# Soterion Reviews **Vendor:** Soterion **Category:** [IT Risk Management Software](https://www.g2.com/categories/it-risk-management) **Average Rating:** 4.9/5.0 **Total Reviews:** 22 ## About Soterion Soterion is an international leading provider of SAP Governance, Risk and Compliance (GRC) solutions. Soterion’s user-friendly GRC solutions provide SAP customers with in-depth access risk reporting to allow organisations to effectively manage their access risk exposure. Soterion is passionate about simplifying the GRC processes, with a focus on translating this complexity into a business-friendly language to enhance better decision making and business accountability. The software provides immediate integration into the SAP environment allowing organisations to keep up with the market while effectively managing risk. Our easy-to-learn, plug-and-play software is S/4HANA ready, offers a beautiful graphical user interface and boasts an award-winning user experience. As access risk is business risk, Soterion believes that effective GRC is measured by how well the business users can carry out their access risk management activities. Our business-friendly GRC solution enhances the organisation’s overall risk awareness by empowering business buy-in and accountability of access risk. Soterion's GRC software suite includes the following solutions: • Access Risk Manager • Basis Review Manager • Central Identity Manager • Continuous Controls Manager • Data Privacy Manager • Elevated Rights Manager • Periodic Review Manager • Password Self-Service • SAP License Manager Deployment options are as a subscription model or an outright purchase: • Soterion On-Premise: For customers looking for market leading on-premise access risk software. • Soterion Cloud: Soterion’s GRC suite hosted in Soterion’s data centres. • Soterion GRC as a Managed Service: For customers looking to combine ‘on-tap’ GRC expertise with Soterion’s GRC suite. A team of expert consultants with vast knowledge in SAP security, risk and controls across multiple SAP platforms (ECC, S4HANA, SuccessFactors etc) assist our customers in securing their SAP environments, striving towards SAP security utopia. For more information, email us at info@soterion.com or visit our website: https://soterion.com/ ## Soterion Reviews ### 1. Soterion Insight Day: Insightful and Practical for SAP Security and GRC **Rating:** 4.5/5.0 stars **Reviewed by:** Duduzile K. | SAP Associate Consultant-Functional, Enterprise (> 1000 emp.) **Reviewed Date:** July 29, 2025 **What do you like best about Soterion?** What I like best about Soterion: Soterion makes complex SAP security and GRC concepts easy to understand and apply. Their approach is very practical, focusing on real business challenges rather than just theory. I also love how user-friendly their solutions are, which helps simplify access control and authorization management. Plus, their team is knowledgeable and always willing to share insights. **What do you dislike about Soterion?** There isn’t much to dislike, but if I had to mention something, it would be that I’d love to see even more case studies and hands-on examples during sessions. Real-world demonstrations always make the learning experience even stronger. **What problems is Soterion solving and how is that benefiting you?** Soterion is helping address the complexity of SAP access control and authorizations by simplifying compliance and risk management processes. Their solutions make it easier to identify and mitigate Segregation of Duties (SoD) conflicts, streamline user provisioning, and prepare for the transition to S/4HANA. This not only reduces audit risks but also saves time and improves overall security posture, allowing me to focus on value-adding tasks rather than manual checks. ### 2. Effective Access Control tool **Rating:** 5.0/5.0 stars **Reviewed by:** Themba M. | SAP Authorisation Administrator, Mid-Market (51-1000 emp.) **Reviewed Date:** July 29, 2025 **What do you like best about Soterion?** Soterion software has help make my organization by showing visibility on relevant risks to our organization with , effective monitoring of consulted activities with the Elevated rights mode, the Support Team are always available to assist with any queries, **What do you dislike about Soterion?** Nothing much as far as my experience the software is always up no downtimes easy to reload jobs run like import **What problems is Soterion solving and how is that benefiting you?** Visibility to see dormant users, quick to lock also SAP log data SM20, also more useful reports ### 3. Wonderful and Informative **Rating:** 4.5/5.0 stars **Reviewed by:** Murunwa M. | Identity and Access Management Engineer (SAP Authorization security and Audit), Mid-Market (51-1000 emp.) **Reviewed Date:** July 29, 2025 **What do you like best about Soterion?** The simplicity and user-friendliness interface and simple English use good for business users **What do you dislike about Soterion?