OWASP Core Business Application Security

As SAP systems manage the most sensitive and mission-critical data for organizations worldwide, they present an appealing target for threat actors. Traditional defenses often overlook the unique challenges in SAP landscapes, such as complex authorization models, a broad attack surface, and proprietary protocols.

The OWASP Core Business Application Security project is dedicated to provide a comprehensive approach to SAP security by focusing on critical aspects of proactive defense and resilience in SAP landscapes. This initiative brings together innovative techniques and tools to address major topics of cyersecurity such as deception, adversary simulations, detection engineering, attack surface management, security posture validation & baseline controls, and technical assessements tailored specifically for SAP environments.