Virtual Forge CodeProfiler

Virtual Forge Codeprofiler is a patented Static Code Analysis tool for ABAP programs and was released in 2009. Virtual Forge GmbH is an independant security company based in Heidelberg (Germany) with branches in Weimar (Germany) and Philadelphia (USA).
CodeProfiler performs in-depth ABAP code analysis in various testing domains: Security, Compliance, Performance, Robustness, Maintainability. It is fully integrated into the SAP development environment. All discoverd issues have detailed descriptions and mitigation instructions as well as a ranking for the prioritization of actions. CodeProfiler provides revision-proof reports including all relevant issues and test settings. CodeProfiler can be configured as a central quality gate that automatically monitors all ABAP development in an SAP landscape and stops the deployment of code with critical quality issues. It is also the first SCA tool that delivers Static Data Loss Prevention (S-DLP) capabilities, an approach invented by Virtual Forge.
CodeProfiler is mentioned in the books and .
Analysts KuppingerCole state that "CodeProfiler has reached a mature status, and is currently in the phase of feature enrichment, so beyond the capabilities presented today (excellent performance, easy configuration, predefined content, full integration into SAP development activities) there will be more beneficial functionalities available soon. ..." .
CodeProfiler is also mentioned by Christian Lehment (SAP) on SDN .
CodeProfiler is Ready for IBM Security Intelligence and is delivered through SAP Consulting .
There are multiple public success stories with large companies:

Virtual Forge GmbH is rated as "Cool Company" by Gartner and is a founding member of http://bizec.org (The Business Security Community).
The first book on the topic ABAP security was written by 4 employees of Virtual Forge:

Main Menu

See Also

Main Menu