SimpAudit

SimpAudit is SAP audit software that runs segregation of duties (SoD) analysis, user-level security checks, and system-level auditing inside customers' existing SAP systems. It supports SAP ECC, S/4HANA, and RISE environments and is aimed at GRC, audit, and security teams at SAP-running enterprises.

The platform is organized into modules:

• SoD Analysis: prebuilt and customizable SoD matrix, conflict detection, risk scoring by user and role, critical access monitoring, and firefighter ID tracking
• Continuous SAP Security Monitoring
• Audit-Ready Compliance Reporting
• User Access Review
• ITGC Monitoring
• Notifications and Alerts
• Role Auto Correction

According to the company, it sits on top of existing SAP systems without changing how end users work, and the first end-to-end SoD scan can be run within 14 days. Customers can start with one control family and expand. The company states it has 150+ deployments and 2.4M SoD violations remediated, and lists customers such as Indian Oil, TotalEnergies, Lenzing, and International Paper.

Target industries include manufacturing, financial services, energy and oil, FMCG, chemicals, high-tech, telecom, and the public sector. The company also states that it is ISO 27001 certified and was built by SAP security practitioners.