ESNC

ESNC builds security software specifically for SAP environments, an application security niche that generic vulnerability scanners and SIEM tools typically don’t cover well because SAP’s ABAP-based architecture, custom transaction codes, and layered authorization model require SAP-specific expertise to assess. Its ESNC Security Suite scans SAP NetWeaver systems for vulnerabilities and misconfigurations, while its Enterprise Threat Monitor (ETM) provides real-time attack detection for SAP systems, with integrations into general-purpose security tools like Splunk, ArcSight, and QRadar so SAP-specific alerts can flow into an organization’s broader SOC workflow.

ESNC is headquartered near Munich, Germany. The company positions itself around deep SAP security research, claiming its team has identified more SAP vulnerabilities than any other company and stating it works directly with SAP’s internal teams and with CERT-EU on securing EU government SAP systems — a specific, checkable claim, though independent confirmation of the CERT-EU relationship beyond ESNC’s own site was not found.

As a specialized vendor in a narrow but consequential niche (SAP systems typically run an organization’s core financial and operational processes), ESNC’s value depends heavily on organizations actually running SAP and needing security coverage generalist tools can’t provide. Public information on ESNC’s company size, funding, and named enterprise customers is limited, consistent with a small, privately held specialist vendor.