CheckAud vs Soterion
access controls & SoD head-to-head for ERP teams: evidenced capabilities, published pricing, and which ERPs each actually integrates with.
| Starting price | Tiered: free assessment, fixed-fee proof of concept, quote-based license | Quote-based |
| Deployment | — | Cloud, On-premise |
| Company size | Mid-market, Enterprise | Mid-market, Enterprise |
| Stated ERP integrations | SAP | SAP |
| Vendor | IBS Schreiber GmbH | Soterion |
Our take
Where CheckAud leads
- Stronger evidenced coverage on 11 of the 27 capabilities where they differ (led by cross-system risk analysis and multi-system / cross-landscape support).
Where Soterion leads
- Stronger evidenced coverage on 16 of the 27 capabilities where they differ (led by organizational-scope violation detection and what-if access simulation).
Where they differ
The 27 capabilities (of 51 in the access controls & SoD taxonomy) where the evidence separates them, biggest gaps first. “Not evidenced” means our research found no public documentation of this capability — the vendor may still offer it. Confirm on a demo.
| Capability | ||
|---|---|---|
| Cross-system risk analysisAccess Risk & SoD Analysis | Core strength Multi-client and multi-system (cross-landscape) analysis | Not evidenced SAP-only product |
| Organizational-scope violation detectionAccess Risk & SoD Analysis | Not evidenced | Core strength Organization-level analysis (company code, plant, etc.) |
| What-if access simulationSimulation, Testing & Remediation | Not evidenced | Core strength "What-if" allocation simulator for proposed role changes |
| Firefighter / emergency access provisioningEmergency & Privileged Access | Not evidenced | Core strength Elevated Rights Manager for temporary elevated access via automated workflow |
| Identity lifecycle provisioningRole Design & Identity Provisioning | Not evidenced | Core strength Central Identity Manager for standardized business roles and provisioning |
| Central standardized role catalogRole Design & Identity Provisioning | Not evidenced | Core strength Central Identity Manager for standardized business roles |
| Password self-serviceRole Design & Identity Provisioning | Not evidenced | Core strength Password Self-Service for SAP password resets |
| License usage optimizationLicensing & Cost Optimization | Not evidenced | Core strength SAP License Manager showing FUE cost of every role assignment |
| Named-user / FUE cost right-sizingLicensing & Cost Optimization | Not evidenced | Core strength SAP License Manager showing FUE cost of every role assignment |
| Multi-system / cross-landscape supportPlatform, AI & Deployment | Core strength Multi-client and multi-system cross-landscape analysis | Not evidenced SAP-only, though covers SuccessFactors Employee Central and payroll |
| Non-invasive deploymentPlatform, AI & Deployment | Core strength Plug-and-play analysis of exported SAP data; no modification to the production system | Not evidenced |
| Risk scoring and prioritizationAccess Risk & SoD Analysis | Supported Risk-scored SoD findings | Not evidenced |
| Custom rule authoringAccess Risk & SoD Analysis | Supported Support for custom risk rule sets | Not evidenced |
| Pre-approval conflict previewSimulation, Testing & Remediation | Not evidenced | Supported |
| Impact-ranked remediation planningSimulation, Testing & Remediation | Supported Management-level risk dashboards with prioritized findings | Not evidenced |
| Time-boxed automatic revocationEmergency & Privileged Access | Not evidenced | Supported Temporary elevated access via automated workflow |
| Emergency access approval workflowEmergency & Privileged Access | Not evidenced | Supported Elevated Rights Manager routes temporary elevated access via automated workflow |
| Least-privilege role designRole Design & Identity Provisioning | Supported Role-concept clean-up ahead of migration | Not evidenced |
| Executive risk dashboardsReporting & Compliance | Supported Management-level risk dashboards with prioritized findings | Not evidenced |
| API connectivityPlatform, AI & Deployment | Supported Interfaces for data export and system-to-system comparison | Not evidenced |
| SIEM / security event monitoringPlatform, AI & Deployment | Not evidenced | Supported Basis Review Manager benchmarking SAP Basis configuration against best practice |
| Prebuilt risk rule libraryAccess Risk & SoD Analysis | Supported Reference rule sets covering DSAG, GDPR and SOX-relevant controls, plus IBS Schreiber-supplied sets | Core strength Out-of-the-box SoD, critical-transaction and data-privacy ruleset |
| Periodic access certification campaignsUser Access Review & Certification | Supported Continuous, recurring compliance-monitoring option available | Core strength Periodic Review Manager for scheduled user access reviews |
| Continuous / real-time access reviewUser Access Review & Certification | Supported Continuous, recurring compliance-monitoring option | Core strength Continuous Controls Manager for real-time monitoring of materialized SoD violations |
| Audit-ready reportingReporting & Compliance | Core strength Audit-ready reports generated automatically; IDW PS 880-aligned audit methodology | Supported Mitigating-controls documentation and control-execution prompting |
| Regulatory framework alignmentReporting & Compliance | Core strength Reference rule sets covering DSAG, GDPR and SOX-relevant controls; IDW PS 880 alignment | Supported Data Privacy Manager targeted at data-privacy compliance |
| Unused-access cost identificationLicensing & Cost Optimization | Partial "Can-Do" analysis surfaces excessive/unused permissions but no license-cost framing | Supported |
Both grade identically on the other 24 capabilities — see each product's full profile: CheckAud, Soterion.
CheckAud vs Soterion — FAQs
Is CheckAud or Soterion better for ERP integration?
Both state integrations with SAP. Always verify the connector against your ERP version with a reference customer.
Which is cheaper, CheckAud or Soterion?
Neither publishes a list price — both quote. Ask each for the all-in first-year cost at your seat count, as one number, and compare those.
Get pricing for both
Tell us your ERP, seat count and must-haves and we'll come back with an independent view of what CheckAud and Soterion should each cost you — and whether a third option belongs on your shortlist.