What Secureway does

Secureway is a French boutique consultancy specializing exclusively in SAP authorization security, Segregation of Duties (SoD) risk management, and GRC (Governance, Risk, and Compliance) implementations. Founded in 2007 by three SAP security veterans (Grégory BIASOTTO, Christophe BIZOT, and Emmanuel ANTIGNAC), the firm has grown to 23 specialized consultants headquartered in Versailles with regional offices in Paris, Grenoble, and Toulouse. Its end-to-end service portfolio covers SAP authorization audits, role strategy definition, lifecycle management (TMA), S/4HANA/Fiori migration, GRC solution implementation, and certified SAP training (ADM940, ADM950, GRC300). The core technical asset is SWAWE Compliance Companion, a proprietary software suite developed since 2015 and published via the dedicated SWAWE Labs entity (2019), offering SoD risk analysis, Emergency Access (Firefighter) management, and Continuous Control Monitoring across SAP ECC, S/4HANA, and Fiori environments with pre-built risk matrices refined over 15+ years of consulting engagements.

The business model is a hybrid of professional services (consulting, managed services, and certified training) and proprietary software licensing/support, with all revenue routed through direct enterprise engagement. The go-to-market is consultative and founder-led: free scoping calls typically lead to audit engagements, which expand into multi-year managed services contracts, GRC implementations, or SWAWE deployments. Pricing is quote-based and engagement-scoped, with managed services on annual SLAs and training delivered on a 1–5 day pay-as-you-go basis. Customer segments are predominantly large enterprises in regulated industries (pharma, nuclear, agri-food, telecom, manufacturing, energy) with complex SAP landscapes and 1,500–3,000+ user environments. Notable clients include CHR Hansen (10+ years, 3,000+ users globally), Alcatel Submarine Networks (4+ years, 1,500+ users), ARAYMOND, Hutchinson SA, E&Y, CHANTELLE, ADOVA Group, Eurovia, CEA, and Enercal.

Distributional footprint is concentrated in France with remote international delivery (notably French, English, and Chinese language capability). Customer concentration appears moderate: while no individual client dominates the disclosed evidence, the firm's small scale (23 consultants) and the prevalence of large multi-year enterprise relationships create some anchor-account dependence. The company's structural moats are narrow but deep: a 100% SAP-security-focused talent pool, a proprietary SWAWE platform with an integrated 15-year risk repository, SAP training partner status, and tenured client relationships averaging 4–10+ years. Expansion levers include continued SWAWE customer additions (10th integration milestone in 2025), S/4HANA migration demand, and selective international delivery. The principal weakness is scale: at 23 employees, the firm has limited capacity to absorb large enterprise clients independently, and there is no evidence of external funding, M&A activity, or AI/ML capability that would alter the competitive landscape.

Name

Secureway

Legal name

Secureway

Website

https://secureway.fr

Company type

Private

Founded year

2007

Operating status

Operating

Headcount range

1–10 employees

Short description

Secureway is a French boutique consultancy specializing in SAP authorization security, SoD risk management, and GRC implementations, serving large enterprises in regulated industries with 23 specialized consultants and its proprietary SWAWE Compliance Companion software.

Ownership category

akta.pro rank

Product category

SAP Security Consulting

NAICS

Security Systems Services (56162), Investigation, Guard, and Armored Car Services (56161)

SIC

Services-Detective, Guard & Armored Car Services (7381)

akta.pro primary industry

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

akta.pro secondary industry

Secure Software & DevOps Awareness (Secure Coding Basics) (EDABAGAN)

Keywords

• SAP authorization management
• SAP security consulting
• Governance risk compliance
• Segregation of duties
• SAP S/4HANA migration

Headquarters

HQ city

Versailles

HQ country

France

HQ region

Europe

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Professional Services - SAP Security Consulting: Core revenue stream from consulting engagements including SAP authorization audits, roles strategy definition, roles lifecycle management, S/4HANA migration, GRC implementation, and managed services. Delivered by certified SAP security consultants on-site or remote.
2. Training Services: SAP authorization training courses delivered as a SAP-certified training partner. Offerings include SAP GRC, roles management, and compliance training for decision-makers, expert consultants, and SAP administrators. Duration 1-5 days, in-person or remote, in French or English.
3. SWAWE Software Licensing and Support: Revenue from the proprietary SWAWE Compliance Companion software, including deployment, configuration, training, and ongoing support. Published by SWAWE Labs (a Secureway subsidiary entity created in 2019).

