AI Development Services - AI App & Software Solutions
Generative AI Development Services - AI Software Experts
Conversational AI Agents for Businesses - SourceMash Technologies
Applied AI Solutions by SourceMash Technologies
AI & Data Engineering Solutions Delivered by Expert AI Data Engineers
Responsible AI & Governance for Ethical AI Systems
Expert AI Strategy Consulting & Roadmap Services
Salesforce CRM
Microsoft Dynamics 365
Oracle CX
AS400 PKMS/WMS
CRM Implementation
CRM Integrations and Executions
Microsoft Dynamics 365 System for Business Advanced Solutions
Oracle ERP Cloud System for Modern Businesses
Manhattan PKMS/WMS
SAP S/4HANA ERP Software, Implementation & Migration Services
iSeries/AS400
Marketing Technology Services
Digital Marketing Services
SOC Setup and Operations
Cloud Infrastructure Management Services
24/7 Expert IT Support
Data Analytics
Data Integration
Full Stack Development
Shopify
WooCommerce
Salesforce Commerce Cloud
Magento
The IBM iSeries (AS400, IBM i, System i) is one of the most resilient and reliable enterprise computing platforms ever built — and tens of thousands of organisations in manufacturing, distribution, financial services, and retail continue to run their most critical business processes on it decades after it was first deployed, precisely because it has never given them a reason to stop. The challenge facing these organisations is not the IBM i platform itself, which continues to be actively developed by IBM with each new OS release — it is the growing gap between what the platform can technically support and what the organisation is actually getting from it. Green-screen interfaces that drive high training costs and low adoption among new employees. Business logic locked in RPG III programs written in 1987 that nobody currently on staff fully understands. Integration gaps between the AS400 and the modern SaaS tools — CRM, e-commerce, logistics platforms — that the business has adopted around it. SourceMash's IBM i practice closes these gaps — keeping the platform running reliably while progressively modernising the interface, the integration layer, and the application code to extend the platform's productive life and expand what it can do.
The IBM iSeries (marketed over the decades as AS/400, iSeries, System i, and now IBM i) runs OS/400 — now IBM i — and supports a uniquely integrated stack: the DB2 for i relational database built into the operating system, the ILE (Integrated Language Environment) that allows RPG IV, COBOL, CL, C, and Java to coexist and call each other in the same activation group, the IBM i Access for Web and IBM i Access Client Solutions for modern connectivity, and the increasingly rich set of open-source capabilities (Python, Node.js, PHP via the Yum package manager) that IBM has added to recent OS releases to enable integration with the modern technology ecosystem without requiring a middleware server.
SourceMash's IBM i team includes certified IBM i professionals with deep expertise in RPG IV (ILE RPG), COBOL, CL, SQL, and the modernisation techniques — service programs, binding directories, free-format RPG, web services, REST APIs — that allow IBM i applications to be progressively modernised without a big-bang rewrite. We also bring the cross-platform integration expertise to connect the IBM i to SAP, Oracle, Salesforce, Microsoft, and the SaaS ecosystem that surrounds it.
The IBM i platform is renowned for its stability — organisations routinely run IBM i systems for years without an unplanned outage. But stability is not the same as being managed. The IBM i environments that cause the most operational pain are not the ones that crash; they are the ones that run continuously for so long that nobody still on staff fully understands what every program does, the ones where PTF (Program Temporary Fix) application has been deferred for so long that security vulnerabilities and known bugs have accumulated, the ones where performance degradation is gradual enough that it is not noticed until a critical year-end process that took 3 hours in 2019 now takes 11 hours in 2025, and the ones where the departure of the one or two engineers who understood the RPG codebase has left the business dependent on systems that nobody can confidently modify.
SourceMash's IBM i Managed Support service provides organisations with 24/7 or extended-hours coverage for their IBM i environments — system monitoring, PTF management, performance tuning, backup and recovery management, capacity planning, and the application support that keeps the business-critical RPG programs running correctly and responding to the inevitable minor enhancement requests that every operational ERP system generates continuously. We operate as an extension of your IT team — available at the depth of expertise that most organisations cannot justify maintaining in-house at full-time cost for a platform that is stable but not zero-maintenance.
