The Onapsis Platform Reviews & Product Details

What I like best about the Onapsis Platform is how it provides clear, actionable visibility into the security and compliance of critical business applications. It brings deep expertise into a single, easy-to-use platform, helping our teams to quickly identify real risks, prioritize what matters most, and respond with confidence. The platform is purpose-built for enterprise systems, which makes its insights highly relevant and practical, ultimately enabling stronger security without disrupting business operations. Review collected by and hosted on G2.com.

While the Onapsis Platform is powerful, some aspects can feel complex at first and may require additional time to fully understand and configure. Certain workflows and reports could be more intuitive, and there are moments where simplifying the user experience or improving documentation would help our teams get value more quickly. These are relatively minor challenges and tend to improve as users become more familiar with the platform Review collected by and hosted on G2.com.

I am very pleased with my Customer Success Manager, Kristen Nendza, who has been with me every step of the way. She remembers exactly where we left off and always recaps the action items. She has great ideas about how to implement solutions and got the appropriate engineers involved in our projects. She even had a group visit and train us in person. She has technical ability as well as the best customer skills to put everyone at ease and still keep on track. She makes it a pleasure to work with The Onapsis Platform. I also like the 'Defend' feature, although I'm just getting started with it. Overall, the Customer Success Manager helps, which is why I would rate it 8 out of 10. Review collected by and hosted on G2.com.

The licensing was complicated for a newbie. I had a hard time finding and applying licenses, however my Customer Success Manager helped me through it. Review collected by and hosted on G2.com.

I really appreciate how user-friendly the dashboards are—they make it super easy to understand what’s happening and quickly spot any issues that need attention. The help center has tons of useful info, and the support team is quick to respond and resolve problems. Additionally, Onapsis does an excellent job of listening to user feedback and making real improvements based on what people request. Review collected by and hosted on G2.com.

We encountered a few challenges while setting up SuccessFactors as an asset, but the support team responded promptly and assisted us in finding a solution. Their quick response truly made a difference. Review collected by and hosted on G2.com.

Onapsis Assess is very useful for:

Authorization analysis (SoD, excessive roles).

Patch compliance (security notes, system hardening).

Clear remediation guidance.

Onapsis Control for Code

Specializes in scanning custom ABAP code.

Identifies vulnerabilities such as:Hardcoded credentials,Missing input validation (e.g., risk of injection attacks) Review collected by and hosted on G2.com.

Control for Code is not integrated with Assess:

Findings cannot be viewed in the same dashboard.

No consolidated reporting across system, patch, and code vulnerabilities.

Difficult to track remediation end-to-end (who owns the fix, when it’s closed).

Limited collaboration between security team (using Assess) and development team (using Control for Code).

Results visibility is fragmented, making it harder to measure overall SAP security posture. Review collected by and hosted on G2.com.

What I like best about the Onapsis Platform is its ability to bridge the gap between InfoSec and SAP operations. It provides deep visibility into vulnerabilities and compliance blindspots, while enabling proactive incident detection and response. The platform’s governance capabilities have helped us standardize issue resolution across teams, which is critical in today’s complex regulatory environment. Onapsis doesn’t just monitor, it empowers us to act decisively and consistently. Review collected by and hosted on G2.com.

Integration with Sentinel for a more streamlined and meaningful incident response. We know new releases are coming in this space. Review collected by and hosted on G2.com.

I like how The Onapsis Platform helps us detect vulnerabilities in our SAP applications with the Assess module and aids in logging and detection with the Defend module. Additionally, I appreciate that code inspection provides details of authorization restrictions. The initial setup was somewhat easy, which was a plus. Review collected by and hosted on G2.com.

HANA logging and log forwarding to Splunk having issues. Review collected by and hosted on G2.com.

Onapsis is a powerful and reliable solution for securing business-critical SAP systems. One of its standout features is real-time threat detection based on customised alerts that a user/org can create based on their needs and use case. Onapsis also allows feature requests and can be integrated with existing CCM platforms. Furthermore, the team at Onapsis is very responsive to any concerns or challenges a user/customer may face. Review collected by and hosted on G2.com.

Implementing Onapsis in the SAP landscape can be a little challenging at times due to the level of integration that goes into it. Review collected by and hosted on G2.com.

Onapsis provides visibility into unpatched vulnerabilities, highly privileged rights, and incorrect configurations. Vulnerabilities can be specifically and measurably addressed, thereby increasing security. The Defend module alerts about behaviors such as unusual RFC calls, IOCs, and zero-days.

The setup of the console and sensors is designed to be simple and requires little technical understanding. The support from Onapsis colleagues during installation simplifies this even further. Review collected by and hosted on G2.com.

Stability of the systems and quality of the updates can still be improved, although this probably also depends on where the systems are hosted (Cloud vs. ESX). Permissions will be designed even more granularly in the future. Review collected by and hosted on G2.com.

- Detects SAP vulnerabilities quickly and accurately.

- Monitors threats in real time to protect critical applications.

- Scans code for security issues, helping ensure compliance and secure development. Review collected by and hosted on G2.com.

- Limited SIEM log details: The logs forwarded to your SIEM system lack comprehensive information, which hinders deeper analysis.

- Rigid integration: Onapsis offers minimal flexibility in how it integrates with other systems.

- Timezone mismatch: The date and time in SIEM logs are shown in a different timezone and cannot be customized, reducing the usefulness of the logs for accurate incident tracking. Review collected by and hosted on G2.com.

Powerful tools and documentation. Great tech support when needed. Auto-updates (never have to go chase down the latest CVEs). Review collected by and hosted on G2.com.

The way they do the licensing by SAP SID can be a little kludgy. Review collected by and hosted on G2.com.