Research Report

Executive Brief: Cloud Architecture for SAP

Executive Summary

Organizations are continuing their transition to the cloud, but the landscape is highly fragmented with most teams in the middle of their migration journeys. The sunset of mainstream maintenance looming in 2027 is shifting priorities from a simple lift-and-shift approach toward a clean-core, modernization-first methodology using platforms like SAP BTP and SAP S/4HANA Cloud.

Access the full report

Key Findings & Landscape Maturity

The survey segments the SAP ecosystem into three distinct architectural maturity tiers:

23%

Cloud Leaders
Predominantly running cloud-native or containerized architectures (Kubernetes/microservices) backed by full enterprise-level architectural governance (72%).

45%

Hybrid Majority
Operating a mix of cloud and on-premise components. Their early focus is heavily centered on deploying integration platforms to bridge environments.

32%

Cloud Beginners
Primarily anchored to on-premise systems with minimal cloud integration and informal, project-specific governance.

A recent SAPinsider report reveals that while organizations are embracing SAP S/4HANA and AI, they are overlooking critical security and compliance issues. Download our Executive Brief to learn how to address these security gaps, protect your mission-critical SAP data, and align your security strategy with business goals.

Datasheets

Executive Threat Overview: Reported SAP Cyber Attack Severely Impacts Business Operations, Compromises Data at Global Manufacturer

Onapsis Research Labs warns of critical SAP vulnerabilities allowing unrestricted remote access, data theft or disruption, bypassing security controls and audit logs.

SAP Security & Compliance Evaluation

Securing Your Future: Preparing for a Successful SAP RISE Transformation

The State of AI, Security and ERP

Hacking & Defending SAP Applications – Live

10 Reasons Why More Companies Choose Onapsis

Research Report

Executive Brief: Cloud Architecture for SAP

Executive Summary

Key Findings & Landscape Maturity

23%

45%

32%

Further Reading

Onapsis Assess: Complete Attack Surface Management for Business-Critical Applications

Onapsis Defend: Threat Monitoring and Pre-Patch Protection for Business-Critical SAP Applications

Onapsis and Mandiant: Latest Intelligence on Critical SAP Zero-Day Vulnerability (CVE-2025-31324)