System operations, PTF management, performance, backup, and application support on a monthly retainer
IBM i application development requires a combination of skills that is increasingly rare in the market — deep RPG language expertise (RPG III, RPG/400, ILE RPG / RPG IV, and free-format RPG), DB2 for i SQL proficiency, CL programming for system and batch automation, and the platform-specific knowledge of IBM i concepts (activation groups, service programs, binding directories, data areas, data queues, message queues, journals, commitment control) that separates IBM i developers who can maintain existing programs from those who can architect new solutions correctly. As the generation of IBM i developers who built these systems in the 1980s and 1990s approaches retirement, the skill gap is becoming a genuine business risk for organisations that are dependent on systems they cannot maintain or enhance.
SourceMash maintains a team of IBM i developers across the full skill spectrum — from RPG III legacy program maintenance and conversion through ILE RPG service program architecture and free-format RPG for modern development, to SQL stored procedures, UDFs, and triggers in DB2 for i. We take on both new application development — building new modules and programs for evolving business requirements — and legacy program documentation and re-engineering — analysing, documenting, and selectively refactoring the undocumented RPG programs that represent institutional knowledge trapped in source code.
Full-stack IBM i development — from RPG maintenance and enhancement through modern ILE architecture and DB2 SQL
New development in ILE RPG using the modern free-format syntax (F-specs replaced with CTL-OPT, D-specs replaced with DCL-S/DCL-DS, /FREE eliminated as now default) — producing readable, maintainable RPG that can be reviewed by developers familiar with any structured language. Service program architecture with binding directories for reusable procedure libraries. Prototyped external program and procedure calls. Modern error handling with monitor/on-error blocks rather than legacy INFSR error subroutines.
Maintenance and enhancement of RPG III (fixed-format RPG/400) legacy programs — the source-cycle RPG programs written in the 1980s and 1990s that still power core business processes in many organisations. Legacy RPG maintenance requires understanding calculation specifications, indicator logic, EXCPT/EXFMT record format management, and the implicit program structures (cycle programs, WORKSTN files) that are completely unlike modern programming paradigms but remain fully functional and are worth maintaining rather than rewriting where rewriting would risk destabilising proven business logic.
Modern DB2 for i SQL development — embedded SQL in RPG programs replacing legacy CHAIN/READE file access for better query optimiser performance; stored procedures for business logic that needs to be callable from multiple programs and external systems; User-Defined Functions (UDFs) for reusable SQL calculations; triggers for referential integrity and audit trail generation; and SQL views that abstract the physical file structure from reporting and integration queries. Index advisor analysis and index creation for query performance optimisation.
Control Language (CL) program development for system automation — batch job streams, subsystem management, message handling, data area and data queue processing, spooled file management, and the job scheduler CL programs that orchestrate the nightly and weekly batch cycles that most IBM i ERP systems depend on. CL modernisation from OPM CL to ILE CL for improved error handling and integration with service program procedures. Advanced Operator Panel (AOP) scripting for operations automation.
Systematic documentation of undocumented legacy RPG and COBOL programs — generating program logic documentation, cross-reference maps of which programs read and write which files, field-level data lineage from source file through processing to output, and business rule extraction that captures the accounting, manufacturing, or distribution logic encoded in the program source. Critical knowledge preservation before the departure of long-serving IBM i staff who carry this knowledge in their heads rather than in documentation.
Java application development on IBM i using the integrated JVM — servlet-based web applications running on IBM i’s embedded WebSphere Application Server or open-source Tomcat, calling RPG service programs via JNI or through DB2 stored procedures. Open-source runtime deployment on IBM i using IBM i’s Yum package manager — Python scripts for data extraction and transformation, Node.js REST API servers that expose IBM i DB2 data to web front-ends, and PHP applications for internal web tools that access IBM i data directly.