** Nothing much , I like everything about Soterion have used it once in my previous role **What problems is Soterion solving and how is that benefiting you?** Not yet, but I would like assistance in role redesign and access review. ### 4. Soterion on top of their game **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Building Materials | Enterprise (> 1000 emp.) **Reviewed Date:** July 29, 2025 **What do you like best about Soterion?** Their software solutions are purpose made to allow for easy Sap user provisioning and licence review. **What do you dislike about Soterion?** There is nothing to dislike about the Soterion offering. **What problems is Soterion solving and how is that benefiting you?** Sap user provisioning and licence auditing. ### 5. A pleasant day in conference **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Accounting | Small-Business (50 or fewer emp.) **Reviewed Date:** July 29, 2025 **What do you like best about Soterion?** A wide range of topics presented Friendly people Well versed speakers In tune with current business needs **What do you dislike about Soterion?** Nothing as yet Will look forward to engaging on potential opportunities **What problems is Soterion solving and how is that benefiting you?** Navigating SAP licensing ### 6. Great Insights **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Building Materials | Enterprise (> 1000 emp.) **Reviewed Date:** July 29, 2025 **What do you like best about Soterion?** Practical looking user friendly tools and solutions for management of SAP user lifecycles **What do you dislike about Soterion?** Nothing noted that looked too detract from the product features **What problems is Soterion solving and how is that benefiting you?** SAP user and role management ### 7. Soterion - Excellent and User-Friendly **Rating:** 5.0/5.0 stars **Reviewed by:** Letani D. | SAP Functional Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** August 15, 2022 **What do you like best about Soterion?** Our company has been using Soterion for the past 4 years and we are extremely happy with it. Soterion offers a variety of solutions including risk assessment and -management, BASIS review and elevated rights access, to name just a few. It is an easy-to-use system that includes built-in (yet customizable) risk rulesets, it provides clean-up opportunity wizards and graphical representations of business flows – all through a user-friendly web application. The original implementation was smooth and well-handled and their after-sales service and support are excellent! **What do you dislike about Soterion?** Soterion currently caters for all our needs and there is nothing that I dislike about Soterion. **What problems is Soterion solving and how is that benefiting you?** Soterion has made user risk assessment and -management a breeze through their What-If scenarios and has helped us address critical risk issues prior to external audits. ### 8. Effective User-friendly GRC Tool! **Rating:** 5.0/5.0 stars **Reviewed by:** Jacques C. | SAP GRC & Security Consultant, Small-Business (50 or fewer emp.) **Reviewed Date:** August 29, 2022 **What do you like best about Soterion?** Soterion is a highly effective and easy-to-use GRC tool. The reporting is immaculate and identifying SAP access risk from a user, single role, composite role, business role and position level is a breeze. The reports are also very rich in information and hence provide all the visibility you need to clean up your SAP access risk. My favorite part of the Soterion tool is how seamlessly it converts the technical GRC language into a language that business users can understand through visual representations amongst other things. **What do you dislike about Soterion?** There is honestly no downside to using the Soterion tool. If you want an effective, easy-to-use and agile GRC tool Soterion is the way to go! **What problems is Soterion solving and how is that benefiting you?** One of the most important tasks of an SAP Security consultant is cleaning up SoD and Sensitive access risks. Soterion is exceptionally good at identifying the risks and providing different reports to, for example, focus on the highest contributing users and/or roles first. This enabled me to dedicate my time effectively and ultimately led to a more effective clean-up. Soterion is also able to report on superfluous access i.e. transactions and roles that are not being utilized by SAP users and thus made my life easier by removing risk-bearing access without business interruption. ### 9. Highly recommend Soterion as a GRC tool **Rating:** 5.0/5.0 stars **Reviewed by:** Jessica G. | Corporate Accountant, Mid-Market (51-1000 emp.) **Reviewed Date:** August 26, 2022 **What do you like best about Soterion?