SAP Migration Tools Intel

🔧 Technical Conversion

cbs

cbs Corporate Business Solutions is a German SAP consultancy whose in-house Enterprise Transformer (ET) tool automates selective data/process transformation and brownfield conversion to S/4HANA, positioning cbs among the established technical-conversion specialists alongside SNP.

Press releases (last 10 days): None found in the September 12–22 window.

New product developments: ET is marketed as cutting project duration up to 35% via selective transformation with near-zero-downtime cutover. cbs is sponsoring the SAP Transformation Excellence Summit 2026 in Berlin, framing discussion around the "Agentic Enterprise," though this is conference positioning rather than a shipped feature.

Mig Now

MIGNOW (Brazil-based) sells an automated tool for converting SAP ECC to S/4HANA, including bulk ABAP/custom-code conversion, positioning itself as a faster alternative to manual conversion projects and RPA-based tools.

Press releases (last 10 days): None found in the September 12–22 window.

New product developments: MIGNOW runs a four-phase lifecycle (Prepare & Explore, Realise, Deploy, Run) that automates conversion activities apart from workshops, training, UAT, and management decisions; it lists 95–98% automated conversion of ABAP and custom code, per its SAP Store listing.

How it uses AI: MIGNOW distinguishes its approach from RPA by using machine learning models that are retrained on each project's code and data patterns — the vendor states the conversion engine "learns from each project," incrementally improving precision on subsequent ABAP/data conversions rather than applying static rule scripts.

SNP

SNP's Kyano CrystalBridge is a long-established software platform for SAP-to-SAP selective data migration and system conversion, built on 30+ years of predefined transformation objects and project templates; recent large deployments include IBM (150,000 users, 175 countries) and Sun Chemical.

Press releases (last 10 days): None found in the September 12–22 window. Most recent notable item outside the window: SNP's Sun Chemical/RISE with SAP announcement (Feb 17, 2026).

New product developments: At its Transformation World 2026 event (July), SNP launched Kyano Lorna and Kyano Oros, and formed a joint venture, Oros Data LLC, with Structify, plus a strategic AI partnership with Palantir.

How it uses AI: Kyano Lorna is described as an "agentic AI layer" that actively guides customers through transformation steps during a project, while Kyano Oros applies AI-based extraction to process unstructured enterprise data (e.g., in M&A data consolidation) that CrystalBridge's structured-data engine can't otherwise ingest — developed jointly with Structify under the Oros Data LLC venture.

🔧 Data Migration

Data Migration International

Data Migration International (DMI), a Swiss firm marking its 30th year in 2026, makes the JiVS IMP platform, which builds a governed enterprise data layer unifying live, historical, and archived data across SAP and non-SAP systems for migration, legacy-system retirement, and Clean Core readiness.

Press releases (last 10 days): None found in the September 12–22 window.

New product developments: DMI ran a Hackathon 2026 (winners included Cyber Salad, Strike, Inspect, and 089ers across AWS- and DMI-specific challenges), and has been publicly framing "Clean Core and Agentic AI" as interrelated themes in trade press (E3 Magazine, TechFinitive, March 2026).

How it uses AI: AI came up only as a conference/thought-leadership topic ("Clean Core and Agentic AI are interrelated") rather than a documented product mechanism in JiVS itself — no specific AI feature or process could be confirmed from available sources, so this should be treated as marketing positioning, not a verified capability.

Syniti

Syniti, acquired by Capgemini in December 2024, makes SAP Advanced Data Migration and Management (ADMM), an SAP Solution Extension for data migration/management used to deliver "Boring Go-Live" SAP transitions; it reports 99.7% customer satisfaction on its migration engagements.

Press releases (last 10 days): None found in the September 12–22 window. Most recent notable item outside the window: Capgemini/Syniti's Syensqo multi-year data transformation engagement (June 3, 2026).

New product developments: Syniti published an updated "Ultimate SAP Data Migration Checklist for 2026", continuing to position ADMM around fixed-scope, on-time/on-budget SAP data migrations post-acquisition by Capgemini.

🔧 Data Management

Prospecta

Prospecta's MDO is an AI-driven, multi-domain master data management platform used to govern supplier, material, and asset data across SAP and connected enterprise systems for Fortune 500 customers.

