Eclipse / ABAP Development Tools

RedRays ABAP Scanner v3.54.168

Detect security vulnerabilities in your SAP ABAP code without leaving the IDE. Scan a class, program or function module straight from the editor or the Project Explorer and review the findings inline.

Official siteDistributed and operated by RedRays, Inc - the company behind the RedRays SAP Security Platform.

Install in Eclipse

Available on the Eclipse Marketplace. In Eclipse open Help → Eclipse Marketplace…, search RedRays and click Install. Open the listing →

Or add the update site manually:

In Eclipse, open Help → Install New Software…
Click Add…, leave the name blank and paste this address into Location:
https://plugin.abap-security.com/
Select RedRays ABAP Scanner, then Next → Finish and restart Eclipse when prompted.
Open Window → Preferences → RedRays Scanner, choose RedRays mode and enter the server URL and the API key provided by your administrator.

Prefer a file? Download the archive - then use Install New Software → Add → Archive…

Requirements

Eclipse IDE (2024-09 or newer)
ABAP Development Tools (ADT) installed
Java 17 runtime
A RedRays API key from your administrator

No RedRays Management Console account is required - the API key is all a developer needs.

What you can do

Scan from the editor - select code, or scan the whole source you have open.
Scan from the tree - right-click any object in the Project Explorer and choose Scan with RedRays; the source is fetched from SAP for you.
Inline findings - results appear in the RedRays Findings view with severity (Critical / High / Medium / Low); double-click to jump to the affected line.
Scan history - reopen the findings of any of your previous scans.
Centralized results - every scan is recorded in the RedRays Management Console for the security team.