The Onapsis Platform Reviews & Product Details

Onapsis provides a strong platform for monitoring and improving the security of SAP environments. What I find especially useful is the visibility it gives into the security posture of our SAP landscape, along with the ability to identify and prioritize the issues that need attention.

The platform is well suited for security teams that want a clearer understanding of vulnerabilities, misconfigurations, and potential risks across their SAP environment. The information it provides is helpful when investigating findings and deciding where remediation efforts should be focused.

Overall, Onapsis has become a valuable part of our SAP security toolkit. It helps us maintain a clearer picture of risk in an area that can otherwise be difficult to monitor effectively.

Pros: Strong visibility into SAP security, helpful risk prioritization, and a platform that brings different security aspects together. Review collected by and hosted on G2.com.

As with any security platform, there’s a learning curve when you’re first getting familiar with all the available functionality. In a few areas, I’ve also found that it takes some extra investigation to fully understand individual findings and know how best to act on them. Review collected by and hosted on G2.com.

This tool makes my job much easier by helping me manage a large environment with a small team. The support team is also very hands-on and responsive when we need help. On top of that, the API makes it straightforward to integrate with other security products we already use. Review collected by and hosted on G2.com.

Licensing can sometimes feel a bit restrictive, but they’ve worked with us to provide POC licenses and to ensure we’re covered across the various SAP products. Review collected by and hosted on G2.com.

Overall, it’s a user-friendly tool with strong dashboards and reporting. Integrating SAP instances is straightforward, and I like that exceptions are configurable. Account management is easy to handle too, especially with SSO. Support has been great, polite, responsive, and easy to reach. The system also performs well and doesn’t seem to impact the performance of the instances it scans. Review collected by and hosted on G2.com.

It’s a little pricey, and there are lots of different types of licenses to choose from. Review collected by and hosted on G2.com.

What I like most is the seamless integration. We integrated Control for Code into our Rev-Trac approval process, which lets us check our ABAP code for vulnerabilities as part of the workflow without any extra friction. Review collected by and hosted on G2.com.

There isn’t much to dislike about it. The only real drawback might be the price point; otherwise, it’s a great platform overall. Review collected by and hosted on G2.com.

What I like best about the Onapsis Platform is how it provides clear, actionable visibility into the security and compliance of critical business applications. It brings deep expertise into a single, easy-to-use platform, helping our teams to quickly identify real risks, prioritize what matters most, and respond with confidence. The platform is purpose-built for enterprise systems, which makes its insights highly relevant and practical, ultimately enabling stronger security without disrupting business operations. Review collected by and hosted on G2.com.

While the Onapsis Platform is powerful, some aspects can feel complex at first and may require additional time to fully understand and configure. Certain workflows and reports could be more intuitive, and there are moments where simplifying the user experience or improving documentation would help our teams get value more quickly. These are relatively minor challenges and tend to improve as users become more familiar with the platform Review collected by and hosted on G2.com.

I am very pleased with my Customer Success Manager, Kristen Nendza, who has been with me every step of the way. She remembers exactly where we left off and always recaps the action items. She has great ideas about how to implement solutions and got the appropriate engineers involved in our projects. She even had a group visit and train us in person. She has technical ability as well as the best customer skills to put everyone at ease and still keep on track. She makes it a pleasure to work with The Onapsis Platform. I also like the 'Defend' feature, although I'm just getting started with it. Overall, the Customer Success Manager helps, which is why I would rate it 8 out of 10. Review collected by and hosted on G2.com.

The licensing was complicated for a newbie. I had a hard time finding and applying licenses, however my Customer Success Manager helped me through it. Review collected by and hosted on G2.com.

I really appreciate how user-friendly the dashboards are—they make it super easy to understand what’s happening and quickly spot any issues that need attention. The help center has tons of useful info, and the support team is quick to respond and resolve problems. Additionally, Onapsis does an excellent job of listening to user feedback and making real improvements based on what people request. Review collected by and hosted on G2.com.

We encountered a few challenges while setting up SuccessFactors as an asset, but the support team responded promptly and assisted us in finding a solution. Their quick response truly made a difference. Review collected by and hosted on G2.com.

What I like most is that I can customise the security checks in Onapsis to suit my needs. This has helped me gradually reduce more and more false alerts over time. Review collected by and hosted on G2.com.

You have to invest a lot of time to really get to know the tool and feel comfortable using it. Review collected by and hosted on G2.com.

The platform is easy to use and offers comprehensive coverage of SAP systems. It also provides comparative information that shows where your company's security program effectiveness stands relative to industry peers. Review collected by and hosted on G2.com.

Unable to recast vulnerabilities to a higher or lower risk rating. Review collected by and hosted on G2.com.

Onapsis Assess is very useful for:

Authorization analysis (SoD, excessive roles).

Patch compliance (security notes, system hardening).

Clear remediation guidance.

Onapsis Control for Code

Specializes in scanning custom ABAP code.

Identifies vulnerabilities such as: Hardcoded credentials, Missing input validation (e.g., risk of injection attacks) Review collected by and hosted on G2.com.

Control for Code is not integrated with Assess:

Findings cannot be viewed in the same dashboard.

No consolidated reporting across system, patch, and code vulnerabilities.

Difficult to track remediation end-to-end (who owns the fix, when it’s closed).

Limited collaboration between security team (using Assess) and development team (using Control for Code).

Results visibility is fragmented, making it harder to measure overall SAP security posture. Review collected by and hosted on G2.com.