** Easy reporting tools that is easy for non-technical users to interpret This has allowed us to feel more in control of our SAP system, which we would not have otherwise had visibility into as this would be handled only by our outsourced support team Implementing Soterion has helped us feel more in control of our SAP system including: a) provisioning of elevated access and reviewing what changes have been made during the period of their activity b) being able to analyse which users are active in the system and roles assigned c) segregation of duty risks that exist in the system We have formed good relationships with the Soterion team. The support that we have received from the team has been excellent – responses have been very prompt and detailed solutions that are easy to understand for non technical users **What do you dislike about Soterion?** Nothing that we dislike, any opportunities that we identify for change, the team has been supportive to help us with. **What problems is Soterion solving and how is that benefiting you?** Providing us more control and visibility into the users/ roles/ elevated activity assigned and performed in the SAP system. Soterion has also provided us an opportunity to save costs through reports already available in the system that were previously run by Auditors every year end ### 10. The support and assistance received was exceptional **Rating:** 4.5/5.0 stars **Reviewed by:** David J. | Manager - Business support, Mid-Market (51-1000 emp.) **Reviewed Date:** August 17, 2022 **What do you like best about Soterion?** The system is easy to use and allows even non-technical people to use its functionality. It has every possible report to support our business when making decisions on changes needed to user access **What do you dislike about Soterion?** The excel export facility could do with some enhancements, the data in sheets is excellent just it exports blank lines as well. so sheet is larger than needed, so takes a few minutes to clean up **What problems is Soterion solving and how is that benefiting you?** Soterion has solved two major problems for us, it has allowed the easy creation of new users, by having a defined authorisation process It has also sorted out our external audit concerns, as the role review process works really well ### 11. Fantastic company to work with **Rating:** 5.0/5.0 stars **Reviewed by:** Annabel G. | SAP Security & CRM Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** August 29, 2022 **What do you like best about Soterion?** The team at Soterion are the loveliest people to work with, super helpful and quick responses to any questions. Soterion makes a lot of regular tasks in SAP security a breeze **What do you dislike about Soterion?** There are so many functions available within Soterion, I do feel we are still under-utilizing it which we need to spend more time on. But I know the team are always happy to show us how to use anything when we have questions **What problems is Soterion solving and how is that benefiting you?** The major benefit is easily managing risk and segregation of duties for our SAP security team, this work would be incredibly time consuming to manage manually without Soterion ### 12. Not looking back **Rating:** 5.0/5.0 stars **Reviewed by:** Ronel E. | GRC Controller, Enterprise (> 1000 emp.) **Reviewed Date:** August 03, 2022 **What do you like best about Soterion?** We are celebrating our 10 year partnership with Soterion. Soterion is on the cutting edge of development and surpasses many similar tools on the market. Their client service and support are excellent even if they have expanded from a local to an international company and every client is made to feel like a valued customer. The Soterion package is customizable so you can select which modules will be the best fit for your company and is real value for money. Implementations are quick and easy and audits are now a breeze. **What do you dislike about Soterion?** There is not anything that I dislike about Soterion. **What problems is Soterion solving and how is that benefiting you?** Soterion allows you to have an actual, relevant day-to-day view of your risks and to review and solve the risks quickly and easily. It starts out as a clean-up tool but turns into a proactive way of avoiding risks. The elevated risk module allows for a secure method of problem-solving for internal support staff. It puts Business Analysts in control of the way they use their elevated rights for support inside and outside of business hours and application managers have a view of access used and detecting risks in their space. ### 13. Soterion The Product & Company Rocks! **Rating:** 5.0/5.0 stars **Reviewed by:** Craig B. | Application Support & Enhancement Manager, Enterprise (> 1000 emp.) **Reviewed Date:** August 30, 2022 **What do you like best about Soterion?** We've used Soterion for the past 6-7 years to manage our segregation of duties requirements across our SAP solution. The tool is great to use and it works well for us. If we do have any challenges we know the Soterion team is only a quick call away and the support and service they provide is unparalled. **What do you dislike about Soterion?