Press releases (last 10 days): None found in the September 12–22 window. Most recent notable item outside the window: MDO's Coupa Total Spend Management Platform Ready certification (August 2026).

New product developments: Prospecta extended MDO governance into SAP Business Data Cloud, using zero-copy integration with SAP Datasphere and Databricks to publish governed master data into the SAP BDC catalog for SAP Analytics Cloud and Joule.

How it uses AI: MDO's AI layer, "KAI," acts as an automated data steward; concretely, Prospecta built two-way integration between its MDO Fuse connector and SAP Joule (via SAP BTP Cloud Integration/OAuth) so that Joule queries governed, validated master-data records instead of raw, unvalidated ones — i.e., the AI mechanism is enforcing a governance/validation gate in front of an SAP AI assistant, not just tagging records "AI-powered."

Syniti

See Syniti's full write-up under Data Migration above — its ADMM offering also covers ongoing SAP master/data management, not just one-time migration.

LeverX

LeverX is an SAP partner offering the DataLark data management platform plus broader SAP S/4HANA, BTP, and supply-chain implementation services; recent customer wins include Oliva Cigar Co.'s move to S/4HANA Cloud Public Edition (June 2026).

Press releases (last 10 days): None found in the September 12–22 window.

New product developments: LeverX is showcasing data-management and S/4HANA expertise at SAP Sapphire Madrid 2026 and SAP Connect Day UAE 2026, and published an "AI at the Core: SAP Business Suite — 2026 and Beyond" commentary piece, but no specific DataLark product AI mechanism could be confirmed from available sources.

🔧 Custom Code Management

MIGNOW

Same vendor as "Mig Now" above (Technical Conversion) — see that entry for MIGNOW's full ABAP/custom-code conversion and AI coverage.

smartShift

smartShift is a longtime leader in SAP custom-code lifecycle management, combining large-scale automation with AI to remediate ABAP code and cut technical debt ahead of S/4HANA/Clean Core moves, delivered under fixed-price, fixed-timeline engagements.

Press releases (last 10 days): None found in the September 12–22 window.

New product developments: smartShift maintains a library of 250+ transformation rules for analyzing and remediating custom ABAP at scale, and has argued in its own blog that generic "AI developer assist" coding tools are insufficient for enterprise-wide custom-code lifecycle governance — positioning against point-solution AI coding assistants.

How it uses AI: smartShift applies LLM-based agentic AI to automate analysis of legacy custom code, mapping it against its rule library to identify segments eligible for "Revert to Standard" (replacing custom ABAP with native SAP functionality) rather than just flagging generic code smells; this Revert-to-Standard capability was first announced in a 2025 release and remains a core differentiator in 2026 messaging.

Panaya

Panaya provides change impact analysis and test automation for SAP and other enterprise apps, and has expanded into agentic custom-code correction; it recently rebranded its positioning around "Test What Matters" for autonomous-enterprise testing.

Press releases (last 10 days): None found in the September 12–22 window. Most recent notable item outside the window: Panaya's Agentic Code Correction GA announcement (Aug 4, 2026) and its "Test What Matters" strategic relaunch (Sept 9, 2026).

New product developments: Panaya's Code Correction suite unifies pre-conversion impact analysis, compatibility checks, automated cleansing, and mass fixes that the vendor says resolve 90% of routine ABAP issues automatically, delivering an execution-ready remediation plan within 12 hours.

How it uses AI: For the remaining ~10% of complex cases, Panaya's Agentic Code Correction combines an LLM agent with SAP domain rules and enterprise-wide system context to fix code, generate plain-language explanations of legacy logic, and advise on Clean Core alignment — run with human-in-the-loop sign-off rather than fully autonomous commits.

🔧 Testing

Tricentis

Tricentis is a market-leading continuous testing vendor and SAP partner, offering "SAP Enterprise Continuous Testing by Tricentis" as an official SAP Solution Extension for test automation across SAP landscapes.

Press releases (last 10 days): Yes — on September 14, 2026, Tricentis announced a new office opening, its second location in the Middle East, expanding regional support for enterprise customers.

New product developments: Tricentis is running Tricentis Transform 2026 in Singapore (Sept 16–17, within this window) and, earlier in 2026, released Agentic AI Testing for SAP Business Transformation (May 19, 2026) as part of its SAP Solution Extension.

