Mariano Nunez

Chief Executive Officer and Co-Founder · Onapsis

Cybersecurity / Business Application SecurityBoston, MA

Co-founder and Chief Executive Officer of Onapsis, the Boston-based company that secures SAP and other business-critical enterprise applications. A security researcher before he was an executive, he was the first to present publicly on ERP cybersecurity risk at RSA, Black Hat and SANS, and built the company from Argentina before moving it to the United States.

Last reviewed: Sep 28, 2026

Mariano Nunez

Chief Executive Officer and Co-Founder Onapsis

Last Reviewed: September 28, 2026

Executive Summary

Mariano Nunez is co-founder and Chief Executive Officer of Onapsis, a Boston-based company that secures SAP and other business-critical enterprise applications. He came to the role as a security researcher. His company biography says he was the first to present publicly on cybersecurity risk in ERP platforms at RSA, Black Hat and SANS, and that he built the first open-source ERP penetration testing framework. He started Onapsis in his home country of Argentina and later moved it to the United States. The company describes this as creating the business-application security category. He also sits on the Onapsis board.

Career Highlights

  • Co-founder and Chief Executive Officer of Onapsis. He is listed as CEO on the company’s leadership page and was named as Executive Officer and Director in its 2018 SEC Form D.
  • Onapsis says he was the first to present publicly on ERP cybersecurity risk at RSA, Black Hat and SANS.
  • Onapsis also credits him with developing the first open-source ERP penetration testing framework and with finding vulnerabilities in SAP, Oracle, IBM and Microsoft applications.
  • Onapsis lists EY Entrepreneur of the Year 2018, an MIT “Top 35 Innovator under the age of 35” listing and a Boston Business Journal “40 under 40” among his recognition.
  • He sits on the Black Hat Review Board.

Professional Journey

Nunez’s company biography says he has more than twenty years in cybersecurity. His background is technical: he studied computer science and worked on offensive security research into enterprise resource planning systems. At the time, the security industry treated ERP platforms from SAP, Oracle and others mostly as an audit and access-control problem. His research showed they could be attacked like any other software. He presented that work at RSA, Black Hat and SANS, released an open-source penetration testing framework for ERP systems, and reported vulnerabilities in SAP, Oracle, IBM and Microsoft applications.

Onapsis grew out of that research. In a 2022 CyberWire interview he described starting the company in Argentina and bringing it to the U.S. By the time of its April 2018 SEC Form D, Onapsis Inc. was a Delaware corporation based at 60 State Street in Boston. That filing named Nunez as an executive officer and director. Juan Pablo Perez-Etchegoyen and Victor Montero were also named as directors. Both now sit on the Onapsis leadership team, as Chief Technology Officer and Chief Information Officer.

He remains Chief Executive Officer. The current Onapsis board includes him, MercadoLibre CEO Marcos Galperin, former FireEye and McAfee CEO Dave DeWalt, and former SAP Chief Security Officer Tim McKnight, along with investors from .406 Ventures, Evolution Equity Partners, LLR Partners and La Caisse. He also serves on the Black Hat Review Board, which selects the conference’s briefings.

Education

His Onapsis biography says he holds a Bachelor of Science in Computer Science. It does not name the institution. It also lists executive training at Harvard Business School and Stanford Graduate School of Business. Those are non-degree programmes.