Segregation of Duties Software for SAP & ERP Systems

The fast, portable SoD tool for Segregation of Duties analysis, Critical Access detection, and automated remediation across SAP and any ERP.

Detect SoD conflicts and streamline conflict resolution across your entire landscape in minutes.

Use MTC Skopos for free

14 days free trial - no commitment

Watch on YouTube

Fast, smooth and affordable Access governance

Traditional GRC tools are slow and complex

Servers, consultants, months of setup and still, running a full SoD analysis takes hours or days.

→ Download, connect, analyze in minutes. No infrastructure.

Changes introduce new risks

Every role modification or user provisioning can create new SoD conflicts. Without simulation, you only find out after the fact.

→ Simulate changes before applying them. See risk impact instantly.

Remediation is guesswork

Knowing you have conflicts is one thing. Knowing which changes won't break business operations is another.

→ Get step-by-step remediation plans ranked by business impact.

Automated SoD Analysis in 3 Simple Steps

Automate your Segregation of Duties process - from download to comprehensive risk remediation in minutes, not months

1

Download & Run

Get the lightweight portable application. No servers, no complex setup, no installation, no IT project required.

2

Connect Your Data

Import via SAP RFC connection or CSV export from any ERP system. Your data stays on your machine.

3

Analyze & Remediate

Get instant SoD analysis, identify violations, and receive actionable remediation recommendations.

Efficient and Comprehensive Risk Analysis

Detect and remediate critical access and Segregation of Duties risks across your entire IT landscape.

Segregation of Duties Conflict Detection

Automated detection of SoD conflicts in SAP and any ERP. Identify conflicting access rights that could lead to fraud or errors through comprehensive Segregation of Duties analysis across roles and user assignments. Learn about SoD

Users and roles analysis

Analyze access risks with precision whether by role or user.
MTC Skopos helps you uncover hidden conflicts, overprovisioning, and potential compliance breaches while optimizing your license costs by estimating the FUE impact of your users and roles.

Cross-System Risk Detection

Assess risks arising from access across multiple systems, and identify critical combinations that span different platforms.

Permission Simulation

Test role and authorization changes before applying them to production using simulation feature.
See exactly how changes will impact user access and identify potential security risks.
Simulate with Confidence:

  • Adding or removing user role assignments
  • Adding or removing authorization within existing roles
  • Creating new role
  • Cross-system access combinations and their security implications
Preview, validate, then deploy - ensuring every access change enhances security rather than creating vulnerabilities.

User & Role Explorer

Easily navigate your authorization concept. Review user access and role configurations with intuitive interface.
Even if system contains huge amount of data, MTC Skopos remains fast and smooth.

Built for the AI Era

MTC Skopos is designed for AI-powered analysis. MCP server connects directly to Claude or local LLMs. AI-optimized exports minimize token costs. Query your SoD results in plain English. Explore AI integration

*Works with Claude, ChatGPT, or local LLMs (Ollama, LM Studio) for zero cloud exposure

Executive reporting

We provide Ready-to-use Microsoft PowerBI report (.pbix) with actionable insights. Transform risk analysis results into Business-oriented insights and comprehensive reports to support informed decision-making at the executive level. See reporting capabilities

High-Performance Engine

Reduce cost thanks to an ultra-fast analysis.
Obtain report for a single user analysis in a second and a complete system analysis in minutes not hours.
In combination with simulation feature, it is possible to quickly iterate over role provisioning. Why we built this

Data Sovereignty

Your SAP authorization data never leaves your network. Ever.
MTC Skopos runs locally. No cloud component, no data transmission, no third-party storage. Unlike SaaS GRC tools, your sensitive access data stays under your control, on your infrastructure, subject to your security policies.
*SAP RFC connection may traverse your network; all analysis runs locally.

Export Data in Open Formats

True Data Ownership
Export your Segregation of Duties analysis, Critical Access reports, and computed statistics in universally compatible formats.
No vendor lock-in, unlike competitors who lock your critical compliance data behind proprietary formats or complex database structures, MTC Skopos empowers you with instant data portability through industry-standard JSON and CSV exports.

AI-Ready Data Structure
Our intelligently formatted exports are optimized for AI and machine learning tools. We've pre-processed and structured the data to minimize token consumption, reducing your AI processing costs as much as we can.

Instant Integration with Your Analytics Stack
Whether you're using Power BI, Tableau, Python, R, or emerging AI analytics platforms, our clean JSON/CSV exports integrate seamlessly.