How it uses AI: The SAP-integrated product uses AI to auto-generate test cases from SAP transport/change data — i.e., it inspects what changed in a transformation and generates corresponding automated test scripts, rather than requiring testers to author them manually, reducing the manual test-authoring bottleneck in continuous SAP release cycles.

🔧 Automation Platform

Redwood

Redwood Software's RunMyJobs is a SaaS job-scheduling and business-process orchestration platform widely used in SAP landscapes (including RISE with SAP), named a Leader for the third straight year in the 2026 Gartner Magic Quadrant for Service Orchestration and Automation Platforms.

Press releases (last 10 days): None found in the September 12–22 window. Most recent notable item outside the window: Gartner MQ Leader recognition and RunMyJobs 2026.3 release (Aug 27, 2026).

New product developments: RunMyJobs 2026.3 added native AWS connectivity and brought a Model Context Protocol (MCP) server to general availability; Redwood also added RunMyJobs "actions" in the SAP Business Accelerator Hub so business users can embed automated jobs into SAP Build workflows with human-in-the-loop controls, plus deeper SAP Cloud ALM/Dynatrace/Splunk/New Relic observability integrations.

How it uses AI: Redwood's new MCP server exposes RunMyJobs' automation actions in a standard protocol that AI agents (e.g., in SAP Build or third-party agent frameworks) can call directly to trigger or query jobs; separately, "Redwood Insights" applies AI to automation execution telemetry to surface anomalies and underused automations across the estate (Redwood's own research cites 61% of enterprise automation as underutilized).

Tern

Unverifiable/ambiguous name — flag for manual double-check. "Tern" does not map cleanly to one company. Candidates found: (1) KTern.AI, an SAP Spotlight Partner running an agentic "Digital Agent Space" platform (20+ specialized agents on Amazon Bedrock AgentCore) for SAP migration/modernization — the closest fit to this roster's SAP-automation category; (2) tern.sh, a general-purpose AI code-migration startup (Python/React/Django upgrades) with no SAP focus; (3) Tern, an unrelated travel-industry back-office platform; (4) TERN, an unrelated GPS-alternative hardware company. Re-verifying this week's research did not resolve the ambiguity further than last week's edition did.

Assuming KTern.AI is intended: it offers a Digital Transformation as a Service (DXaaS) platform for SAP S/4HANA migration and modernization, and was featured in an AWS case study (July 2026) on deploying 20+ specialized agents on Bedrock AgentCore for tasks like reverse engineering, fit-to-standard analysis, custom code analysis, and test-case generation. No KTern.AI press release found in the September 12–22 window.

How it uses AI (if KTern.AI): Its Digital Agent Space runs discrete, purpose-built agents (powered by what KTern calls "Jupiter R1") for specific SAP transformation tasks — e.g., one agent mines exceptions in finance/sales process data, another generates test cases, another performs custom-code analysis — orchestrated as a multi-agent pipeline on AWS Bedrock AgentCore rather than a single general chatbot layered on top of the platform.

🔧 Security

onapsis

Onapsis is the leading dedicated SAP cybersecurity/vulnerability-management platform, best known for its monthly SAP Security Patch Day research and threat intelligence feeding SAP's own advisories.

Press releases (last 10 days): None found in the September 12–22 window. Most recent notable item outside the window: Onapsis's September 2026 SAP Patch Day analysis (Sept 8, 2026), covering CVE-2026-44756 ("OVERPASS"), a maximum-severity SAP Kernel buffer-overflow vulnerability Onapsis researchers reported, which could let unprivileged attackers gain admin-level command execution.

New product developments: No specific new Onapsis product release was found in current research beyond its recurring patch-day vulnerability research and webinar series; no AI-specific mechanism was confirmed for its platform, so that section is omitted here.

zscaler

Zscaler's Zero Trust Exchange includes Zscaler Private Access (ZPA) for SAP, natively integrated within RISE with SAP to give zero-trust access to on-prem/cloud SAP workloads without traditional VPNs.

Press releases (last 10 days): None found in the September 12–22 window. Most recent notable items outside the window: Zscaler's Q4/FY26 earnings release (Sept 3, 2026) and its 2026 Google Cloud Partner of the Year (Security) award (April 21, 2026).

