Virtual Forge

What Virtual Forge does

Virtual Forge is a privately held German cybersecurity software company headquartered in Heidelberg, founded in 2006. According to available firmographic data, the company positions itself as a provider of cybersecurity solutions specifically for SAP applications, targeting the niche of securing enterprise SAP environments. With a headcount of 51-100 employees, Virtual Forge operates as a small-to-mid-sized specialist vendor in the European enterprise security market.

The firm's business model is not detailed in the available input data. As a private B2B enterprise software vendor focused on SAP security — a category typically sold via subscription or licensing to large enterprises running SAP ERP systems — the company likely derives revenue from enterprise contracts, but no pricing model, customer segments, contract values, or revenue figures are disclosed in the input aggregation.

Critically, the input data available for Virtual Forge is sparse. The firmographic blocks confirm the company's identity and positioning, but detailed information on products, technology architecture, customer base, partnerships, leadership, funding history, and strategic moves is absent from the Virtual Forge-specific data. The input aggregation contains extensive product, customer, and market data, but this is explicitly attributed to a different company (Onapsis, a US-based SAP cybersecurity platform) and cannot be attributed to Virtual Forge. Investors analyzing Virtual Forge would require supplementary primary-source research on the company's actual product portfolio, customer wins, revenue trajectory, and competitive positioning within the SAP application security market.

Name

Virtual Forge

Legal name

Onapsis

Website

https://virtualforge.com

Company type

Private

Founded year

2006

Operating status

Operating

Headcount range

51–100 employees

Short description

Virtual Forge is a privately held Heidelberg, Germany-based provider of cybersecurity solutions for SAP applications, founded in 2006 and operating with 51-100 employees. The company serves enterprise customers running SAP environments in the European market.

Ownership category

akta.pro rank

Headquarters

HQ city

Heidelberg

HQ country

Germany

HQ region

Europe

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Enterprise Security Platform Subscription: Subscription-based SaaS platform with modules for vulnerability management (Assess), threat detection (Defend), code security (Control), and AI-powered guidance (Security Advisor). Pricing likely enterprise-tier based on customer profiles and deployment scope.

Go-to-market motion1 record

Distribution channels3 records

Marketing channels11 records

Core offering

Virtual Forge is a private cybersecurity software provider specializing in solutions for SAP applications, headquartered in Heidelberg, Germany. The firm focuses on protecting business-critical SAP environments (ERP, supply chain, manufacturing) through vulnerability management, real-time threat detection, code security, and compliance automation tooling. Founded in 2006 and operating with 51-100 employees, it serves enterprise customers running SAP landscapes.

Product overview

Onapsis is a unified SAP cybersecurity platform offering a portfolio of integrated modules. The core platform consists of Assess (vulnerability management), Defend (real-time threat detection and response), Control (SAP transport analysis and code security), and Security Advisor (AI-powered security guidance). Specialized solutions include Onapsis for SAP BTP and Assess for SAP SuccessFactors, complemented by Premium Add-Ons for enhanced protection. The platform is officially a Premium Certified SAP Endorsed App.

Differentiator

Problem solved

Functional benefit

Brands

• Security Advisor: AI-powered SAP security guidance platform providing intelligent recommendations and threat analysis.
• Assess
• Defend
• Control
• Onapsis for SAP BTP
• Assess for SAP Success Factors

Products and services

• SAP Vulnerability Management Module Vulnerability management offering that continuously scans the entire SAP landscape for vulnerabilities, misconfigurations, dangerous interfaces, and user authorizations. Targeted at enterprise security teams responsible for SAP ERP, supply chain, and manufacturing systems.
• SAP Real-Time Threat Detection Module Real-time threat detection and response module providing continuous monitoring and zero-day virtual patching for SAP systems to stop active exploits. Designed for enterprise security operations teams managing SAP environments.
• SAP Code Security and Transport Analysis Module Code security and SAP transport analysis module specializing in scanning custom ABAP code to identify vulnerabilities such as hardcoded credentials and missing input validation. Targeted at SAP development and DevSecOps teams.
• AI-Powered SAP Security Advisor AI-powered SAP security guidance module providing proactive, knowledge-retrieval-based security recommendations and threat analysis to security teams operating SAP environments.
• SAP Business Technology Platform Security Solution Purpose-built security offering for SAP Business Technology Platform (BTP) workloads, extending platform coverage beyond core ERP to cloud-side SAP environments.
• SAP SuccessFactors Security Module Automated security module purpose-built for SAP SuccessFactors HR cloud applications, extending vulnerability and configuration scanning to HR systems.

