Company
SAP SE is a German multinational company known for ERP software that helps businesses manage operations, finance, and supply chains.
iTWire's comparison finds SAP's and Oracle's own announcements echo Workday's autopilot pitch. Buyers can separate the three only by testing which decisions each product hands to a person and what that person can change.
Reality
SAP fixed CVE-2026-89111, a maximum-severity OAuth2 SSRF in its Cloud SDK for Python, in a 20-flaw October 2026 update. A multi-tenant BTP app that lets outside input set tenant_subdomain can send its client credentials to an attacker until it is patched or allowlisted.
Perspective Coverage
4 publishersReality
SAP began rolling out Joule Work to customers on 6 October, citing a 20% productivity gain across 110,000 of its own employees. The gain is SAP's own, reported for its finance, HR and procurement work, so buyers will have to test it on their processes.
Reality
SAP rated CVE-2026-89111, an OAuth2 credential leak in its Cloud SDK for Python, CVSS 10.0 in an October 13 advisory. The Hacker News found that six later releases, 0.53.0 through 0.55.0, skip the August fix in the Destination module.
Reality
A dev.to guide forecasts 371,250 SAP AI Units a month for a 200-user system. Its own metering ranges put the 150-unit developer day at three refactors on the 50-unit floor, or under one at 200, so the total turns on call mix.
Reality
SAP's VS Code ABAP Development Tools are generally available, with 80% object-type parity against Eclipse ADT due by end-2026, a dev.to post says. The post's own list of gaps means most teams will keep Eclipse ADT running beside it.
Reality
SAP's ABAP MCP Server, generally available after Sapphire 2026, lets Claude, Copilot or Amazon Q execute RFCs on S/4 through one /mcp endpoint. Each agent needs its own bearer token, a dev.to practitioner guide says, so S/4 teams have to decide what every token may call.
Reality
SAP unveiled Joule Assistants for five business areas at Connect, with most due via early adopter and GA releases by the first quarter of 2027. Controllers get a pilot calendar, while SAP Pay already moves money in the US and UK.
Reality
Circle and SAP-backed Tereina are building USDC and EURC into SAP Pay, citing SAP customers that generate 84% of global commerce. SAP Pay can pick a payment rail for each transaction, so a finance team's stablecoin policy comes down to when the software may choose one.
Perspective Coverage
3 publishersReality
CVE-2026-58231 is an unauthenticated, CVSS 10.0 code execution bug in Commerce Cloud's Data Hub Adapter. Defused says attempts hit its honeypots three days after patch day.
Perspective Coverage
4 publishersReality
SAP said its Autonomous Enterprise architecture and Joule Work and Desktop become generally available this month, extending its agents to non-SAP apps. Rollout teams now have to decide where those agents may read and where they may act.
Reality
Nvidia on Monday launched an AI agent safety platform whose Sentry watchdog runs on its BlueField-4 data processors. The design assumes agents will work around their limits, so its strongest enforcement runs on hardware only Nvidia makes.
Perspective Coverage
9 publishersReality
About a third of organizations in a 1,719-person McKinsey survey passed on at least one software purchase because they could build it with AI. The exposure is vendors' add-on revenue. Each builder also takes on upkeep a vendor would otherwise carry.
Reality
Dodge AI raised $2.65 million from Accel and Google's AI Futures Fund for agents that fix incidents in SAP and other business systems. The backers are betting that maintenance money moves from outside contractors to software, on results only Dodge AI has reported so far.
Reality
Dodge AI raised $2.65 million, led by Accel and Google's venture arm, for agents that fix SAP incidents and record the custom rules behind them. Buyers who pay integrators for that work have two unnamed customer stories, both told by the company, to judge it by.
Reality
NVIDIA's Open Agent Safety Platform, launched September 28, makes its OpenShell runtime available now while its Sentry hardware watchdog has no release date. Sentry's promised millisecond stop has no independent test yet, so the hardware half rests on NVIDIA's word.
Perspective Coverage
4 publishersReality
A $100 million Series C led by ICONIQ, the third round in about a year, buys a board seat and a claim on general ledger spend. The growth disclosure is rates, not levels.
Perspective Coverage
4 publishersReality
A record count that Microsoft's own AI bug-hunting produced arrives with two flaws already under attack, and the affected-product lists an operator would use to scope them are the part of the record two vendors read differently.
Reality
n8n went from $2.5bn to $5.2bn in seven months and SAP is embedding its canvas in Joule Studio, while the single number offered for agent failure, an 88% security incident rate, arrives without a population or a definition.
Reality
On one utility program, operations, billing, payments and finance all asked for fresher data in the same words. Cognizant's Govinda now asks what decision the data triggers before asking how fast a platform can move it.
Reality
Leadership · September 22, 2026 · One report1 publisher
Security · September 12, 2026 · Confirmed2 publishers
Product · September 8, 2026 · Confirmed2 publishers
Leadership · September 5, 2026 · One report1 publisher
Leadership · September 3, 2026 · One report1 publisher
Security · August 21, 2026 · Confirmed2 publishers
Product · August 19, 2026 · Confirmed2 publishers