New product developments: ZPA for SAP continues to be positioned as the zero-trust on-ramp for RISE with SAP cloud migrations, replacing VPN-based access; Zscaler's FY26 earnings call emphasized AI as a growth driver, but no SAP-specific AI mechanism beyond general "AI-driven threat prevention" marketing language could be confirmed, so no AI section is included here.

🔧 Technical Conversion

cbs (Corporate Business Solutions)

German SAP consultancy whose ET Enterprise Transformer is standard software for selective S/4HANA transitions, carve-outs, and post-merger consolidation, built on three decades of project experience and the M-cbs methodology. A founding member of the Selective Data Transition Engagement Group, cbs pairs the software with its own end-to-end functional and technical consulting.

Press releases (last 10 days): None found in the September 6–16 window. cbs's own news page shows nothing more recent than August 2026 items on data transition and governance.

New product developments: No change from prior coverage — cbs continues positioning ET and its Transformation Platform toward the "Agentic Enterprise," which it plans to showcase at the SAP Transformation Excellence Summit (Berlin, October 13–15, 2026). ET remains listed on AWS Marketplace.

How it uses AI: cbs's public AI messaging remains directional rather than mechanistic — clean, harmonized data is framed as the precondition for agentic AI rather than a described capability inside ET itself. No confirmable AI mechanism in the transformation engine has surfaced; treat "AI-driven transformation" language as positioning.

Mig Now (MIGNOW)

São Paulo–founded (2019), SAP-certified vendor whose MIGNOW platform automates ECC-to-S/4HANA conversion for on-premise, hosted, private cloud, and RISE, claiming 95–98% automated conversion of ABAP and custom code and 4–5x faster project runs across 130+ clients.

Press releases (last 10 days): None found in the September 6–16 window. Outside that window, MIGNOW's U.S. market entry via a Miami hub remains its most recent major corporate announcement.

New product developments: No new items since last week — distribution continues to expand through the SEIDOR partnership (branded "MoveUP by MIGNOW"), SOA People, 2BM, and the SoftwareOne marketplace, alongside co-development ties with SAP, AWS, and Intel.

How it uses AI: MIGNOW differentiates on machine learning rather than RPA: models trained on prior conversions classify and rewrite ABAP statements against S/4HANA simplification rules, proposing target code rather than replaying recorded steps. The 95–98% figure is a vendor claim; the model architecture itself is not publicly documented.

SNP

Heidelberg-based SNP SE is the reference vendor for selective data transition, known for the BLUEFIELD approach and the CrystalBridge analysis-and-transformation engine, now part of the broader Kyano platform used by 3,000+ customers in 80+ countries.

Press releases (last 10 days): None found in the September 6–16 window on SNP's news page. Outside that window: SNP's July 2026 half-year report cited 19% EBIT growth to €14.8 million and its strongest-ever second quarter.

New product developments: No new items this week. Recent named engagements on Kyano remain Northrop Grumman, TE Connectivity, and Sun Chemical (with Accenture) — all RISE-linked, reinforcing the consolidation of CrystalBridge under the Kyano brand.

How it uses AI: Kyano Lorna (launched July 2026) is an agentic layer embedded inside a live transformation project: it scans system data to flag risks early, generates transformation rules, accelerates root-cause analysis on failed migration runs, and assists data verification, grounding its reasoning in SNP's accumulated migration rule base rather than acting as a generic chatbot. SNP states customer data is not used to train LLMs.

🔧 Data Migration

Data Migration International

Kreuzlingen, Switzerland–based specialist with 27+ years in data management, application retirement, and migration. Its JiVS Information Management Platform (IMP) separates historical data and documents from the operational system ahead of an S/4HANA move, claiming up to 80% lower operating costs and up to 50% less migration effort while keeping legacy records compliantly accessible.

Press releases (last 10 days): None found in the September 6–16 window per the JiVS press page. Outside that window: JiVS announced its Hackathon 2026 winners in August, with Cyber Salad named Ultimate Hackathon Winner.

New product developments: No new items this week. The platform continues to be repositioned toward AI readiness — a governed enterprise data layer unifying operational, historical, archived, and document data across SAP and non-SAP systems, pitched against the gap between organizations pursuing AI deployment and those with fragmented data.

