SAST SUITE is presented as a modular yet integrated product set for SAP security and GRC, designed to be tailored to specific use cases and to cover both on-premises SAP (including ERP and S/4HANA) and SAP cloud solutions. Its capabilities are organized into three pillars: Platform Security, Identity and User Access Management, and Security Intelligence. Platform Security includes system security validation (over 4,000 automated checks), interface management (covering HTTP, RFC, and database connections, including auto-generated RFC roles), ABAP code analysis and remediation within the SAP environment, and a password self-service module. Identity and access modules span authorization governance, privileged user controls (including emergency users and auditing), monitoring read-only HCM data access, role lifecycle management and optimization, simplified go-live transitions, self-adjusting authorizations based on observed usage, and user access administration. Security Intelligence adds risk/compliance management, continuous monitoring via Security Radar (with SIEM integration), dashboards, and download monitoring.

The suite runs inside SAP using its own namespace and transport-based installation, avoiding extra hardware while potentially conflicting with non-intrusive deployment preferences; a managed service option is available. Strengths emphasized include real-time analytics, dashboards for multiple audiences, innovative automation features, policy consistency across heterogeneous SAP estates, and triple SAP certification.

• The SAST System Security Validation module includes more than 4,000 automated security checks.
• The SAST SUITE is organized into three pillars: Platform Security, Identity and User Access Management, and Security Intelligence.
• SAST Interface Management checks HTTP, RFC, and database connections and can auto-generate RFC roles.
• SAST Code Advisor and SAST Code Remediator analyze and improve ABAP code within the SAP environment without leaving the organization.
• The suite includes a Password Self Service module designed for password resets aligned with corporate password policies.
• Identity and User Access Management in SAST includes modules for authorization management, superuser management, role management, and user access management.
• A dedicated module monitors and audits read-only access to HCM data by privileged users.
• SAST Security Radar provides continuous monitoring, alerting, dashboards, and integration into SIEM tools such as IBM QRadar.
• The system is deployed within SAP using its own namespace and is installed via SAP transport, so no additional hardware is required.
• The SAST SUITE is triple certified by SAP for NetWeaver, SAP HANA, and “Ready for SAP S/4HANA”.

• “Ensuring an adequate level of security and compliance for the continuously changing SAP infrastructure system landscape is of utmost importance.”
• “Beyond that, more and more organizations understand that providing an adequate level of security is a key requirement for protecting the organization’s intellectual property.”
• “Being highly important criteria, these business aspects must not be the only focus when it comes to SAP security.”
• “SAP systems are sophisticated and complex software infrastructures, that have to be secured on every relevant level.”
• “Detecting and preventing information leakage are probably one of the most important aspects when it comes to protecting essential data assets.”
• “When looking at the constantly changing threat landscape involving internal and external threat actors, the real-time detection or prevention of anomalies and undesirable behavior… becomes more and more important.”
• “While separate modules provide clearly defined functionality for specific aspects within the SAP GRC area, they are provided as an integrated solution.”
• “The modular design allows customers to select only required components and to expand the solution dynamically whenever required.”
• “This might however not be suitable for use case scenarios where non-intrusive approaches are preferred.”
• “Organizations looking for a highly configurable GRC solution tightly integrated into their existing SAP system… should definitely consider the AKQUINET SAST SUITE.”