About the Author
Alex Horan is the Vice President of Product Management for Onapsis, where he focuses on developing solutions for SAP security and ERP vulnerability management. With over 18 years of experience, Alex has a proven track record of helping large companies enhance their security posture. His expertise spans key areas such as vulnerability assessment, penetration testing, and systems auditing, making him a trusted voice on topics like SAP compliance and secure system configuration. He is committed to ensuring that Onapsis’s products provide advanced protection against real-world threats like ransomware and unauthorized access.
View Author Profile
Onapsis Director of Product Management, Alex Horan, had the pleasure of speaking with Security Guy TV host, Chuck Harold, at Black Hat Las Vegas 2019 earlier this month. Alex and Chuck were able to discuss the unique offerings Onapsis can provide your organization, such as continuous monitoring and change assurance. “[People] have a lot to do,” Alex commented, “they have a lot of things running in their environments and understanding them all and knowing exactly what to do for all of them is a hard task.” This is a problem people have “lived with” for so long that they have become immune to it because these systems have been enabled for a long time. People assume they have not had a security issue, which is different from a technical issue, and therefore will never have one. Watch the interview below for the full story!

About the Author
Alex Horan is the Vice President of Product Management for Onapsis, where he focuses on developing solutions for SAP security and ERP vulnerability management. With over 18 years of experience, Alex has a proven track record of helping large companies enhance their security posture. His expertise spans key areas such as vulnerability assessment, penetration testing, and systems auditing, making him a trusted voice on topics like SAP compliance and secure system configuration. He is committed to ensuring that Onapsis’s products provide advanced protection against real-world threats like ransomware and unauthorized access.
View Author Profile
Further Reading
ICM2SHELL (CVE-2026-76964 and CVE-2026-89126): A Critical Pre-Authentication Vulnerability in SAP NetWeaver’s ICM and Web Dispatcher
ICM2SHELL is a memory corruption vulnerability in the way the SAP kernel handles WebSocket traffic. Because that code is shared by the ICM and the SAP Web Dispatcher, both are affected, including the component that usually faces the Internet.
SAP Security Notes: November 2026 Patch Day
Record-breaking numbers of HotNews and High Priority Notes Navigating November’s Historic SAP Security Patch Day – LIVE WEBINARJoin Onapsis to talk through November’s Vulnerabilities.November 12th, 10am ETRegister here Note: This blog contains ongoing coverage. Updates will be posted continuously below as confirmed information becomes available. Highlights of November SAP Security Notes analysis include: SAP has…
PROXYGATE (CVE-2026-89103): A Critical Pre-Authentication Vulnerability in SAP NetWeaver’s Gateway
PROXYGATE is a pre-authentication remote code execution vulnerability in the SAP Gateway.

