User Access Control and Compliance
in One Unified Cloud & On-Premises Environment


  • "Our long-term relationship with Xpandion started as we entered into a very large global rollout project; ever since we have been enjoying the company’s products and innovations...."

    Avi Averbuch, Global Authorization Manager at ZIM

  • "Choosing Xpandion’s ProfileTailor Dynamics for our organization has proven to be an excellent decision. We have now maintained control over Segregation of Duties, locating any sensitive accounts and identifying the actual user and exact time of use..."

    Richard Symes, SAP Competence Manager at Scapa

  • "ProfileTailor significantly increased the hospital’s security level by eliminating SAP_ALL authorizations, narrowing authorizations according to actual usage, and removing inactive users..."

    Rafi Maman, SAP Division Manager at Hadassah Medical Center

About Xpandion

Xpandion is the leading provider of ERP usage inspection solutions, delivering unprecedented real-time visibility into management systems, significantly improving security, optimizing licensing usage and enabling GRC/SOX compliance. Available in cloud or on-premises, Xpandion’s ProfileTailor™ Dynamics suite is implemented rapidly and does not require any changes to monitored systems.


Honors & Certifications

gartner Xpandion cool vendor cloud enabled software SAP SAP Certification CIOReview SAP Xpandion Top 100 Solutions Red Herring SAP Finalist


in Licensing & SAMPosted by Moshe Panzer

Collateral Damage from SAP Indirect Access Threats

Recently we hear about large SAP accounts being accused of not paying license fees to SAP for accessing their system using third party applications. The most known example case is SAP vs. Diageo from February 2017 (click here), but more recently another case has made headlines. SAP is accusing brewing company Anheuser-Busch (click here) of similar practice. In SAP jargon this is called “Indirect ... read more...

in Licensing & SAMPosted by Eden Amitai

Pop quiz: How many types of SAP licenses are there?

I’ll give you a minute to think.Can you name three? Four? Your average SAP customer might list “employee,” “limited professional,” “professional,” or even “employee self service,” but these types are just a few of the wide range of licenses out there. The problem with not knowing your SAP license read more...

in Security & AuthorizationsPosted by Yoav Michaeli

Emergency Access at 2am? Don’t Wake Me Up, Please!

There’s a tricky little process with an innocent-sounding name, and it’s something that goes on in your organization far more frequently than you’d imagine. Can you guess what it is? It’s called “IT Access” (AKA “Emergency Access”) – and auditors love it.    read more...



157 Yigal Alon Street,

Tel Aviv 67443, Israel

US Office


3310 W Braker Lane Suite 300-253

Austin, TX 78758, USA

India Office


C 103, Akruti Orchid Park, Andheri-Kurla Road,

Andheri East, Mumbai, India