SWAWE LABS

What SWAWE LABS does

SWAWE LABS SAS is a French software company founded in 2019 and headquartered in Versailles, France, that builds a unified Governance, Risk, and Compliance (GRC) platform purpose-built for SAP environments. The platform is sold as four integrated modules: SWAWE RISK for segregation-of-duties (SoD) analysis, SWAWE CCM for continuous control monitoring (including compensatory controls and ITGC), SWAWE PAM for privileged access management, and SWAWE IAM for identity and access lifecycle management. Its core technical differentiator is risk analysis performed at the level of SAP authorization objects (e.g., ACTVT, BUKRS) rather than t-codes, which the company claims eliminates 40-60% of false positives; the platform also uses a business-profile abstraction layer to make access governance accessible to non-technical managers and supports real-time simulation of role changes before production deployment. The platform integrates natively with SAP ECC, S/4HANA, and Fiori, and exposes APIs for integration with identity platforms (SailPoint Identity IQ) and ITSM tools (ServiceNow, JIRA, GLPI).

Name

SWAWE LABS

Legal name

SWAWE LABS

Website

https://swawe.fr

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

1–10 employees

Short description

SWAWE LABS is a French software vendor providing a unified SAP-native GRC platform (RISK, CCM, PAM, IAM) that automates SoD analysis, continuous control monitoring, privileged access, and identity lifecycle management for large, regulated enterprises.

Ownership category

akta.pro rank

Product category

SAP Governance, Risk and Compliance (GRC) Software

NAICS

Computer Systems Design and Related Services (5415), Other Computer Related Services (541519)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Governance, Risk & Compliance (GRC) Platforms (BPAEAPAA)

akta.pro secondary industries

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), Audit Management, Controls & SOX Compliance (BPAEAPAH), Compliance, GRC Workflow & Audit Automation Platforms (HDAEAHAL)

Keywords

• SAP GRC software
• Access governance
• Segregation of duties
• Privileged access management
• Continuous control monitoring

Headquarters

HQ city

Versailles

HQ country

France

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Software Licenses and Subscriptions: SWAWE is a software platform sold as an integrated suite of four modules (RISK, CCM, PAM, IAM). Revenue is generated through software licensing, likely on a subscription or term-license basis given the enterprise sales motion and recurring support/update services. Modules are deployed with pre-configured models for rapid implementation.
2. Professional Services (Implementation, Training, Support): SWAWE offers implementation and configuration services to integrate the platform into customer SAP environments, plus user training and ongoing technical support. These services are sold alongside the software platform, typically as part of initial deployment engagements.

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels6 records

Core offering

SWAWE LABS provides a unified Governance, Risk and Compliance (GRC) software platform purpose-built for SAP environments. The platform is sold as an integrated suite of four modules — SWAWE RISK (SoD risk analysis), SWAWE CCM (continuous control monitoring), SWAWE PAM (privileged access management), and SWAWE IAM (identity and access lifecycle management) — together with implementation, configuration, training, and support services. The software integrates directly with SAP ECC, S/4HANA, and Fiori, and serves large enterprises subject to SOX, Sapin II, Bâles, and RGPD regulatory obligations.

Product overview

SWAWE is a unified GRC (Governance, Risk, and Compliance) software platform dedicated to SAP environments. The platform comprises four complementary modules: SWAWE RISK for risk analysis and SoD conflict detection, SWAWE CCM for continuous control monitoring, SWAWE PAM for privileged access management, and SWAWE IAM for identity and access lifecycle management. These modules work together to analyze SAP risks, manage user access, automate controls and validations, and secure SAP systems through a unified, audit-ready approach.

Differentiator

Problem solved

Functional benefit

Brands

• SWAWE RISK: Risk analysis module for identifying, monitoring, and reducing SAP risks including SOD conflicts and sensitive authorizations.
• SWAWE CCM
• SWAWE PAM
• SWAWE IAM

Products and services

• SWAWE RISK SWAWE RISK identifies, monitors, and reduces risks related to access in SAP environments, particularly segregation of duties (SoD) conflicts and sensitive authorizations. It analyzes SAP authorization objects (ACTVT, BUKRS, etc.) rather than t-codes alone, providing a customizable risk matrix, real-time monitoring, and evolution tracking over time. It is for SAP security, GRC, and audit teams in large enterprises subject to SOX, Sapin II, Bâles, or RGPD compliance.
• SWAWE CCM (Continuous Control Monitoring) SWAWE CCM structures, automates, and traces all SAP governance controls including compensatory controls and ITGC. It plans execution, tracks responsibility, and maintains a complete historical record, providing real-time compliance dashboards and evidence materialization for internal and external auditors. It supports SOX, Sapin II, Bâles, and RGPD frameworks.
• SWAWE PAM (Privileged Access Management) SWAWE PAM secures extended-rights and sensitive-access accounts in SAP via validated request workflows. It provides complete traceability of all privileged actions performed, with a full audit trail including actor name, objective, approver, transactions executed, and records modified.
• SWAWE IAM (Identity and Access Lifecycle Management) SWAWE IAM centralizes and automates SAP identity and rights management from account creation to removal, using business-profile abstraction to structure rights assignment. It integrates preventive SoD simulation before access is granted and supports integration with HR systems for automated Joiner-Mover-Leaver lifecycle management.
• SAP Risk Audit Service Consulting service providing an assessment of the risk state of an organization's SAP usage, including identification of SoD conflicts, sensitive authorizations, and compliance gaps. It is delivered as a standalone engagement or as the precursor to a SWAWE platform deployment.
• SWAWE Configuration and Integration Service Implementation and configuration service to integrate the SWAWE platform modules into customer SAP environments. Configuration is accelerated through pre-configured models, with intuitive use following deployment. The service covers initial setup, integration with SAP ECC/S/4HANA/Fiori and external systems (GLPI, ServiceNow, JIRA, SailPoint), and tuning of risk matrices and controls.
• SWAWE Update, Training and Support Service Recurring service covering user training, updates to the SWAWE modules, and ongoing technical support for customers operating the platform. Sold alongside the software subscription to ensure continued platform effectiveness and regulatory alignment.

