Pathlock Earns RISE with SAP Certification for Clean Core-Compatible GRC

SAP has certified Pathlock’s Native Cyber Security and GRC Suite and Application Profiler solutions as clean core compatible for RISE with SAP, which means the two products can operate inside RISE with SAP environments without compromising upgradability.

For SAP customers running or planning a RISE with SAP migration, the certification identifies an access governance and application security option that aligns with clean core expectations for SAP S/4HANA Cloud upgradability.

RISE with SAP Migrations Put GRC Tools Under Clean Core Scrutiny

Under RISE with SAP, SAP’s clean core principle limits modifications to the digital core and favors extensions, customizations, and integrations that use SAP-approved extensibility and integration approaches.

That raises the bar for third-party security or governance, risk and compliance (GRC) tools used in a RISE with SAP environment. Tools that rely on intrusive modifications inside the SAP stack may not fit the model RISE customers are being asked to adopt.

The certification applies to two named Pathlock products — Native Cyber Security and GRC Suite for SAP security, access governance and compliance controls, and Application Profiler for application-level visibility and profiling — confirming both align with SAP clean core principles for RISE with SAP environments.

Its value becomes clearest during migration. Many SAP customers are moving from heavily customized SAP ECC environments to SAP S/4HANA through RISE with SAP, where one risk is carrying legacy technical debt into a new cloud operating model.

A manufacturer midway through that transition may still need segregation-of-duties controls to remain continuously monitored, but it also needs those controls delivered without modifications that recreate the complexity it is trying to leave behind. Clean core certification speaks directly to that constraint.

Pathlock’s broader platform covers identity and access governance, audit and compliance processes, and application security across SAP and other enterprise applications.

What This Means for SAPinsiders

• Treat clean core fit as a procurement filter. Architecture review boards evaluating RISE-bound stacks now have an SAP-certified signal to weigh alongside functional fit. That signal will increasingly shape shortlists before technical evaluation begins.
• Validate certification scope against RISE with SAP design. Enterprise architects and GRC program owners should check the certification details against their own deployment model because a clean core designation may apply only to specific products, versions, environments, or integration patterns
• Track vendor roadmaps against clean core requirements. Transformation leaders should expect certification status, API strategy, and upgrade compatibility to become standing inputs in GRC and security tooling decisions throughout the migration cycle.