Remediation Reports

Leverage usage data to identify remediation opportunities and determine a step-by-step technical action plan whilst preserving business operations. Learn about AI remediation

Advanced Remediation

Automated Segregation of Duties conflict resolution for SAP and any ERP. Algorithmic recommendations adapt to your criteria, delivering personalized remediation strategies for SoD conflicts based on your risk parameters and organizational priorities. How it works

SAP Role Designer (AI)

Describe your requirements to our AI and automatically generate optimal role designs with default authorization configurations.

Did-Do Analysis

SAP GRC does can-do. We do did-do. Traditional tools show who could exploit a conflict. MTC Skopos shows who actually did by correlating access with change documents. Focus remediation on risks that materialized, not theoretical violations. See how it works

SAP & ERP System Compatibility

Works with your existing IT landscape

If there's data, MTC Skopos can analyse it.

SAP Systems

Direct RFC connection or bucket folder import.
Full support for SAP authorization objects, role and profile structures.

Any System

Generic User-Privilege format supports any system. Data imported via bucket folder import.
We assist with data transformation and setup.

Minutes

Full system analysis completed

Zero

Servers or infrastructure required

100%

Data stays on your machine

Any ERP

SAP, Odoo, Navision & more

Built for compliance, security, and risk management

Comprehensive access risk analysis from detection to remediation

Comprehensive Risk Analysis

See your entire risk landscape with SoD and Critical Access analysis across users, roles, and systems.
Knowing who has access to what isn't just best practice: it's your competitive advantage.

See Risk Analysis Case Study
  • User & Role-level SoD analysis
  • Cross-system risk detection
  • Interactive user & role explorer
  • Excel-based ruleset maintenance
MTC Skopos risk analysis summary report
Risk summary report Risk detailed report Power BI executive report User explorer Role explorer

Did-Do Analysis: Real Risks, Not Theoretical

SAP GRC tells you who could exploit a conflict. MTC Skopos tells you who actually did.
Traditional "can-do" analysis produces thousands of violations. Our "did-do" analysis cross-references access with actual transaction execution, so you focus on risks that materialized.

Learn About Did-Do Analysis
  • Correlate SoD violations with change documents
  • Distinguish execution counts from actual changes
  • Prioritize remediation on materialized risks
  • Evidence-based audit reporting
MTC Skopos did-do analysis showing actual risk materialization
Did-Do risk details

Risk Simulation

Test before you deploy. Simulate user provisioning and role changes to see risk impact before applying them.
Prevention during design isn't just efficient: it's strategic architecture.

See Simulation Case Study
  • User provisioning simulation
  • Role modification impact analysis
  • Predictive risk modeling
  • What-if scenario testing
MTC Skopos user provisioning simulation
User provisioning Role simulation Risk removed Risk added

Intelligent Remediation

Fix risks without breaking business. Our algorithm recommends the least disruptive changes first, with detailed action plans.
Stop guessing which changes won't break anything: let the engine figure it out.

Read About Advanced Remediation
  • 4-phase remediation algorithm
  • Usage-based recommendations
  • Step-by-step action plans
  • Impact analysis before changes
MTC Skopos remediation action plan
Remediation instructions Remediation report

Built for the AI Era

Your data, structured for AI agents to reason about. MCP server connects your analysis directly to Claude, ChatGPT, or local LLMs. Ask questions in plain English, get answers from your actual data.
Zero cloud data exposure with local LLM support.

Explore AI Integration
  • MCP server for AI agent integration
  • Works with Claude, ChatGPT, or local LLMs
  • AI-optimized JSON/CSV exports
  • AI Role Designer for SAP
MTC Skopos MCP server connecting to AI agents
Get risk summary from AI Get risk description from AI Get risk rationale from AI Get dashboard from AI

Your SAP Risk Data Never Leaves Your Infrastructure

Unlike SaaS GRC solutions, MTC Skopos runs entirely on your machine. No cloud uploads. No third-party data processing. No vendor access to your authorization data. Your sensitive access patterns stay where they belong: under your control.

Why Not SAP GRC Access Control?

Traditional GRC tools were built for a different era. Here's how MTC Skopos compares.

