Welcome to SAP Cybersecurity by NO MONKEY – where we make SAP security real, relevant, and actionable.
Hosted by Waseem Ajrab, this podcast breaks down the complexities of SAP cybersecurity into conversations that matter. Whether you're a CISO, SAP admin, SOC analyst, or auditor, we tackle the challenges you face every day: securing critical SAP environments, bridging the gap between security and business, and protecting the digital backbone of global operations.
With over 500,000 SAP customers running critical business processes, securing these systems isn't just an IT issue – it's a business imperative. But SAP security doesn't have to be intimidating or isolated. Through expert interviews and practical insights, we explore:
- Real-world attack vectors and defense strategies
- How to connect SAP security with SOC operations
- Cloud security challenges in SAP BTP environments
- Building effective collaboration between IT Security, SAP teams, and business leaders
- Turning cybersecurity from a cost center into a business enabler
NO MONKEY's approach is simple: People → Process → Technology. We believe security starts with empowering the right people, establishing smart processes, and only then choosing the right tools.
New episodes drop regularly, featuring conversations with cybersecurity experts, SAP practitioners, and industry leaders who've been in the trenches. No vendor pitches. No fluff. Just actionable insights you can apply today.
Because curiosity is free – but recovery isn't.
Endpoint security was built to protect infrastructure, not applications. Joerg from bowbridge explains why files ingested into SAP bypass traditional scanners entirely, how content based attacks compromise the application itself, and what changes once LLMs start reading your documents.
6 Aug 2026
Why a New Generation of Threat Actors Targets SAP
Criminal interest in SAP has risen sharply, and a new generation of threat actors is building skills specifically to target it. Mannie W. from Lab 1 explains what he sees on the dark web and what it means for SAP security teams.
9 Jun 2026
The Death of Traditional SAP Security
Two decades in. Same vulnerabilities. No progress. Frederik Weidemann walks through why traditional SAP security is broken and what organizations need to do instead.
21 Apr 2026
AI and Responsibility: Securing SAP's Digital Core
SAP systems are moving from execution to decision making. Today, AI agents aren't just advising, they're acting autonomously in business processes. In this episode, Waseem sits down with José Marquez to tackle the question most organizations aren't asking: When AI agents make decisions in your SAP environment, who carries the responsibility?
9 Mar 2026
Why SAP Is Still a Goldmine for Attackers
Over 90% of the global top 1000 companies run critical business processes on SAP. Yet security remains a blind spot for most organizations.
Joris van de Vis has spent two decades finding vulnerabilities in SAP systems. Close to 150 zero-day discoveries, all responsibly disclosed. In this episode, he breaks down why the obscurity that used to protect SAP systems doesn't work anymore. Open source tools like Metasploit, PySAP, and Hashcat have leveled the playing field.
The impact when SAP gets breached? Joris points to Jaguar Land Rover. Billions in losses, nearly triggered bankruptcy. The alleged cause? An unpatched SAP vulnerability.
He shares the patterns he sees during penetration tests. Insecure configurations from legacy installations. Missing patches. SAP* users in RFC connections from 20 years ago enabling lateral movement into production.
His newest project? Sapology, an open source scanner for SAP systems.
His advice? Assume breach. Monitor now. Detect early. Respond fast. Because the question isn't if you'll be breached. It's when.
16 Feb 2026
Navigating C‑Level Executives Through SAP Cybersecurity
In this conversation, Christoph Nagy discusses the complexities and challenges of SAP Cyber Risk, emphasizing the importance of continuous security and the need for organizations to bridge the gap between technical teams and C-level executives. He highlights the evolution of SAP security practices, the role of audits, and the necessity of proactive measures in cybersecurity. Christoph also addresses the future of SAP security in the context of AI and cloud technology, urging organizations to take action rather than wait for perfection.
19 Jan 2026
Building Modern SAP SOC
In this episode of SAP Cybersecurity, host Waseem Ajrab engages with Maxim Deweerdt, a seasoned expert in cyber defense and SOC operations. They discuss the complexities of SAP security, the importance of an offensive mindset in building effective SOCs, and the challenges faced in detection and response activities. Maxim shares insights on how to bridge the gap between SAP experts and SOC analysts, emphasizing the need for proactive strategies and clear communication. The conversation also touches on the significance of compliance versus security in SOC operations and the evolving landscape of SAP security.
12 Jan 2026
Uncovering SAP BTP Attack Vectors
In this episode of SAP Cybersecurity, host Waseem Ajrab and guest Julian Petersohn delve into the complexities of SAP security, particularly focusing on the SAP Business Technology Platform (BTP). They discuss the shift from on-premise to cloud environments, the implications for security, and the various attack vectors that arise in this new landscape. The conversation emphasizes the importance of understanding shared responsibilities in cloud security, the significance of proper configuration, and the need for continuous monitoring. They also explore specific attack vectors related to Cloud Foundry and Kyma, and provide actionable recommendations for organizations to enhance their security posture in the BTP environment.
9 Jan 2026
Introduction to SAP Cybersecurity
500,000 SAP customers. 300 million users. One massive security blind spot.
In this first episode, Waseem Ajrab and Jochen Fischer break down why SAP security matters, how the three lines of defense work, and why "hope is not a strategy." Learn NO MONKEY's People → Process → Technology approach to making SAP cybersecurity actionable—not overwhelming.
Key topics: SAP ecosystem, business impact, collaborative security.
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
Spotify
5.0 / 5
5 ratings
Contact SAP Cybersecurity by NO MONKEY
Guest appearances
Books guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of SAP Cybersecurity by NO MONKEY?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