IBM i modernisation does not mean replacing the IBM i — it means removing the barriers that prevent the IBM i from serving the business as effectively as it could. The most visible barrier is the green-screen interface: IBM i's 5250 terminal emulation interface, which was designed in the 1980s for trained data entry operators working full-time at dedicated terminals, is not intuitive for occasional users, mobile workers, or the generation of employees who have never seen a text-based interface. Training costs are high, error rates are elevated, and the inability to access the IBM i from a web browser or mobile device limits where and how the system can be used. The second barrier is integration — the IBM i was not designed to expose its data and business logic through the REST APIs that modern web applications, mobile apps, and SaaS platforms require, and organisations that have not implemented an API layer are running parallel processes (manually rekeying data from IBM i into Salesforce, downloading reports from IBM i and uploading them to the analytics platform) that create data quality risk and consume staff time.
SourceMash's IBM i modernisation practice addresses both barriers without requiring a big-bang rewrite of the existing application — because replacing proven, working IBM i business logic with rewritten code introduces risk that is rarely justified. Instead, we modernise the presentation layer (replacing green-screen with a browser-based or mobile-accessible UI while the RPG programs behind it remain unchanged), modernise the integration layer (adding REST APIs and web services that expose IBM i data and functionality to external systems), and progressively modernise the application code itself (converting RPG III to ILE RPG, converting fixed-format to free-format, converting OPM programs to ILE service program architecture) where maintainability and extensibility require it.
Incremental modernisation — each phase delivering independent value without dependency on the next, preserving business continuity at every step
The specific modernisation techniques and tools we use at each phase of the IBM i modernisation roadmap
Green-screen modernisation using Profound UI (screen-scraping-free, true UI transformation) or Genie (rapid screen modernisation with minimal code change) to replace the 5250 terminal interface with a responsive, browser-accessible web application — without rewriting the underlying RPG programs. The modernised UI is accessed through a standard web browser including mobile, eliminates the need for 5250 emulator software on every workstation, and can be styled to match corporate design standards. Includes UX design work to reorganise the screen layout for modern interaction patterns rather than simply skinning the existing green-screen layout.
IBM i REST web service implementation using IBM i’s Integrated Web Services Server (IWS) — exposing RPG service program procedures and DB2 stored procedures as secure, documented REST APIs that external systems, mobile applications, and web front-ends can call directly. Enables e-commerce platforms to query IBM i inventory in real time, CRM systems to retrieve customer account data from IBM i on demand, and reporting tools to access IBM i data without requiring a batch export. Authentication via OAuth 2.0 or API key, HTTPS transport, JSON response format.
Mobile apps (iOS and Android) that access IBM i data and business logic through the REST API layer — field sales order entry that writes directly to IBM i inventory and order management programs, warehouse receiving and goods issue mobile workflows that update IBM i stock records in real time, plant maintenance work order apps for shop floor technicians, and delivery confirmation apps for logistics staff — all consuming IBM i business logic through APIs rather than replicating it in the mobile app.
Progressive RPG source modernisation — converting RPG III fixed-format calculation specifications to free-format ILE RPG, converting OPM programs to ILE programs and service programs with prototyped procedure interfaces, replacing indicator-based logic with structured conditions and named indicators, replacing implicit program cycle logic with explicit main procedure design, and adding inline documentation to previously undocumented program logic. Each conversion validated against the original program’s test cases before replacing the production source member.
The IBM i rarely operates in isolation — it is typically the authoritative system of record for inventory, orders, financials, and production data, while the organisation has adopted a surrounding ecosystem of modern SaaS tools: Salesforce or Dynamics 365 for CRM, HubSpot for marketing automation, Shopify or custom e-commerce for online sales, Power BI or Tableau for analytics, and sometimes a separate ERP system (SAP, Oracle) running in parallel for specific functions. The integration between the IBM i and this surrounding ecosystem is the most common source of operational friction in IBM i environments — data rekeyed manually between systems, batch file exports that introduce 24-hour data latency, and point-to-point flat-file interfaces that break silently and require manual reconciliation to detect.