Quantifiable outcome

• 74% average SoD risk reduction across all customers
• +6 more outcomes

Named customers3 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

Feature6 records

Partnerships

Five partnerships are on record, tiered core, general and infrastructure.

• SailPoint (Identity IQ integration)coreTechnology or IntegrationSWAWE is integrated with SailPoint Identity IQ, where SWAWE's SoD risk analysis is invoked within the SailPoint identity management workflow. At Alcatel Submarine Networks (ASN), this integration allows risk analysis to be performed automatically as part of the identity governance process managed through SailPoint, enabling SOD simulations embedded directly in the identity management lifecycle.
• GLPI (Ticketing Integration)coreTechnology or IntegrationSWAWE integrates with the GLPI IT service management tool to automate SAP user management workflows. At ARaymond, a decision was made to interface GLPI with SWAWE as part of the overall solution to preserve an acceptable level of SoD risk and automate SAP user management processes. Access requests are created in GLPI, risk-analyzed in SWAWE, with provisioning feedback looped back to GLPI.
• ServiceNow (Ticketing Integration)coreTechnology or IntegrationSWAWE supports integration with ServiceNow for ticketing workflow management. As described in the configuration and integration documentation, SWAWE can be used with ServiceNow as the ticketing tool for access requests: creation of requests in ServiceNow, SoD risk analysis in SWAWE, feedback in ServiceNow, with provisioning performed in SAP upon manager approval.
• JIRA (Ticketing Integration)generalTechnology or IntegrationSWAWE can be integrated with JIRA as a ticketing tool for access request management. The integration follows the same pattern as other ticketing integrations: request creation in JIRA, SoD risk analysis in SWAWE, with provisioning triggered in SAP upon approval.
• OVHCloud (Hosting Provider)infrastructureTechnology or IntegrationThe SWAWE platform is hosted by OVHCloud, a French cloud infrastructure provider. The legal mentions page explicitly identifies OVHCloud (2 rue Kellermann, 59100 Roubaix) as the hosting provider. OVHCloud conducted penetration testing on the SWAWE platform via its subsidiary INTRINSEC, which confirmed strong security posture.

Scale indicators5 records

Recent moves6 records

Expansion highlights4 records

Emerging players

• Saviynt: Saviynt offers cloud-native identity governance and granular SoD/role analytics for ERP systems including SAP, positioning as a modern alternative to legacy GRC and increasingly competing for SWAWE-style SAP access governance use cases.
• OneTrust: OneTrust has expanded from privacy/GDPR into broader GRC and risk offerings, competing for some of the same RGPD and regulatory-driven buyers SWAWE targets, though its SAP-native depth is shallower.

Direct peers

• Onapsis: Onapsis is a specialist vendor focused on SAP application security and compliance, offering vulnerability management, code scanning, and continuous monitoring — a direct SAP-native peer in the same compliance-driven buyer segment as SWAWE.
• Pathlock: Pathlock (formed via combination of Greenlight Technologies and other SAP security specialists) is a direct competitor offering SAP-centric access governance, SoD analysis, and continuous monitoring across ERP landscapes — overlapping most closely with SWAWE RISK, CCM, and PAM.

Broad incumbents

• SailPoint: SailPoint is a leading identity governance platform that integrates with SAP (and is referenced as an integration partner for SWAWE at ASN). It overlaps with SWAWE IAM and risk-aware provisioning but addresses a broader identity audience.
• SAP Identity and Access Governance (IAG): SAP's own built-in access governance and GRC offerings (formerly SAP GRC, now part of SAP IAG for S/4HANA) compete head-on with SWAWE's modules but benefit from native bundling, larger field sales, and the default status for many SAP customers.
• ServiceNow Integrated Risk Management: ServiceNow's GRC/IRM portfolio competes at the continuous control monitoring and risk register layer addressed by SWAWE CCM, leveraging an installed ITSM base (and is itself a SWAWE integration partner for ticketing-driven access requests).
• RSA Archer: RSA Archer is an established integrated risk management platform used by large enterprises for IT GRC, overlapping with SWAWE's risk register, controls, and audit evidence capabilities at the broader enterprise GRC layer.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/swawe-labs

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SWAWE LABS