How it uses AI: DMI's AI story remains about being an input to AI — supplying a clean, governed historical data layer for downstream models — rather than AI operating inside the migration engine itself. No confirmable AI mechanism within JiVS IMP surfaced in this run.

Syniti

Now part of Capgemini (acquisition closed December 2024), Syniti supplies the SAP Integrated Toolchain — Syniti Migrate, Data Quality, and Master Data Management — and is the data-migration toolset embedded in many large SAP programs (1,200+ data specialists post-acquisition).

Press releases (last 10 days): None found in the September 6–16 window. Outside that window, the most recent notable item remains Syensqo selecting Syniti (June 3, 2026) for a multi-year data transformation supporting an S/4HANA greenfield migration and consolidation of multiple SAP and non-SAP systems.

New product developments: No new product news this week; integration into Capgemini's delivery model continues, with the Syensqo engagement still the clearest proof point of the combined services-plus-software play.

How it uses AI: Syniti markets "knowledge-based" migration — a reusable repository of mappings, rules, and remediation logic accumulated across thousands of prior migrations, with ML suggesting field mappings and flagging data-quality defects rather than requiring analysts to derive them from scratch. The learning loop is documented; specific model details are not published.

🔧 Data Management

Prospecta

Bootstrapped MDM vendor whose SAP-certified Master Data Online (MDO) governs Material Master, Business Partner, Enterprise Asset Management, Finance, and Reference Data, competing directly with SAP Master Data Governance and strongest in asset-intensive industries.

Press releases (last 10 days): None found in the September 6–16 window. Outside that window: on August 6, 2026 MDO achieved Coupa Total Spend Management Platform Ready certification and went live on the Coupa App Marketplace.

New product developments: No new items this week. Prospecta's extension of MDO governance into SAP Business Data Cloud (zero-copy architecture connecting to Datasphere and Databricks, publishing governed data for consumption by SAP Analytics Cloud and Joule) and the March 2026 Cyient distribution partnership remain the most recent platform moves.

How it uses AI: The confirmable mechanism is in data onboarding and cleansing — MDO applies ML-based matching and classification to deduplicate and normalize incoming material and vendor records against governed taxonomies, then routes exceptions through workflow rather than auto-committing them. Broader "AI-driven governance" claims lack published mechanism detail.

Syniti

Also listed under Data Migration above, where the full write-up appears. On the data-management side, Syniti's Data Quality and MDM modules extend the same knowledge repository from one-time migration into ongoing stewardship.

LeverX

SAP partner and systems integrator whose DataLark is a zero-coding, SAP-centric data management platform for migration and integration on-premise and in the cloud, available on the SAP Store.

Press releases (last 10 days): None found in the September 6–16 window. Outside that window: LeverX achieved Stripe Verified Partner status, extending its footprint into enterprise financial infrastructure alongside its SAP work.

New product developments: No new items this week. DataLark's public 2026 forecast from VP Eric Stajda — framing 2026 as the year SAP migrations shift to fully automated, AI-assisted pipelines — remains the vendor's core narrative, alongside continued SAP Sapphire (Orlando/Madrid) presence earlier in the year.

How it uses AI: DataLark's stated application is automating mapping, cleansing, and validation early in the migration pipeline so defects surface before load rather than after. Beyond that, LeverX's AI messaging is largely forward-looking commentary about where the market is heading rather than a documented mechanism shipping in the product today.

🔧 Custom Code Management

MIGNOW

Covered in full under Technical Conversion above. Its custom-code relevance is the claimed 95–98% automated ABAP remediation, which overlaps directly with the smartShift and Panaya value proposition.

smartShift

smartShift Technologies is the incumbent in automated ABAP transformation, selling fixed-price, fixed-timeline custom code remediation for S/4HANA moves with claimed 99.99% accuracy, having completed 3,300+ transformations touching 3.5 billion lines of code.

Press releases (last 10 days): None found in the September 6–16 window; recent output continues to be thought leadership and event presence rather than formal releases.

New product developments: smartShift will exhibit (booth 206) at SAP for Utilities 2026, presented by ASUG in San Antonio (October 6–9), discussing Clean Core risk and its AI-supported Intelligent Automation. The reference case remains Kimberly-Clark: 5.8 million lines of ABAP analyzed in hours and 305,000+ coding issues resolved in six weeks.