SourceMash designs and implements IBM i integration architecture using the right approach for each integration scenario — IBM i native web services (IWS) for real-time API-based integration where the IBM i initiates or responds to REST calls, MQ (IBM MQ or ActiveMQ) for reliable asynchronous messaging between IBM i and enterprise middleware, EDI (Electronic Data Interchange) for trading partner document exchange, and middleware platforms (IBM Integration Bus, MuleSoft, Azure Integration Services) for complex multi-system orchestration where IBM i is one of several systems in an integration hub-and-spoke architecture.
Pre-built integration patterns and proven connectivity approaches for the most common IBM i-to-enterprise system connections
IBM i's native EDI capability and third-party EDI solutions that make IBM i the reliable EDI hub for trading partner document exchange
IBM i EDI implementation for ANSI X12 (used by North American trading partners) and EDIFACT (used by European and Indian trading partners) — covering the standard B2B document set: 850/ORDERS (purchase order), 855/ORDRSP (order acknowledgement), 856/DESADV (advance shipping notice / ASN), 810/INVOIC (invoice), 832/PRICAT (price catalogue), and 940/943 (warehouse transfer instructions). IBM i RPG programs that parse inbound EDI transactions and write to IBM order management files, and that extract outbound transactions from IBM i files and format them to EDI standards.
EDI connectivity via Value-Added Networks (VANs — IBM Sterling, OpenText/GXS, SPS Commerce, DiCentral) and direct AS2 (Applicability Statement 2) connections for trading partners who require direct peer-to-peer EDI over HTTPS. IBM i AS2 configuration using Mendelson AS2, OpenAS2, or Sterling B2B Integrator to exchange EDI documents directly with major retail and logistics trading partners without requiring a VAN intermediary. EDI map development for non-standard trading partner specifications that deviate from the published X12 or EDIFACT standards.
IBM Sterling B2B Integrator deployment on IBM i — using IBM i as the platform for the Sterling B2B integration engine that manages the full trading partner onboarding, document mapping, and transmission lifecycle. Sterling’s native integration with IBM i DB2 and QMQM (IBM MQ on IBM i) enables tight coupling between B2B document processing and the IBM i ERP business logic that acts on the incoming documents. Configuration of Sterling maps, trading partner agreements, and monitoring dashboards that give operations teams visibility into document exchange status.
The question of whether to continue on IBM i, modernise the current IBM i environment, migrate IBM i to a cloud hosted environment, or re-platform to a modern ERP (SAP, Oracle, Dynamics 365) is one of the most consequential technology decisions an IBM i-dependent organisation can make — and one that is routinely made on the basis of incomplete information, vendor-driven recommendations (cloud vendors and SAP/Oracle implementers have obvious incentives to recommend migration rather than continued IBM i investment), and an underestimation of the risk and cost of re-platforming business logic that has been running reliably for 20–30 years. SourceMash provides independent strategic assessments of IBM i futures — with no financial incentive to recommend any particular outcome, because we can serve the client well across all paths: continued IBM i investment, IBM i modernisation, IBM i to cloud hosting, or re-platform to a modern ERP.
For organisations that decide to migrate off IBM i, SourceMash provides the migration architecture and execution — data extraction from IBM i DB2 to the target system, business logic analysis and specification for re-implementation in the target ERP, parallel run validation that confirms the new system produces the same outputs as the legacy IBM i for the same inputs, and cut-over planning that minimises operational disruption. For organisations that decide to keep the IBM i but move it to a cloud or co-location environment, we manage the physical-to-virtual migration and the IBM i Power Systems cloud hosting on IBM Cloud, AWS, or Azure via IBM-certified hosting partners.