MTC Skopos SAP GRC / Traditional Tools
Deployment Minutes (portable app) 3-6 months implementation
Infrastructure None required Servers, database, middleware
Data Sovereignty 100% local, never leaves your network Cloud or vendor-hosted
Analysis Speed Full system in minutes Hours to days
Analysis Type Did-do (actual execution) Can-do only (theoretical)
AI Integration Native MCP + local LLM support Limited or none
Cost Model Simple annual license Per-population monitored + implementation + support

What GRC and Compliance Teams Say

"MTC Skopos transformed how we handle Segregation of Duties. We went from weeks of manual analysis to comprehensive reports in minutes. The simulation feature alone has prevented dozens of new conflicts."

IT Security Manager Global Manufacturing Company

"Finally, a GRC tool that doesn't require a 6-month implementation project. We downloaded it, connected our SAP system, and had actionable insights the same day."

Compliance Director Financial Services Firm

"The cross-system analysis capability is a game-changer. We identified risks spanning SAP and our treasury system that we never knew existed."

Internal Audit Lead Multinational Corporation

Flexible Licences

Pricing is based on selected features, with no limitations on the number of users or systems monitored.

CHF EUR

Complete Solution

For the full power of our solution

12'000.-CHF

per year

Start for free

  • Desktop software license for 3 users2
  • 1 year validity
  • Multi-system support
  • Core risk analysis engine
  • User & Role Explorer
  • Executive reporting
  • Model context protocol
  • Remediation report
  • Did-Do Analysis
  • Role Designer
  • Technical documentation
  • Complete support

Customized Solution

Tailor your solution

From 2'000.-CHF

per year

Start for free

  • Desktop software license for 1 user2
  • Flexible validity
  • Multi-system support
  • Core risk analysis engine
  • User & Role Explorer
  • Executive reporting
  • Technical documentation
  • Standard support
  • Select additional features1

For Consultants

Improve your efficiency

From 3'500.-CHF

per environment3

Start for free

  • Desktop software license for 1 user2
  • Flexible validity
  • Multi-system support
  • Core risk analysis engine
  • User & Role Explorer
  • Executive reporting
  • Remediation report
  • Technical documentation
  • Standard support
  • Select additional features1

Freelancer

Full power, solo practitioner

From 600.-CHF

per month

Start for free

  • Desktop software license for 1 user
  • Flexible validity
  • Unlimited client environments
  • Core risk analysis engine
  • User & Role Explorer
  • Executive reporting
  • Model context protocol
  • Remediation report
  • Did-Do Analysis
  • Role Designer
  • Technical documentation
  • Standard support


1 Customized solution offering enables flexible license durations can be adapted to fit your tailored solution.

2 Additional user licenses can be purchased for 500 CHF each.

3 One consulting customer is considered as being one environment.

4 Displayed price excludes applicable VAT.

Need help with ruleset configuration, data preparation, or remediation? View our consulting services

Built for Compliance, Security & Audit Teams

Whether you're managing SoD compliance, security risks, or consulting, MTC Skopos adapts to your workflow

Compliance Team

Manual audit processes taking weeks to complete
✓ Automated SoD analysis completed in minutes

Streamline your Critical Access, SoD, and internal audit processes with automated risk detection and comprehensive reporting capabilities.

Security Team

Unknown risks when making role changes
✓ Simulation shows impact before implementation

Get clean and stay clean. Simulate the risk impact of authorization changes to roles, and perform risk analysis during the provisioning process.

Security Consultants

Slow analysis across multiple client systems
✓ Fast multi-system insights enhance efficiency

Enhance your efficiency and maximize the value of your insights when conducting access risk analysis for clients.

Chief Information Officer

Fragmented risk visibility across IT landscape
✓ Unified cross-system analysis and reporting

Get a faster, more versatile solution for risk analysis across your entire IT landscape, not just SAP systems.

Learn About Segregation of Duties

Expert guides on SoD implementation, compliance, and access risk management

What is Segregation of Duties (SoD)?

Complete guide to SoD definition, examples, risks, and how to build an effective SoD matrix for your organization.

Read the guide →

Best SoD Tools & Software Comparison

Compare the top Segregation of Duties tools for SAP. Features, pricing, and what to look for in SoD software.

Compare tools →

Free SAP SoD Matrix Template

Download our free SoD matrix template and learn how to build, maintain, and automate your SoD ruleset.

Get the template →

Struggling to choose the best GRC tool?

Chat with your favorite AI chat assistant or book a demo to learn more about MTC Skopos and how it can help your business!

Ask ChatGPT Ask Claude Ask Perplexity Ask for a demo

Ready to Secure Your ERP Systems?

Join forward-thinking companies using MTC Skopos for comprehensive access risk management

Use MTC Skopos for free

14 days free trial - no commitment