Acumatica, founded in 2008, builds cloud-based ERP software that handles financials, inventory, CRM, and payroll for small and mid-sized businesses across sectors like construction, distribution, and manufacturing. The platform is browser-accessible from any device, which means the attack surface is the full stack - identity, API endpoints, data in transit, and the multi-tenant architecture itself. Seventy-four percent of the company's resources go to R&D, a ratio that signals engineering-heavy priorities over sales bloat.
For a cybersecurity team, the threat model is straightforward but dense: you're protecting a SaaS product that holds sensitive business and financial data for thousands of organizations. That means securing cloud infrastructure, hardening API layers, managing secrets, and ensuring tenant isolation holds under pressure. The company has been pushing into AI and automation features, which introduces additional vectors around model integrity, prompt injection, and data pipeline security that need to be addressed at the architecture level rather than bolted on later.
Acumatica operates with a partner ecosystem that extends its deployment footprint, so supply-chain and third-party integration security becomes a real operational concern - not theoretical. The Open University platform and emphasis on connected, collaborative operations suggest a company that takes internal tooling and knowledge-sharing seriously. Security work here isn't perimeter defense; it's securing a living platform that other businesses depend on to run their operations daily.