Every IBM i organisation faces this decision — here is the honest comparison across the four paths available
| Decision Dimension | Stay & Optimise (IBM i) | IBM i to Cloud | Re-Platform to Modern ERP | Hybrid Co-existence |
|---|---|---|---|---|
| Business risk during transition | ✓ Lowest | ✓ Low | ✕ Highest | Moderate |
| Total cost of change (3-year) | ✓ Lowest | Low-moderate | ✕ Highest | Moderate |
| Modern UX / web access | With modernisation investment | With modernisation investment | ✓ Native | ✓ Partial |
| Legacy business logic preserved | ✓ 100% | ✓ 100% | ✕ Must be rebuilt | ✓ Core preserved |
| Infrastructure overhead | ✕ On-premise HW to manage | ✓ Cloud-managed | ✓ SaaS or cloud-managed | Split overhead |
| Skill availability risk | ✕ IBM i skills scarce | ✕ IBM i skills scarce | ✓ Modern skill pool | Both skill sets needed |
| Recommended when | Core business logic is stable, complex, and validated | On-premise HW refresh is due; skills available | Business model has fundamentally changed; legacy logic is obsolete | Phased migration with interim parallel operation needed |
Execution services for all four IBM i strategic paths — from cloud hosting migration through re-platform to SAP or Oracle
A structured 4–8 week independent assessment of the IBM i environment — application inventory and business criticality rating, RPG source analysis for complexity and modernisation cost, integration landscape map, current IBM i operating cost (hardware, software, support, internal staff), IBM i skills risk assessment (knowledge concentration in individuals approaching retirement), and 5-year total cost of ownership comparison across all four strategic paths. Delivered as a board-level recommendation with scenario analysis for each path option.
Physical IBM i Power Systems to cloud-hosted migration — IBM Cloud for IBM i (the most architecturally clean option), native IBM i on Power hardware managed by IBM, Skytap on Azure for Power workloads, or co-location hosting with an IBM-certified hosting provider. Includes LPAR configuration, network connectivity, VPN or private connectivity to client data centres, backup and recovery in the cloud environment, and validation that all applications and integrations function correctly on the cloud-hosted IBM i before decommissioning the on-premise hardware.
IBM i DB2 data extraction and transformation for migration to a target ERP (SAP, Oracle, Dynamics 365, NetSuite) — physical file (*FILE) and logical file structure documentation, DB2 for i data extraction using ODBC/JDBC or CPYTOIMPF-based exports, data quality assessment and cleansing before migration, data mapping from IBM i physical file field definitions to the target ERP data model, and iterative load-validate cycles in the target system sandbox to confirm data integrity before production cut-over.
RPG business logic extraction and specification — the critical pre-work for any re-platform engagement that is always underestimated. The RPG programs that implement the calculation of landed cost, the standard cost rollup, the multi-warehouse stock valuation, the multi-customer pricing, or the production order completion logic contain business rules that are not documented anywhere else. Extracting, documenting, and specifying these rules for re-implementation in the target ERP is the highest-risk activity in any IBM i re-platform programme and the most important preparation for the implementation team.
Parallel run management for IBM i re-platform migrations — running the new ERP system in parallel with the IBM i for a defined period, comparing outputs for the same inputs, and resolving discrepancies before the IBM i is decommissioned. Critical for manufacturing and financial organisations where the IBM i is the system of record for inventory valuation, standard cost, and general ledger — and where discrepancies between the new system and the IBM i must be fully resolved before cut-over to avoid financial reporting gaps.
Hybrid architecture design for organisations migrating incrementally — where the IBM i continues to run manufacturing, inventory, and financial processing, while a cloud ERP takes over CRM, procurement, or HR. The integration architecture that makes this co-existence reliable: bi-directional data synchronisation between IBM i and the cloud ERP for shared master data (customer, supplier, item master), transaction routing rules that determine which system is the master of record for each transaction type, and reconciliation process that validates data consistency between the two systems on a defined schedule.
IBM i has a strong built-in security architecture — object-level authority, user profiles, special authorities, adoption of authority, and a comprehensive audit journal — that is more granular and more comprehensive than most operating systems. The challenge is that most IBM i environments were configured at a time when the primary security concern was preventing unauthorised access by internal users, and the security configuration has not been revisited as the threat landscape has changed to include ransomware, supply chain attacks through third-party software, and the compliance requirements of DPDP Act, PCI DSS, SOC 2, and ISO 27001 that mandate specific security controls that many IBM i environments do not currently meet.