Quantifiable outcome

• Mandiant M-Trends Report recorded SAP NetWeaver Zero-Day as 2025's most frequently exploited vulnerability, demonstrating critical need for SAP-specific security
• +2 more outcomes

Named customers10 records

Segments11 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability2 records

Feature6 records

Partnerships

Three partnerships are on record, tiered core and flagship.

• SAPcoreStrategic or Co-development PartnerPremium Certified SAP Endorsed App - the only SAP security and compliance platform with official SAP endorsement. Deep technical integration and collaboration with SAP on security research, vulnerability disclosure, and product development. Onapsis Research Labs works directly with SAP on coordinated vulnerability disclosure.
• CISA (Cybersecurity and Infrastructure Security Agency)coreStrategic or Co-development PartnerOnapsis Research Labs works directly with CISA on coordinated vulnerability disclosure for SAP security issues, contributing to national cybersecurity efforts.
• ServiceNowflagshipTechnology or IntegrationIntegration with ServiceNow enables automatic assignment of remediation tickets to appropriate teams and efficient tracking of ticket progress. Streamlines security operations and incident response workflows.

Scale indicators1 record

Recent moves1 record

Expansion highlights1 record

Broad incumbents

• Palo Alto Networks: Large cybersecurity platform with SAP-aware capabilities and a broad enterprise sales motion. Represents incumbent pressure as enterprises consolidate application-layer and infrastructure security buying.
• CrowdStrike: Endpoint and workload security leader extending into application and identity-layer security. Indirect competitive overlap in protecting SAP-running enterprise environments.
• IBM Security: Broad cybersecurity portfolio from a major incumbent that addresses SAP environments as part of wider enterprise security offerings. Provides indirect competitive overlap where SAP customers consolidate to generalist vendors.
• Microsoft Defender / Microsoft Security: Hyperscaler-scale security suite increasingly addressing SAP workloads (especially on Azure/RISE). Competes for security budget in SAP-customer enterprises standardizing on Microsoft ecosystems.
• SAP (Enterprise Threat Detection / SAP Business Technology Platform Security): The underlying platform vendor itself ships native security capabilities (ETD, BTP security, S/4HANA security features). Represents both a partner and a competitive threat as the underlying platform owner bundles security into its offering.
• Rapid7: Vulnerability management and security operations vendor whose generalist platform overlaps with Virtual Forge's vulnerability scanning use cases for SAP systems.
• Check Point Software Technologies: Established network and endpoint security incumbent with enterprise reach into SAP-using organizations. Represents broader-platform competitive pressure on application-layer SAP specialists.

Direct peers

• Pathlock: ERP/SAP access governance and security vendor (formed via combination of ERP-scan and related entities). Competes with Virtual Forge in protecting SAP business-critical applications and audit/SOX controls.
• Onapsis: The leading pure-play SAP cybersecurity platform and the only Premium Certified SAP Endorsed App in cybersecurity. Direct head-to-head competitor to Virtual Forge in vulnerability management, threat detection, code security, and compliance for SAP environments.
• SecurityBridge: SAP-native cybersecurity vendor offering code security, threat detection, and compliance tooling for SAP landscapes. Directly comparable to Virtual Forge in target customer, product category, and SAP-specialist positioning.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat2 records

Key risks5 records

Key highlights4 records

Customer concentration

• Xx.com/virtual_forge
• YouTubeyoutube.com/channel/UC47u2IzZi9anPND_lVimX1Q
• Facebookfacebook.com/Onapsis
• LinkedInlinkedin.com/company/virtual-forge

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments1 record

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Virtual Forge