How it uses AI: smartShift extracts the customer codebase and parses it into a language-independent meta-model, then applies thousands of AI-driven rules against that abstraction to rewrite logic — transforming semantics rather than pattern-matching text, which is what supports the deterministic accuracy and fixed-price guarantees.

Panaya

Panaya combines change-impact intelligence with testing for SAP, CRM, and other enterprise apps, telling teams which objects a change will actually break and which tests must run — a different angle from smartShift's bulk-remediation approach.

Press releases (last 10 days): Yes — on September 9, 2026 Panaya announced a sharpened strategic focus on autonomous enterprise testing, launching a new website, narrative, and visual identity under "Test What Matters," positioning the company as one native platform spanning test management, test automation, change-impact analysis, and custom code correction.

New product developments: The rebrand follows August 2026's general availability of Agentic Code Correction within the SAP Code Correction suite, and January 2026's launch of Seemore, an agentic layer spanning the change lifecycle from requirements through deployment.

How it uses AI: Two distinct mechanisms. Agentic Code Correction combines an LLM-based agent with Panaya's SAP domain rules and the customer's own system context to resolve complex ABAP objects, explain legacy code in plain language, and advise on Clean Core alignment, delivering an execution-ready remediation plan in roughly 12 hours. Separately, self-healing test automation autonomously analyzes the application, detects structural UI changes, and generates context-aware adaptive locators — claimed to cut automation maintenance effort up to 85% — while Seemore learns each customer's business processes to recommend test scope.

🔧 Testing

Tricentis

The dominant enterprise test automation vendor for SAP, via Tosca and the jointly developed SAP Enterprise Continuous Testing by Tricentis. Its model-based, codeless approach decouples test logic from UI implementation, which is what makes it durable across S/4HANA upgrades.

Press releases (last 10 days): Tricentis Transform Singapore opens today and tomorrow (September 16–17, 2026) at Marina Bay Sands, the second stop of the expanded three-city 2026 Transform series, continuing the Customer Innovation Awards program into Asia Pacific and Japan. No standalone press release dated inside the window was confirmed beyond event coverage; the Americas awards announcement (Transform Dallas) fell on September 1, now just outside the 10-day window.

New product developments: At Transform Dallas, Tricentis Labs introduced Aida, AgentScore, and Release Risk Intelligence. The Tosca Cloud September 2026 release adds local group creation for role- and workspace-access management alongside SSO-synced groups, plus a Configurations tab that replaces manual entry of playlist characteristics with selectable values. Transform London follows October 21–22.

How it uses AI: Aida is an agent that autonomously crawls web and Windows desktop applications, surfacing defects and coverage gaps without any pre-existing test suite, script, or setup. Separately, Tosca's long-standing Vision AI visually recognizes UI controls via CNNs so tests self-heal when SAP screens change during a conversion, rather than failing on a stale technical ID. AgentScore extends measurement to the quality of AI agents themselves.

🔧 Automation Platform

Redwood

Redwood Software's RunMyJobs is the workload automation and job orchestration layer for SAP estates — the only such platform in the RISE with SAP reference architecture through managed services, an SAP Endorsed App with Spotlight status on SAP Store, with connectors for S/4HANA, RISE, BTP, and Business Data Cloud.

Press releases (last 10 days): None found in the September 6–16 window per Redwood's newsroom. Outside that window, on August 27, 2026, Redwood was named a Leader in the 2026 Gartner Magic Quadrant for Service Orchestration and Automation Platforms for the third consecutive year.

New product developments: No new items this week. Redwood's 2026 additions — MCP and Agent2Agent (A2A) protocol support, the Operations Agent / Workflow Builder / Agent Studio trio, the RangerAI assistant portfolio, and Redwood Insights Premium for observability — remain the current platform state.

How it uses AI: Redwood makes its existing automation estate callable by external AI agents rather than embedding a model in the scheduler itself — MCP and A2A support let agents query job status, trigger workflows, or diagnose failures through a governed interface, validated against Microsoft Copilot, SAP Joule, and Claude Code. Operations Agent applies models to job telemetry for failure triage; Workflow Builder generates orchestration definitions from natural-language intent.

