IBS Schreiber GmbH

What IBS Schreiber GmbH does

IBS Schreiber GmbH is a Hamburg-based German limited liability company (GmbH) founded in 2004 (some firmographic sources cite 1979) that operates as a specialist in SAP security and compliance for the DACH market. Its core product is the CheckAud\u00ae GRC software platform \u2014 an audit and authorization analysis tool backed by 2,700+ predefined, Wirtschaftspr\u00fcfer-certified risk rule sets updated semi-annually against the SAP Simplification List and Fiori Apps Library under the IDW PS 880 standard. The platform is complemented by Easy Content Solution (ECS), which imports certified rule catalogs into third-party IDM/GRC systems (One Identity Manager 9.3, Xiting\u2019s XAMS), and by the CheckScan\u00ae ABAP/HANA-DB scanning add-on. The 2026.1 release added a dedicated S/4HANA migration project analysis tree and platform modernization to SAP NCo 3.1.7 and PostgreSQL 14.23.

The company monetizes through a hybrid model: subscription-based software licensing for the CheckAud/ECS/CheckScan stack, professional services (authorization audits, S/4HANA compliance packs, authorization stress tests, mitigation engagements), two proprietary certification programs (CASA \u2013 Certified Auditor for SAP Applications, and FIRST), and event revenue from the annual IBS Security Convention (ICon) in Hamburg. Public price points include the CASA exam (\u20ac490 + VAT, \u20ac400 for ISACA members), CASA preparation training (\u20ac390 + VAT), and ICon tickets (\u20ac599 + VAT). Customer evidence shows 220+ enterprise customers including Mercedes-Benz Group, Caterpillar, REWE Group, Tengelmann, HUK-Coburg, JOST-Werke, and toom \u2014 concentrated in regulated, SAP-intensive industries (manufacturing, retail, insurance, automotive).

Go-to-market is enterprise-focused, executed via direct sales (website inquiry, phone, email), a Partnerhub and customer portal, and a DACH partner ecosystem covering technology (One Identity, SAP SE), implementation/consulting (IBsolution, RealCore Group, RELACON Security, iC Consult), and professional standards (ISACA Germany Chapter for CASA). Thought-leadership demand generation runs through the ICon conference, webinars, a German-language SAP Security newsletter, whitepapers, and a customer/partner speaker circuit at events such as ICon 2026 and DSAG. The firm is led by co-managing directors Sebastian Schreiber and Christopher Niekamp, operates with 11\u201350 employees, and is funded entirely by founders/management with no disclosed external investors, M&A, or restructuring events.

Name

IBS Schreiber GmbH

Legal name

IBS Schreiber GmbH

Website

https://ibs-schreiber.de

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

11–50 employees

Short description

IBS Schreiber GmbH is a Hamburg-based specialist that develops the CheckAud\u00ae GRC software platform and provides SAP security audit consulting to DACH enterprises, serving 220+ customers such as Mercedes-Benz, Caterpillar, and REWE.

Ownership category

akta.pro rank

Headquarters

HQ city

Hamburg

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Revenue model

1. Software Licensing (CheckAud®, ECS, CheckScan®): IBS Schreiber licenses its GRC software products including CheckAud® (audit software), Easy Content Solution (rule framework management), and CheckScan® (scanning). Software licensing provides worldwide, non-exclusive, temporally unlimited usage rights for proprietary business purposes. The license grants access to certified SAP rule framework content.
2. Professional Services - Audit & Consulting: Expert consulting services including authorization analyses, risk workshops, audit preparation, and SAP security assessments. Services are delivered by certified SAP security experts with over 20 years of experience.
3. Training & Certification Programs: CASA (Certified Auditor for SAP Applications) certification program and FIRST (Fundamental Introduction to Reviewing SAP Technologies) certification. Includes preparation courses, training sessions, and certification exams. ISACA members receive discounted pricing.
4. Seminars and Webinars: Educational offerings including seminars on SAP security and business process auditing, live webinars, and expert talks providing SAP and AI expertise. Events include registration and participation fees.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels7 records

Core offering

Insufficient verifiable information is available in the provided input to describe the company's core offerings with grounded evidence.

Product overview

IBS Schreiber GmbH offers a unified GRC software platform centered on CheckAud® and Easy Content Solution (ECS), supplemented by the CheckScan® analysis module. CheckAud® provides over 2,700 predefined, IDW PS 880-certified risk rule sets for audit-compliant SAP authorization review; ECS enables certified compliance catalogs to be imported into third-party GRC and IDM systems (One Identity Manager, XAMS/Xiting). The portfolio also includes professional services (authorization stress testing, S/4HANA migration compliance, consulting), two professional certification programs (CASA and FIRST), and the annual ICon conference. The offering is completed by educational seminars, webinars, and whitepapers covering SAP security and AI topics.