IBM i security risks that are common in long-running environments include: QSECURITY system value set to level 20 or 30 rather than the recommended level 40 or 50, providing inadequate object-level access control; excessive use of *ALLOBJ special authority by user profiles that do not require it; FTP and TELNET services enabled without restriction, creating unencrypted data transmission pathways; exit program points not populated, leaving service interfaces (FTP, ODBC, DDM) accessible without application-level authentication; and the audit journal not configured for the full set of security events required by compliance frameworks. SourceMash's IBM i security practice assesses the current configuration against the CIS IBM i Security Benchmark and relevant compliance frameworks, and implements the hardening changes required to close the gaps.
Hardening, compliance, audit trail, and ongoing security monitoring for IBM i environments in regulated industries
Comprehensive IBM i security assessment against the CIS IBM i Security Benchmark — evaluating system values (QSECURITY, QPWDMLEN, QINACTMSGQ), user profile audit (special authorities, password rules, expired passwords, inactive profiles), object authority assessment for sensitive libraries and objects, service interface exposure (FTP, Telnet, ODBC, DDM enablement and exit program population), network access controls, physical partition security, and PTF currency for security-related PTFs. Output: gap list with risk rating and specific remediation steps for each finding.
Implementation of IBM i security hardening measures identified in the assessment — QSECURITY system value elevation to level 40 or 50 with regression testing to identify applications that rely on insecure object authority; special authority removal from user profiles that do not require ALLOBJ or SECADM; exit program implementation for FTP, ODBC, DDM, and SQL service interfaces to enforce application-level authentication; Telnet encryption via TLS configuration; and password policy enforcement through system values and exit program controls.
IBM i audit journal (QAUDJRN) configuration for compliance-required event categories — authority failure events (*AUTFAIL), object creation/deletion (*CREATE, *DELETE), security changes (*SECURITY), and command execution (*CMD) — and integration of audit journal data into the organisation’s SIEM (Splunk, IBM QRadar, Microsoft Sentinel) for real-time security monitoring and alerting. Audit journal data extraction programs and SIEM connectors that convert JRNAP/JRNAV audit journal format to the SIEM’s ingestion format.
IBM i PCI DSS compliance implementation for organisations that store, process, or transmit cardholder data on IBM i — network segmentation to isolate IBM i from non-CDE (Cardholder Data Environment) network segments using VLAN or firewall rules, field-level encryption of stored PAN data using IBM i’s built-in field procedures or the Townsend Alliance Key Management solution, encrypted transmission enforcement for all cardholder data flows, and process and audit trail controls required for PCI DSS requirement 10 (log all access to cardholder data and log activity).
India Digital Personal Data Protection (DPDP) Act compliance implementation for IBM i environments that store personal data of Indian residents — personal data discovery and classification in IBM i DB2 physical files, data retention and deletion workflow implementation (RPG programs that purge personal data at the end of the retention period defined for each data category), data subject access request (DSAR) fulfilment procedures for extracting a specific individual’s data on request, and audit trail configuration for personal data access events required for regulatory evidence.
Monthly IBM i security monitoring as a managed service — reviewing the QAUDJRN authority failure events for unusual access patterns, checking for new user profiles with elevated special authorities, reviewing exit program bypass attempts, validating PTF currency for security-related fixes, and producing a monthly security health report. For organisations subject to external audits (ISO 27001 surveillance audits, PCI DSS annual assessment, SOC 2 Type II), maintaining the continuous evidence of security control operation that auditors require.
The IBM i platform found its deepest adoption in manufacturing, distribution, financial services, and retail — industries where the platform's reliability, DB2 performance, and batch processing capability matched the operational requirements exactly. We bring industry-specific IBM i expertise for each.
Certified IBM i professionals across the full platform stack — from OS/400 through IBM i 7.5, RPG IV through free-format, DB2 for i through open-source integration.