Tern

Verification needed. The only credible match remains Tern (tern.sh), a general-purpose AI code-migration startup (Python, React, Django upgrades, design-system moves, auth-service replacements) with no SAP-specific positioning found this run either. Other "Tern" search results continue to be an unrelated travel-business platform (tern.travel) and an open-source Postgres migration tool. If the intended vendor is KTern.AI, an agentic AI platform explicitly built for SAP assessments, conversions, upgrades, and custom code adaptation, the roster entry should be corrected.

Press releases (last 10 days): None found for any Tern candidate in the September 6–16 window.

New product developments: No new items surfaced this week beyond Tern.sh's ongoing "search, transform, test, ship" messaging around AI-generated code migrations; it remains a non-SAP tool.

How it uses AI: Tern's agent reads the codebase, parses documentation, resolves dependencies, and identifies breaking changes to produce a self-implementing plan, then executes each task with a mix of codemods, tuned LLM prompts, and migration-specific scripts. The design premise is trust-building: an AI that changes 500 files overnight leaves an unreviewable diff, so the workflow sequences changes for human verification.

🔧 Security

onapsis

Onapsis is the category leader in SAP application-layer security — vulnerability management, code scanning, threat detection, and compliance for ECC, S/4HANA, BTP, and RISE — backed by Onapsis Research Labs, which discloses a large share of publicly known SAP vulnerabilities.

Press releases (last 10 days): Yes — SAP's September 8, 2026 Security Patch Day delivered 19 new Security Notes (plus one update), with four rated critical, five high, ten medium, and one low. The headline item is OVERPASS (CVE-2026-44756, CVSS 10.0), a maximum-severity, pre-authentication memory-corruption flaw in the SAP kernel's Extended Passport processing that Onapsis Research Labs discovered and disclosed jointly with SAP, alongside a second pre-auth kernel flaw, CVE-2026-58240.

New product developments: Just before the window, at CrowdStrike Fal.Con 2026 (August 31–September 3), Onapsis expanded its CrowdStrike partnership, integrating Onapsis Assess with Falcon Exposure Management to bring SAP vulnerability, misconfiguration, and custom-code telemetry into CrowdStrike's unified exposure model. The Onapsis Agentic Gateway, introduced earlier in 2026, remains the company's flagship "Agentic AI for SAP Cybersecurity" category play.

How it uses AI: Agentic Gateway is a translation layer, not a chatbot — it exposes SAP security and compliance telemetry to external autonomous agents (corporate AI platforms, SOC command centers, business agents) so they can query posture in natural language and act on it, on the premise that SAP telemetry (transaction codes, authorization objects, RFC destinations) is too specialized for general-purpose agents to interpret unassisted. The OVERPASS discovery itself was research- and signature-driven, not model-generated, but Onapsis is now explicitly tracking autonomous AI exploit chains against SAP as a threat category.

zscaler

Zscaler (NASDAQ: ZS) secures the network path for SAP migrations. Zscaler Private Access for SAP is natively integrated into RISE with SAP, provisioning zero-trust connectors inside the RISE environment so customers can retire VPNs and firewalls when moving on-premise ERP workloads to the cloud.

Press releases (last 10 days): None found in the September 6–16 window. Just outside it, on September 3, 2026 Zscaler reported Q4/full-year FY2026 results (ARR up 25% year over year to $3,771 million), and on September 1 announced a restructuring cutting roughly 3% of headcount. Zscaler presented at three investor conferences (Citi, Wolfe Research, Goldman Sachs) on September 9 but issued no accompanying press release.

New product developments: The FY2026 results call added a fourth platform pillar, Agentic SecOps, alongside Zero Trust Everywhere, AI Security, and Data Security; AI Security bookings exceeded $100 million over the trailing 12 months with 50% sequential growth in Q4. FY2026 acquisitions (Red Canary, SPLXAI, SquareX Holdings) continue to be integrated.

How it uses AI: Two mechanisms are identifiable. SPLXAI brings AI red-teaming — automated adversarial probing of LLM applications for prompt injection and data leakage — while Red Canary contributes managed detection and response with automated alert triage. Agentic SecOps applies agents to correlate signals and execute remediation without an analyst in the loop; detailed architecture is not yet published, and none of this is SAP-specific — the AI operates at the network and access layer regardless of the application behind it.