The expert-built hardening standard for SAP Business Technology Platform — 130+ security controls, each with the recommended value, where to configure it, and how to verify it.
Securing SAP BTP means getting scores of settings right across a fast-moving cloud platform — authentication and XSUAA, Cloud Identity Services, destinations and principal propagation, the Audit Log service, entitlements and quotas, subaccount user access, and API/route protection — consistently, across every subaccount and environment.
Building your own reference means piecing together SAP’s per-service security recommendations scattered across the help portal, then deciding the correct configuration for each service in each environment — as BTP changes constantly.
What this replaces
- A senior SAP security consultant building and maintaining an equivalent baseline: roughly 50–100 hours at $200–$350/hour — $12,000–$30,000+, before ongoing upkeep.
- SAP’s own security documentation: free, but published per service and scattered across the help portal — not a consolidated, ready-to-implement baseline.
- Security guides and books: helpful background, not a configured, audit-ready control set.
- What takes a specialist weeks — and tens of thousands of dollars — is ready today for $1,795.
What you get
- A structured Excel workbook containing:
- 130+ BTP security controls — each carrying SecureBird’s recommended best-practice value, allowed values, a field for your organization’s own required value, where to configure it, and how to validate it.
- Environment tiers — enforce stricter settings in production than in sandbox, QA, or training.
- Coverage across authentication and XSUAA, Cloud Identity Services, destinations and principal propagation, the Audit Log service, entitlements and quotas, subaccount users, and API/route protection.
- Built for SAP BTP (Cloud Foundry, Kyma, and multi-environment subaccounts).
- Every value is grounded in SAP hardening practice and made verifiable — nothing invented.