In 2013 we announced the HANA Cloud Platform certification on ISO/IEC 27001:2005 by TÜV NORD. This was the first significant attestation for the security of the HCP operational processes by an independent auditor. To remind, ISO 27001 is the internat...

As there has been a lot of fuss around the recently announced Heartbleed vulnerability in OpenSSL we would like to inform you that HCP is not vulnerable to Heartbleed.The internet connections can also be tested by open tools.The OpenSSL version avail...

This blog elaborates on issues related to the web domain under which cloud applications are visible in internet. Unlike the problem discussed in part 1 this one is more configuration-related, than a programming technique. This is the reason why we wi...

This blog is the first of a series dedicated to web application security – common vulnerabilities, threats, attacks, and protections. The emphasis will be also on on-demand applications – what cloud environments provide, what we need to know, what we...

Information Security is always considered important for the IT industry, but for on-demand software services it is really critical. Since the launch of SAP HANA Cloud Platform, our customers more and more request guarantees their data is processed se...