SAP’s Twin Troubles: Security Gaps and AI Adoption Barriers Keep Shares Hobbled

SAP unveils multi-agent AI ecosystem but stock nears 52-week low amid forced cloud migration, security breaches, and market skepticism.

Europe’s largest software company is fighting on two fronts. While SAP used its annual Sapphire conference in Orlando to unveil the most sweeping strategic pivot in years — a multi-agent AI ecosystem it calls the "Autonomous Enterprise" — its stock has been sliding deeper into the red. The shares closed at €141.26, barely above the 52-week low of €138.00 hit on May 13, and stand roughly 48% below the June 2025 peak of €271.60. Since the start of the year, the decline has reached 30%.

The centerpiece of SAP’s AI push is the SAP Business AI Platform, which bundles the Business Technology Platform, Business Data Cloud and Business AI into a single environment. More than 50 domain-specific Joule assistants will coordinate over 200 specialized agents to automate processes across finance, supply chain, human resources and customer management. The company has lined up heavyweight partners: Anthropic is bringing its Claude assistant onto the platform, NVIDIA is providing an OpenShell security layer for isolated agent execution, and Palantir is helping with data migration for clients shifting to the cloud. SAP has also set up a €100 million fund to accelerate customer adoption.

Yet the market remains deeply skeptical. The reason lies in the access terms: to use the new AI features, customers must either sign a RISE with SAP contract or move at least half of their maintenance spending into the cloud. Roughly two-thirds of SAP’s installed base still runs older ECC or on-premises versions — a constituency that has been migrating only reluctantly. That hesitation weighs heavily on the earnings outlook, given that SAP targets cloud revenue of between €25.8 billion and €26.2 billion for 2026.

Adding to the pressure, SAP has been forced to address critical security lapses that undermine confidence in its cloud infrastructure. The company recently released 15 security advisories, three of them at the highest warning level. One critical vulnerability in the Commerce Cloud involved a missing authentication check that could have allowed attackers to inject malicious code and take over servers entirely. Another flaw in S/4HANA, the core ERP product, enabled database command manipulation through insufficient input filtering. These disclosures came on the heels of a late-April supply-chain attack in which unknown actors embedded a variant of the "Shai-Hulud" worm into development packages, seeking to steal cloud credentials and private keys. SAP said it acted immediately to clean the affected systems.

The technical picture offers little comfort. The 50-day moving average sits at roughly €152 — well above the current price — and a sustained breakout would need to clear the €170–180 resistance zone. The relative strength index, at 87.5, signals an overbought condition that has yet to materialize into an upward move. Meanwhile, SAP’s first-quarter revenue rose to €9.56 billion, but the stock trades about 28% below its 200-day moving average, highlighting the gap between operational performance and investor sentiment.

All eyes now turn to the second-quarter results, due on July 23, 2026. The numbers will need to show that the AI platform is beginning to loosen the migration logjam and that the security issues have been contained. For a company that has laid out an ambitious vision and backed it with a €100 million fund, the proof will be in the adoption data — something the market has yet to see.