Keeping up with new code development is hard, especially when your organization has a big custom foot-print.
Due to the nature of ERP systems and how fast they tend to grow in volume, it makes it almost mandatory to have a robust security strategy around code review, making it a vital part of your overall SAP security strategy.
Without the ability to check custom SAP code, an attacker could inject a single line back-door on any development package, and just wait until that code make its way into production.
At Vicxer, we have developed a set of novel algorithms (in combination with manual techniques) that allow us to detect the most common and not so common attack patterns on ABAP and Java applications in a time efficient matter. We can evaluate your custom code statically and dynamically, depending on your needs.