** There's nothing to dislike about the product but I dislike the fact that the Soterion toolkit has a lot more to offer than what we use today. We'll make it happen someday soon as if the rest of the toolkit is as good as what we are currently using then we are on to a winner, **What problems is Soterion solving and how is that benefiting you?** Soterion really enables us to not only manage our segregation of duties requirements in our SAP solution but to manage them well. ### 14. Business Centric GRC solution that delivers **Rating:** 5.0/5.0 stars **Reviewed by:** Karen m. | SAP Security and GRC Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** July 28, 2022 **What do you like best about Soterion?** Having implemented Soterion at several clients Soterion not only delivers at a technical reporting level but also provides GRC information in a Business Centric manner. This unique combination of technical and business level reporting has allowed our clients to make informed decisions regarding their Risks. The support from the Soterion team is superb, whether responding to a technical consultant or a business manager their communication is always fast, friendly and informative. The Soterion team consistently go a step above for their clients. The newer modules regarding Licensing, Data Privacy and Identity access provisioning are exciting additions that we are looking forward to using at our clients. **What do you dislike about Soterion?** Having implemented Soterion at several clients Soterion not only delivers at a technical reporting level but also provides GRC information in a Business Centric manner. This unique combination of technical and business level reporting has allowed our clients to make informed decisions regarding their Risks. The support from the Soterion team is superb, whether responding to a technical consultant or a business manager their communication is always fast, friendly and informative. The Soterion team consistently go a step above for their clients. The newer modules regarding Licensing, Data Privacy and Identity access provisioning are exciting additions that we are looking forward to using at our clients. **What problems is Soterion solving and how is that benefiting you?** Having implemented Soterion at several clients Soterion not only delivers at a technical reporting level but also provides GRC information in a Business Centric manner. This unique combination of technical and business level reporting has allowed our clients to make informed decisions regarding their Risks. The support from the Soterion team is superb, whether responding to a technical consultant or a business manager their communication is always fast, friendly and informative. The Soterion team consistently go a step above for their clients. The newer modules regarding Licensing, Data Privacy and Identity access provisioning are exciting additions that we are looking forward to using at our clients. ### 15. User Friendly GRC Software for Companies using SAP **Rating:** 5.0/5.0 stars **Reviewed by:** Authorization C. | SAP Security Administrator, Enterprise (> 1000 emp.) **Reviewed Date:** August 31, 2022 **What do you like best about Soterion?** Soterion provides all SAP Security in an easy, understandable format that facilitates the entire Access Management process. Super fast support when needed and a great modern user interface. **What do you dislike about Soterion?** If we have to come up with a downside it is that we are looking for some more Identity Access Management functions, specifically provisioning to non-SAP systems. **What problems is Soterion solving and how is that benefiting you?** It provides information in such a way that our Business users can perform their SAP tasks more effectively. Activities like the User Access Review has become easy to do. ### 16. Soterion - A partnership that works **Rating:** 5.0/5.0 stars **Reviewed by:** James M. | IT EXEC, Enterprise (> 1000 emp.) **Reviewed Date:** July 19, 2022 **What do you like best about Soterion?** Soterion is a world-class solution that has simplified the management and visibility of risk associated with the management of SAP authorisations. Backed by a team of knowledgeable individuals and company culture, anything is possible—a true business partnership, not just a vendor. **What do you dislike about Soterion?** There are no issues with the services or applications provided by Soetrion. **What problems is Soterion solving and how is that benefiting you?** There are no pending tasks. All requests have been addressed and implemented. ### 17. Agile GRC that works for business and IT **Rating:** 5.0/5.0 stars **Reviewed by:** Bas v. | CMO at Basis Cloud Solutions, Mid-Market (51-1000 emp.) **Reviewed Date:** August 24, 2022 **What do you like best about Soterion?** The simple and friendly GUI is the best. Implementation is fast and simple, this is a business solution with strong IT ease of use and maintenance. **What do you dislike about Soterion?** It works on SAP, that is the focus and strength. It supports SucessFactors, but not (yet) other non-SAP solutions. So a must-use in your SAP domain, but only SAP. **What problems is Soterion solving and how is that benefiting you?