TransparencyHub
The Transparency Hub from automatics is the central platform for capturing, analyzing, and visualizing security-relevant SAP system data. It provides a comprehensive overview of the configuration, integrity, and communication paths of your SAP landscape.
Overview of all open and implemented security notes per system
Identification of outdated or faulty certificates including warning mechanisms
Monitoring critical system configurations for compliance violations
Analysis and correlation of audit logs for suspicious patterns
Visualization of active interface connections with security classification
Challenges in SAP operations
Due to their complexity and criticality, SAP systems place high demands on transparent security monitoring:
Confusing system landscapes
Different SAP instances (e.g. ERP, S/4HANA, BW, BTP, RISE) with their own configurations make a consolidated overview difficult.
Manual data collection and consolidation
The collection of security-relevant information such as security notes, certificates or audit logs is often done manually or system-specifically.
Lack of real-time transparency
Deviations in system configurations or safety-critical events are often detected too late because there is no central, continuous monitoring.
Intransparent interface communication
Connections to external systems are not centrally documented or are not regularly checked for security aspects.
Certificate management without overview
Expired or soon-to-expire certificates often go unnoticed and lead to disruptions or security gaps.
TransparencyHub as a solution
With the TransparencyHub, automatics offers a technical solution that supports SAP administrators in providing security and compliance-relevant information across systems in an automated manner:
Central data collection
All security-critical information (e.g. security notes, configurations, certificates, logs, interfaces) is monitored automatically and across systems.
Structured evaluations
Configurations, certificates and logs can be specifically evaluated, versioned and documented for audits.
Notification & ITSM integration
Targeted email notifications based on thresholds, system groups, or risk categories. Additionally, security-relevant events can be directly transferred to ITSM systems such as ServiceNow or Jira Service Management.
Standardized compliance reports
Support in preparing for internal and external audits (e.g. ISO 27001, NIS2, BSI-Grundschutz).
SIEM integration
Security-relevant events and status information can be seamlessly forwarded to existing SIEM systems (e.g., Azure Sentinel, Splunk, IBM QRadar).
SAP SECURITY NOTES AUDIT AND ANALYSIS
Automated analysis and auditing of SAP recommended security notes (e.g. SAP Security Patch Day)
Dashboard of open and embeddable SAP Notes (HotNews, Security, Performance, Legal, Audit)
Display CVE score, details, dependencies and manual tasks
Filter options to focus on critical information (CVE score, priority, component, ...)
Immediate recognition of SAP Notes implemented by LifecycleHub
CERTIFICATE MONITORING AND AUDIT
Proactively and regularly check whether certificates are about to expire or have already expired.
Reading the certificates from all certificate stores (STRUST) of the SAP systems
Notifications when certificates are in a critical state
Display of all relevant information for reissuing and distributing certificates
Central dashboard as a basis for administration in LifecycleHub
SAP SYSTEM CONFIGURATION
AUDIT AND ANALYSIS
Audit security-relevant system configurations and analyze SAP logs – for traceable reports, audit-proof documentation, and rapid response to anomalies.
Auditing of SAP profile parameters against corporate policies and the SAP Security Baseline
Auditing of HANA DB parameters against company guidelines and SAP recommendations (mini checks)
SAP compliance checks (SAP_ALL, system changeability, and much more)
Analysis of critical SAP audit logs and SAP syslogs
SAP INTERFACES MONITORING AND AUDIT
Keep track of all background data transfers – internal and external – and identify security-critical or unwanted connections early on.
Monitoring RFC, IDoc and HTTP data flows
Whitelisting internal communication to reduce irrelevant events
Statistical evaluation of customer-specific extensions (e.g. BAdIs)
Classification, storage and aggregation of all recorded transfers for targeted analyses