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels6 records

Core offering

Secureway is a French SAP security consultancy that helps enterprises manage and optimize their SAP authorizations through audits, strategy definition, managed services, S/4HANA migration, GRC implementation, and certified training. The firm also develops and licenses SWAWE Compliance Companion, a proprietary software for governance, risk analysis, identity management, SoD detection, and continuous control monitoring in SAP ECC, S/4HANA, and Fiori environments.

Product overview

Secureway is a specialized SAP security consultancy offering a portfolio of services centered on SAP authorization management and GRC. Their core proprietary product is SWAWE Compliance Companion, a purpose-built GRC tool for SAP environments that provides continuous control monitoring, SoD risk analysis, and emergency access management. The service portfolio includes SAP authorization audits, strategic roles definition, managed services for role lifecycle management, S/4HANA/Fiori migration support, GRC solution implementation (both SAP GRC and SWAWE), and professional training programs. Services are delivered by 23 specialized consultants through offices in Paris, Grenoble, and Toulouse.

Differentiator

Problem solved

Functional benefit

Brands

• SWAWE Compliance Companion: Software solution developed by Secureway for governance, risk analysis, and identity management for SAP environments.
• Swawe Labs

Products and services

• SWAWE Compliance Companion Proprietary GRC software for SAP environments providing continuous control monitoring, SoD risk analysis, Emergency Access (Firefighter) management, recertification workflows, and identity management. Compatible with SAP ECC, S/4HANA, and Fiori.
• SAP Authorization Audit Services Comprehensive analysis of SAP roles, SoD risks, and access vulnerabilities to prepare for internal or external audits, detect security gaps, and ensure regulatory compliance. Typical duration 5-10 consulting days depending on user volume.
• SAP Roles & Access Strategy Definition Strategic consulting engagement (5-10 days over 2-4 weeks) to define and structure SAP authorization strategies aligned with business objectives, compliance requirements, and security needs. Deliverables include analysis report, action plan, project roadmap, and budget estimate.
• SAP Roles Lifecycle Management (Managed Services) Ongoing managed services for SAP role administration including user lifecycle management, role upgrades, scope deployments, continuous SoD monitoring, and SLA commitments covering response time, time to production for new roles, and audit compliance guarantees.
• SAP to S/4HANA & Fiori Migration Consulting services to transition SAP roles to S/4HANA and Fiori environments with proper authorization strategy, ensuring compliance and security in the new platform while avoiding carry-over of legacy technical debt and SoD conflicts.
• GRC Solution Implementation Definition, implementation, and ongoing maintenance of Governance, Risk and Compliance (GRC) solutions, including SAP GRC Access Control or proprietary SWAWE Compliance Companion, covering access control, audit trails, and continuous monitoring.
• SAP GRC and Authorizations Training Certified SAP training courses covering authorization management, roles and authorizations, and SAP GRC Access Control implementation. Courses range from 1-5 days, available in-person or remote, in French or English, with certification options at session end.

Quantifiable outcome

• Up to 75% risk reduction achievable through quickwins (SAP_ALL removal, unused role cleanup)
• +3 more outcomes

Named customers12 records

Segments6 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability2 records

Feature5 records

Partnerships

Two partnerships are on record, tiered core.

