SAP releases Security Notes on a regular monthly cycle. Manually reviewing each note, downloading it, and applying it to the right systems can take a Basis team hours every single cycle. The EPOS Security Notes App (SecNotes App) takes over the entire process - from automated relevance checks all the way to audit-proof implementation.
The EPOS Security Notes App (SecNotes App) is an integrated module of the SAP Basis automation platform EPOS - the Empirius Planning and Operations Suite. The solution automates the complete lifecycle of SAP Security Notes, from the initial notification through to audit-proof implementation logging. Two operating modes allow flexible adaptation to your processes and your system landscape.
SAP Security Notes are not optional housekeeping. They close actively exploited vulnerabilities and are a compliance requirement in regulated industries. Yet for most SAP Basis teams, handling them manually is a significant burden: notes need to be downloaded regularly from the SAP Support Portal, assessed by CVSS score and system relevance, checked for dependencies, and finally applied to every affected system via transaction SNOTE.
The result is a process that is error-prone, requires maintenance windows, and ties up valuable resources - resources that would be far better spent on strategic work.
Every patch cycle demands manual research, system comparison, and documentation - often several hours per cycle.
A missing dependency between notes can lead to failed imports or inconsistent system states.
Without complete documentation, you cannot demonstrate in an audit which notes were implemented, when, and why.
wer SAP Basis specialists are responsible for more and more systems - manual processes make this bottleneck worse.
Critical Security Notes demand fast action. Without automation, that means scheduling additional maintenance windows.
Which systems are affected? Which notes have already been applied? Without a central tool, it's easy to lose track.
The integrated SecNotes Collector regularly checks for new SAP Security Notes and makes all relevant information available in one place: note text, CVSS score, priority level, component reference, and dependencies to other notes. The app automatically evaluates which notes are relevant for your specific system landscape and downloads them - including all dependencies - to the target systems. The notes are then available in transaction SNOTE for manual implementation. Every step is documented; open tasks can be annotated with comments.
1. Automatic retrieval of new SAP Security Notes
2.Analysis by CVSS score, priority, and system relevance
3.Comparison against your system landscape (Quick Check)
4.Download of relevant notes including dependencies
5.Staging in SNOTE for manual sign-off
6.Documentation and audit logging
In the extended mode, EPOS also takes care of the implementation itself. You configure once how transports should be created: individually per note, bundled for a patch day, or into a predefined transport. You define which clients the requests are created in. From there, the process runs automatically: notes are implemented via SAP function module, and dependencies are resolved automatically.
If a note requires manual preparation steps, EPOS stops the job in a controlled manner using what is called a UserAction, and outputs precise instructions on what needs to be done. Once the job is restarted, EPOS automatically verifies the implementation and logs the result in the audit-proof results log.
1. Configuration: define transport type and clients
2.Automatic implementation via SAP function module
3.Resolution of all note dependencies
4.Controlled stop when manual preparation is required (UserAction)
5.Automatic success verification after restart
6.Audit-proof results log
The EPOS Security Notes App delivers measurable value for SAP Basis teams - in the form of greater efficiency, security, and compliance.
Manual effort for research, assessment, download, and import is reduced to a minimum. Customers like SoftwareOne report up to 70% resource savings on standard tasks through EPOS.
Vulnerabilities are closed faster and more reliably. Critical notes with high CVSS scores are prioritized and applied promptly.
Automated processes eliminate human error during import and when handling note dependencies.
Every step is logged in an audit-proof manner. Evidence of implemented Security Notes is available at any time — at the click of a button.
Less manual work and less stress. Your team focuses on strategic tasks instead of working through operational routines.
All Security Note information - status, relevance, implementation history - in a single tool, across your entire system landscape.
Success Story
— Sören Genzler, Senior SAP Solution Specialist, SoftwareOne
The global IT services provider SoftwareOne uses the EPOS SecNotes App to simplify and standardize SAP Security Note management for its customers. Alongside the SecNotes App, SoftwareOne relies on additional EPOS apps - including SAP Kernel Patching and the System Maintenance App. The result: consistent, high-quality processes across all customers and measurable efficiency gains. For standard tasks and SAP system copies, resource savings of up to 70% have been achieved.
The Security Notes App is one module of our comprehensive EPOS Platform - the Central Point of Management for SAP Basis. EPOS brings together more than 20 specialized apps on a single, unified, browser-based interface. You license only the apps you actually need and can add further modules flexibly as required - exactly in line with your IT strategy.
Automated monitoring, renewal, and distribution of SAP certificates. No more manual STRUST.
Automated deployment of SAP Kernel patches across all systems — with full audit logging.
Automated start, stop, and restart of SAP systems. Maintenance windows can be scheduled and documented.
Automated checks of your SAP systems against SAP guidelines and internal policies. Audit-ready reports at the click of a button.
See for yourself how the EPOS SecNotes App transforms your SAP Note management. In a focused 25-minute live demo, you will see the process in action - from automated note analysis to the audit-proof results log. No sales pressure, no lengthy introductions. Just a direct, hands-on demonstration tailored to your system landscape.
The EPOS SecNotes App is a module of the SAP Basis automation platform EPOS by Empirius. It automates the complete management of SAP Security Notes - from automated relevance checks and download through to implementation via SNOTE and audit-proof logging.
SAP Basis Admins
The Security Notes App is a day-to-day tool for managing the patch process rather than grinding through it manually. The app provides clear, actionable guidance tailored to your individual system landscape, and gives you an immediate overview of which notes are relevant, which have already been applied, and where action is still needed. The straightforward, browser-based UI requires no additional training - EPOS is ready to use immediately after the initial setup.
CIOs & IT Managers
Organizations benefit from demonstrably higher system stability, guaranteed compliance, and the ability to free up valuable IT resources for strategic projects. The audit-proof documentation of all implemented Security Notes gives you proof at any time that your SAP landscape meets the current security standard - with no additional burden on your team. Automation in SAP Basis operations is not a convenience; it is a strategic necessity in an era of growing compliance requirements and a shrinking pool of specialists.
The EPOS SecNotes App is designed for SAP ABAP-based systems and supports complex landscapes with multiple systems and clients. It can be flexibly configured to accommodate different transport strategies and system groups.
No. The app offers two modes. In the standard mode, notes are simply downloaded and staged in SNOTE - implementation is carried out manually. In the extended mode, EPOS also handles the implementation, but stops in a controlled manner whenever manual preparation steps are required.
Every step - from analysis and download through to implementation - is logged in an audit-proof manner. The results log provides a complete record of which notes were processed, when, in which systems, and with what outcome.
The SecNotes App is part of the EPOS Platform and requires the EPOS Core package. Within the platform, however, it can be licensed as a standalone module - no other apps are required.
EPOS is ready to use immediately after the initial setup. No extensive onboarding is required. Empirius supports the implementation and provides first-class support.