** Soterion is a solution for the business, it builds the bridge between IT authorizations and license contract details and makes this easy visible to the business. ### 18. Excellent GRC Solution **Rating:** 5.0/5.0 stars **Reviewed by:** Roy T. | Managing Consultant & Security Services Lead, Mid-Market (51-1000 emp.) **Reviewed Date:** August 24, 2022 **What do you like best about Soterion?** It is really easy to use and gives lots of insight into the access risks on my system **What do you dislike about Soterion?** No problems found with the solution. All works well **What problems is Soterion solving and how is that benefiting you?** Giving me and the users in the business visibility of risk and enabling us to reduce that risk quickly and easily ### 19. Business user review **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Consumer Electronics | Mid-Market (51-1000 emp.) **Reviewed Date:** August 26, 2022 **What do you like best about Soterion?** Soterion is very intuitive it doesn't take long to familiarise yourself with the interface and how to use it, even for non sap users. **What do you dislike about Soterion?** Unfortunately it doesn't work on non-SAP yet as we would like to roll it out to other software platforms as well **What problems is Soterion solving and how is that benefiting you?** It provides insight into risk and allows you to quickly mitigate that risk, and additionally it allows you to easily demonstrate to auditors what steps you have undertaken to comply to best practice. ### 20. Wonderfull product **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Chemicals | Mid-Market (51-1000 emp.) **Reviewed Date:** August 22, 2022 **What do you like best about Soterion?** The speed of the support is very fast, also feature requests are adapted in reasonable time **What do you dislike about Soterion?** Nothing for now, everything is working as expected **What problems is Soterion solving and how is that benefiting you?** The GUI is user-friendly and easy to use for all levels of users ### 21. Easy to use tool and wonderful staffs **Rating:** 5.0/5.0 stars **Reviewed by:** Jess B. | Senior Business Analyst - SAP **Reviewed Date:** August 30, 2021 **What do you like best about Soterion?** The product is easy to use and navigate. We can contact Soterion when we have any questions, and they always get back to us promptly with a clear answer. Their staffs are knowledgeable. **What do you dislike about Soterion?** There is nothing that I dislike about them. **What problems is Soterion solving and how is that benefiting you?** We gain visibility over the risks in our business and can identify areas that need some improvement. It assists us in initiating a conversation with several areas in the business to discuss segregation of duties and mitigating controls. We are now also able to produce a report to the Risk Committee to present to the Execs. **Official Response from Dudley Cartwright:** > Hi Jess, Thank you for your feedback and review. It is great to hear that you find our product easy-to-use and navigate. ### 22. Co-operation with Soterion **Rating:** 5.0/5.0 stars **Reviewed by:** Hans M. | Enterprise (> 1000 emp.) **Reviewed Date:** October 14, 2020 **What do you like best about Soterion?** When we started to ask more information from Soterion we got all the help we've asked for in the agreed timeframe we've discussed. The business knowledge is amazing and Soterion exactly knows what is important when you start with a GRC-project. It looks as if they only have subject matter experts. Really very helpful people without pushing us for a decision. **What do you dislike about Soterion?** There's not really something I dislike from Soterion **Recommendations to others considering Soterion:** Prepare your requirements. **What problems is Soterion solving and how is that benefiting you?** GDPR and Compliancy and also in this case specifically remote approvals on mobile phone **Official Response from Dudley Cartwright:** > Hi Hans, Thank you for taking the time to review Soterion, your feedback is valuable to us. ## Soterion Discussions - [What is Soterion used for?](https://www.g2.com/discussions/what-is-soterion-used-for) - [View Soterion pricing details and edition comparison](https://www.g2.com/products/soterion/reviews?section=pricing&secure%5Bexpires_at%5D=2026-05-28+11%3A30%3A07+-0500&secure%5Bsession_id%5D=c926d476-8a3e-4276-929e-5d6eae173efe&secure%5Btoken%5D=d7299870e8fe6b17be7563bc4fcd08ffa9dd599cf81b091c725d9af76a4f6048&format=llm_user) ## Soterion Features **Generative AI** - AI Text Generation **Monitoring - IT Risk Management** - AI Monitoring **Agentic AI - IT Risk Management** - Autonomous Task Execution - Multi-step Planning ## Top Soterion Alternatives - [Optro](https://www.g2.com/products/optro/reviews) - 4.6/5.0 (1,584 reviews) - [Vendor Risk](https://www.g2.com/products/vendor-risk/reviews) - 4.5/5.0 (706 reviews) - [Sprinto](https://www.g2.com/products/sprinto-inc/reviews) - 4.8/5.0 (1,624 reviews)