• SWAWE Compliance Companion (Internal Product)coreOthers · 1 January 2015SWAWE Compliance Companion is Secureway's proprietary software solution for SAP governance, risk analysis, and identity management. Developed internally since 2015 to meet client expectations for a comprehensive SAP authorization management tool. The product offers an alternative to SAP GRC AC for managing and automating SAP authorizations. SWAWE Labs (created 2019) is Secureway's dedicated software publishing entity for this product.
• SAPcoreStrategic or Co-development Partner · 1 January 2008Secureway became a SAP Training partner less than one year after its founding in 2007, and has maintained this status continuously. As a certified SAP training partner, Secureway is authorized to deliver official SAP courses including ADM940 (Authorization Concept), ADM950 (Setup and Use of Role Maintenance), and GRC300 (SAP GRC Access Control). This partnership provides Secureway with official access to SAP curriculum, certification pathways, and ecosystem credibility.

Scale indicators8 records

Recent moves10 records

Expansion highlights6 records

Direct peers

• Soterion: Soterion is a specialist SAP authorization and GRC consultancy offering SAP Access Control (GRC) implementation, SoD rule sets, risk analysis, and role redesign, with a similar go-to-market focus on S/4HANA migrations. It is the closest direct competitor to Secureway in the niche SAP authorization consulting space, particularly in the European market.
• Eshgro: Eshgro is a Netherlands-based specialist SAP authorization and identity & access management consultancy offering SAP GRC, role redesign, and managed services. It is a direct European specialist competitor to Secureway with a similar niche focus on SAP authorization and SoD risk management.

Emerging players

• Pathlock: Pathlock (formerly Greenlight Technologies) provides application-access governance and continuous controls monitoring across enterprise applications including SAP, ERP, and financial systems. Comparable to Secureway's SWAWE Compliance Companion in offering automated SoD analysis, access certification, and CCM for SAP environments, though Pathlock is a software vendor with broader multi-application coverage rather than a SAP-specialist consultancy.
• SecurityBridge: SecurityBridge provides SAP-native cybersecurity software for threat detection, code security, and compliance monitoring. It competes with Secureway's SWAWE on continuous monitoring and anomaly detection for SAP landscapes, and shares a focus on SAP-specific (rather than horizontal) security tooling.
• Onapsis: Onapsis is a cybersecurity platform purpose-built for SAP and Oracle applications, covering vulnerability management, compliance, and continuous monitoring. It competes with Secureway's SWAWE on the software side for SAP-specific security and compliance, and overlaps with Secureway on SAP security advisory and GRC implementation services.

Broad incumbents

• Protiviti SAP Risk & Compliance Practice: Protiviti is a global consulting firm with a dedicated SAP risk and compliance practice covering GRC, authorization reviews, and access management. It competes with Secureway for mid-market and enterprise SAP compliance mandates and offers broader risk consulting capabilities beyond SAP.
• EY (Ernst & Young) SAP Security Practice: EY is a Big Four firm with a substantial SAP advisory practice that includes SAP security, GRC, and authorization services. EY is both a partner of Secureway (testimonial from E&Y Poland engagement) and a competitor for large enterprise SAP security mandates, offering global scale that Secureway cannot match.
• SAP GRC Access Control (native product): SAP's native GRC Access Control suite is the underlying platform that Secureway's SWAWE positions against and that Secureway helps clients implement. As the incumbent vendor, SAP shapes the rules of the market and could expand built-in capabilities that erode demand for specialist implementations over time.
• OpenText (formerly SAP GRC partner / GRC add-ons): OpenText acquired various SAP-centric GRC and analytics assets and competes in the broader enterprise GRC market. While not a head-to-head specialist like Secureway, it represents the kind of large platform incumbent whose bundled offerings can pressure specialist consultancies on enterprise deals.

Regional players

• IBS Schreiber: IBS Schreiber is a German specialist SAP authorization and security consultancy offering similar services to Secureway: SAP role design, SoD analysis, GRC implementation, and managed services. It is a comparable regional specialist competitor focused on the DACH market, mirroring Secureway's positioning in France.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/secureway

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Secureway