Differentiator

Problem solved

Functional benefit

Brands

• CheckAud®: Audit and compliance software for SAP systems - provides automated permission analysis and documentation for audit-compliant SAP landscapes.
• Easy Content Solution
• CASA – Certified Auditor® for SAP® Applications
• FIRST – Fundamental Introduction to Reviewing SAP® Technologies

Quantifiable outcome

• 220+ customers trust CheckAud® for audit-compliant SAP authorization analysis
• +2 more outcomes

Named customers7 records

Segments4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability2 records

Feature6 records

Partnerships

Eight partnerships are on record, tiered core and minor.

• One IdentitycoreTechnology or Integration · 9 June 2026One Identity was a partner at the ICon 2026 conference, contributing expertise to the SAP security community event. Presented session on 'System-ubergreifende SoD-Prüfung mit den IBS Schreiber-Risikoregelwerken im One Identity Manager'.
• IBsolutioncoreImplementation/ SI/ Consulting Partner · 9 June 2026IBsolution participated as a partner at ICon 2026 and is part of the DSAG speaker team presenting on special SAP security scenarios and modern threat detection.
• RealCore Group GmbHminorImplementation/ SI/ Consulting Partner · 9 June 2026RealCore Group participated as a partner at ICon 2026 and contributed a customer perspective on SAP retail security at the joint session with toom and IBS Schreiber.
• RELACON Security GmbHminorImplementation/ SI/ Consulting Partner · 9 June 2026RELACON Security participated as a partner at ICon 2026, contributing to the SAP security community event.
• iC ConsultcoreStrategic or Co-development Partner · 15 January 2026iC Consult co-presented an on-demand webinar with IBS Schreiber and One Identity demonstrating the integration of certified SAP risk frameworks into One Identity Manager version 9.3 for automated compliance workflows.
• One IdentitycoreTechnology or Integration · 15 January 2026One Identity collaborated with IBS Schreiber and iC Consult on a joint webinar showcasing integration of certified SAP risk frameworks into One Identity Manager 9.3. IBS Schreiber provides certified rule frameworks (Content) for the One Identity Manager platform.
• ISACA Germany Chapter e.V.coreStrategic or Co-development PartnerOfficial certification partner for the CASA (Certified Auditor for SAP Applications) program. ISACA Germany Chapter supports IBS Schreiber's professional SAP auditing certification, providing credibility and professional standards alignment for auditors.
• SAP SEcoreChannel Partner/ Reseller/ DistributorIBS Schreiber is a SAP partner, indicated by the SAP partner logo displayed on the website footer. The company develops products and services specifically for SAP environments.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• SecurityBridge: SecurityBridge provides a SAP-native security platform covering code security, vulnerability management and authorization analytics — directly competing with IBS Schreiber's CheckAud® in the SAP GRC monitoring space.
• Onapsis: Onapsis offers a platform for SAP cybersecurity and compliance automation, including continuous authorization monitoring and audit support — overlapping directly with IBS Schreiber's GRC and authorization management offering.
• Xiting (XAMS): Xiting's XAMS (Authorizations Management Suite) is a direct competitor for SAP authorization lifecycle management and is also a technology integration partner that consumes IBS Schreiber's rule content via Easy Content Solution.

Emerging players

• Soterion: Soterion provides SAP access risk analysis and GRC services, with narrower geographic coverage and a smaller rule content library — competing for the same SAP authorization risk use cases as IBS Schreiber.

Broad incumbents

• SailPoint: SailPoint is a leading identity-governance platform with increasing SAP connectivity; it competes for the same identity, access and compliance budget as IBS Schreiber's GRC and authorization analytics offerings.
• Pathlock: Pathlock offers a broad application access governance platform with deep SAP coverage as well as broader ERP and finance-system controls — competing with IBS Schreiber on enterprise GRC deals, though at a much larger portfolio scope.
• Saviynt: Saviynt delivers cloud-native identity governance and privileged access management with SAP integration — competing in the broader enterprise GRC and SoD (segregation of duties) market adjacent to IBS Schreiber.
• PwC (SAP GRC practice): Big Four advisory firms like PwC run large SAP audit, controls and GRC advisory practices that overlap with IBS Schreiber's consulting services, and frequently license or partner with specialist SAP GRC tooling.
• Deloitte (SAP GRC practice): Deloitte's SAP risk and compliance advisory practice competes for enterprise SAP authorization and GRC consulting mandates, and can bundle proprietary tools as alternatives to best-of-breed vendors like IBS Schreiber.
• SAP (Access Control / GRC): SAP's native Access Control and Process Control GRC products sit inside the SAP estate and compete with CheckAud® for authorization and compliance monitoring budgets; IBS Schreiber also relies on SAP as a channel partner.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IBS Schreiber GmbH