Axiomatics

Axiomatics builds a runtime authorization engine based on attribute-based access control (ABAC): instead of hardcoding role checks into every application, teams externalize access-control logic into centrally managed policies that evaluate user, resource, and environmental attributes at request time. Policy changes — a new regulatory constraint, a segregation-of-duties rule — take effect instantly across every connected application without a code deployment, which matters most for organizations with complex entitlement models in banking, insurance, government, and healthcare.

Founded in 2006 in Stockholm, Sweden, Axiomatics was one of the earliest commercial vendors built specifically around the OASIS XACML standard for attribute-based access control, and it built an 18-plus-year track record serving regulated enterprises that needed access control more granular than role-based access control (RBAC) could provide. In July 2025, Italian aerospace and defense group Leonardo acquired Axiomatics to strengthen its cybersecurity and Zero Trust portfolio; the company now operates as “Axiomatics, a Leonardo Company.”

Axiomatics pioneered commercial ABAC, but the fine-grained authorization space has since attracted newer, cloud-native challengers (Styra/OPA, Cerbos, Oso, PlainID) with more modern deployment models. Under Leonardo, Axiomatics gains a large parent’s balance sheet and distribution, but its pace of independent product innovation is now shaped by Leonardo’s broader cyber strategy rather than a standalone roadmap.