We had been told for fifteen years that our AS400 was a liability we needed to replace — by SAP consultants who wanted the greenfield implementation engagement, by ERP vendors who wanted the licence revenue, and by every IT analyst report that characterised the platform as legacy. What SourceMash's assessment showed us was that our IBM i RPG programs contain 35 years of accumulated manufacturing and costing logic that would cost ₹12–15 crore to recreate in SAP, with a 30–40% risk of introduction of errors in costing and inventory valuation during the rebuild that our auditors identified as unacceptable. The recommendation was to modernise the IBM i rather than replace it. Fourteen weeks later, our shop floor operators are accessing the same RPG programs through a mobile web browser instead of a green-screen terminal. Training time for new operators is down 65%. Not a single line of RPG was rewritten. The system is faster, more accessible, and costs a fraction of what an SAP implementation would have.
Our distribution company runs on an IBM i that has been in production since 1994. Everything from order entry through picking, packing, shipping, invoicing, and accounts receivable runs on RPG programs that our previous IT team built over the years. When our last two RPG developers retired, we faced a real knowledge and continuity risk — programmes that nobody fully understood, no documentation, and no ability to make enhancements. SourceMash took over the IBM i managed support and, critically, spent the first three months documenting every major program — what it does, what files it reads and writes, what the business rules are. We now have documentation that would allow any competent IBM i developer to maintain these programs. The integration they built with Shopify and Salesforce has eliminated the 6 hours of manual data entry we were doing every day between the IBM i and our e-commerce platform.
Our PCI DSS audit had flagged IBM i as a significant gap in our compliance posture for two consecutive years — QSECURITY at level 30, FTP and Telnet enabled without exit programs, ALLOBJ authority on 47 user profiles, and no audit journal coverage for cardholder data access events. Our previous IBM i support vendor had assured us for years that "IBM i is inherently secure" and that these were low-risk findings. SourceMash's security assessment was the first time anyone had quantified the actual risk — an ODBC connection to our IBM i DB2 from outside the network was possible without application-level authentication because the exit program was not populated. That is a direct path to cardholder data without triggering any alarm. The hardening engagement elevated QSECURITY to L50, implemented exit programs on all service interfaces, and configured the audit journal for full cardholder data access logging. Our PCI DSS audit passed without a single IBM i finding. First time in three years.
Perspectives, research, and practical guidance from our enterprise technology experts.
Everything you need to know before reaching out to us.
Should we replace our AS400 / IBM i with a modern ERP or modernise it?
The replace-vs.-modernise decision is the most consequential technology investment decision most IBM i-dependent organisations face — and it is one that is routinely made based on incomplete analysis. The case for replacement is typically made by people who benefit financially from the replacement (modern ERP vendors and implementation partners) and is based on two arguments that are often overstated: that IBM i skills are becoming unavailable (true, but manageable with the right support partner), and that the IBM i cannot integrate with modern systems (false — a properly modernised IBM i with a REST API layer integrates as well as any other system). The case for modernisation is based on facts that are often underappreciated: the RPG programs running on the IBM i represent decades of accumulated business logic — manufacturing cost calculations, inventory valuation methods, pricing algorithms, financial posting logic — that is expensive and risky to recreate in a new system. In our experience across 150+ IBM i engagements, the organisations for whom replacement makes clear strategic sense are those where the business model has fundamentally changed (making the existing IBM i business logic obsolete rather than just aging), or where the IBM i application is a standard commodity ERP function (basic accounting, HR) rather than a proprietary competitive business process. For manufacturers, distributors, and financial services organisations where the IBM i implements complex, proprietary business logic that has been tuned and validated over decades, modernisation is almost always the lower-risk, lower-cost, and faster-to-value path. We will give you an honest independent assessment — including recommending replacement where the specific facts of your situation make it the right decision.
Our IBM i RPG developers are retiring. How do we manage the knowledge and continuity risk?
The retirement of long-serving IBM i developers is one of the most acute operational risks facing IBM i-dependent organisations — because those developers carry knowledge that is not written down anywhere: they know why the MRP program has the special exception logic for product category 47, they know that the cost rollup program must be run in a specific sequence after the material master update, and they know which programs write to the same DB2 physical file and must not run simultaneously. When those developers leave without a structured knowledge transfer, the organisation is left dependent on programs they cannot safely modify, cannot diagnose when they malfunction, and cannot enhance to meet new business requirements. Sourcemash addresses this risk through two parallel interventions: managed support engagement where our IBM i team becomes the day-to-day operational support resource while the existing developers are still available for knowledge transfer (overlapping their knowledge into our team before they depart), and a structured program documentation project that extracts the undocumented business logic from the RPG source code and produces human-readable documentation of what each program does, what the business rules are, and how the programs interact. This is slower and more expensive than it sounds — a complex RPG program that took 2 years to build and tune may take 3–4 weeks to fully document — but it is the only way to safely preserve the institutional knowledge that those programs represent.
Can IBM i integrate with modern cloud systems like Salesforce, SAP, and e-commerce platforms?
Yes — a properly modernised IBM i with a REST API layer is as capable of bidirectional integration with Salesforce, SAP, Oracle, Dynamics 365, Shopify, or any other modern system as any other ERP platform. The IBM i's Integrated Web Services Server (IWS) allows RPG service program procedures and DB2 stored procedures to be exposed as REST web services that any external system can call via standard HTTPS — Salesforce querying IBM i inventory in real time, Shopify creating IBM i sales orders when a web order is placed, SAP posting goods receipt to IBM i inventory on purchase order confirmation. In the other direction, IBM i RPG programs can call external REST APIs using the IBM i HTTP API functions or through Java, Python, or Node.js running on the IBM i's open-source runtime. The historical reputation for IBM i integration difficulty comes from the pre-web-services era, when IBM i integration required flat-file exchange (CPYTOIMPF), IBM MQ, or proprietary IBM i access drivers — all of which still work but require more operational overhead than a well-designed REST API layer. The integration work is real engineering effort — but the technical capability is there, and the result is an IBM i that participates fully in the modern integration ecosystem.
What IBM i OS versions are still supported by IBM, and what should we do if we are on an older version?
IBM i OS version support follows a lifecycle that organisations running older versions need to understand — because running an out-of-support OS version means no new security PTFs (patches), which is a significant compliance and operational risk. As of 2025, the IBM i OS versions in active support from IBM are 7.3, 7.4, and 7.5 (current). Version 7.2 reached end of support in April 2023 — organisations still on 7.2 are not receiving security patches and should urgently plan an upgrade. Version 7.1 and earlier (V6R1, V5R4) are also out of support. The upgrade path from older versions requires assessing whether your current hardware can support the target OS version (IBM Power Systems hardware and IBM i OS version support have a defined compatibility matrix), whether your third-party software (particularly ISV applications and middleware) supports the target OS version, and whether any custom RPG programs use deprecated APIs that have been removed in newer OS versions. We have delivered OS upgrades from V5R4 and V6R1 to 7.5 and can conduct the compatibility assessment, plan the upgrade, and execute it in a maintenance window with a tested rollback plan if the upgrade encounters problems.
How does green-screen modernisation work — and does it require rewriting our RPG programs?
Green-screen modernisation — the transformation from the 5250 terminal emulation interface to a browser-accessible web UI — does not require rewriting the RPG programs that display the screens. The modernisation approach works by intercepting the 5250 data stream between the IBM i application and the user's browser and rendering it as an HTML/CSS web interface rather than a green-screen terminal — so the RPG programs that define the screen layouts (using DSPF display file descriptions), populate the fields (using EXFMT and WRITE operations), and respond to user input (using INFDS data structures or indicator logic) continue to operate exactly as they always have. Tools like Profound UI, Genie, and HTMX-based screen modernisation solutions provide different levels of transformation fidelity: Profound UI enables full UI redesign with drag-and-drop widget replacement, responsive layout, and custom styling, while Genie provides rapid automatic modernisation with less customisation capability but faster implementation timelines. The output in both cases is a web application that runs in any browser — including mobile — without requiring 5250 emulation software, without requiring changes to the RPG source code, and without risking the business logic that the RPG programs implement. We recommend Profound UI for organisations that want a genuinely modern UX design, and Genie for organisations where the primary requirement is browser accessibility rather than UX transformation and speed of implementation is the priority.