Axiomatics Blog : Attribute Based Access Control (ABAC)
Stay in the know on the latest in authorization, attribute-based access control (ABAC), and modernizing your access control strategy.
All articles
How authorization fits in the OWASP MCP top 10
Wednesday, April 22nd, 2026
Reading Time: 7 minutes
Reading Time: 7 minutes
Learn the different OWASP MCP risks to practical authorization controls for securing, monitoring, and auditing AI systems.
Read the articleMigrating from Styra DAS to Axiomatics: What enterprises need to know
Thursday, December 18th, 2025
Reading Time: 4 minutes
Reading Time: 4 minutes
While OPA enables ABAC through Rego, Axiomatics delivers ABAC as a first-class, centrally governed capability with built-in policy lifecycle management, auditability, and standard-based interoperability.
Read the article5 regulations in North America and how ABAC helps meet requirements
Wednesday, September 24th, 2025
Reading Time: 3 minutes
Reading Time: 3 minutes
North American organizations are pressured to keep up with compliance requirements, which increasingly calls for smarter ways to manage access.
Read the article5 regulations in Europe and how ABAC helps
Wednesday, July 16th, 2025
Reading Time: 4 minutes
Reading Time: 4 minutes
Learn the five, critical European regulations and how ABAC facilitates compliance through practical examples.
Read the articleHow authorization can help limit the risk of role explosion
Tuesday, May 27th, 2025
Reading Time: 3 minutes
Reading Time: 3 minutes
Role explosion can happen before organizations realize it's a risk. Learn how policy-driven authorization can help.
Read the articleBeyond MFA: Limit the blast radius with ABAC
Monday, May 5th, 2025
Reading Time: 6 minutes
Reading Time: 6 minutes
Learn how a robust authorization strategy can become a powerful deterrent to today’s most sophisticated cyber threats.
Read the articleThe authorization alphabet soup: What do all these letters mean?
Wednesday, April 30th, 2025
Reading Time: 8 minutes
Reading Time: 8 minutes
In the identity and access management space, there are a LOT of acronyms. ABAC, PBAC, RBAC, ReBAC. Learn what they mean and how they're used.
Read the articleSecure your RAG: Where to start?
Monday, March 24th, 2025
Reading Time: 6 minutes
Reading Time: 6 minutes
To minimize the risks with RAG, organizations must implement access control that ensures AI systems operate within secure and controlled parameters.
Read the articleHow ABAC can help solve the JML problem
Wednesday, February 26th, 2025
Reading Time: 4 minutes
Reading Time: 4 minutes
The Joiner, Mover, and Leaver problem is a decades old issue enterprises are still looking to solve. See how attribute-based access control can fix it.
Read the article5 steps to get started with policy-based authorization
Wednesday, November 13th, 2024
Reading Time: 4 minutes
Reading Time: 4 minutes
Implementing ABAC can transform how and org handles data. Though it may seem overwhelming at first, implementation is simpler than you think.
Read the articleThe haunting disadvantages of isolated authorization: Why policy-driven authorization is a treat
Thursday, October 31st, 2024
Reading Time: 3 minutes
Reading Time: 3 minutes
Dive into the disadvantages of isolated authorization and discover how policy-driven authorization can help you avoid the pitfalls of an isolated approach.
Read the articleAxiomatics: Leading the charge in authorization innovation
Tuesday, October 22nd, 2024
Reading Time: 3 minutes
Reading Time: 3 minutes
How we began as a small team of researchers to emerge as an innovator in access control, paving a bold path for the future.
Read the articleAuthZzzz – Why our policy-driven authorization should help you sleep at night
Tuesday, July 30th, 2024
Reading Time: 2 minutes
Reading Time: 2 minutes
How our customers rest easy knowing that our solution and deployment strategy delivers - no matter how complex their environment
Read the articleThe best and simplest way to explain authorization
Wednesday, July 3rd, 2024
Reading Time: 5 minutes
Reading Time: 5 minutes
CPO Mark Cassetta shows how authorization takes a fine-grained approach to access control where authentication alone cannot.
Read the articleIt’s time to take a holistic approach to cybersecurity by rethinking policies
Tuesday, April 30th, 2024
Reading Time: 2 minutes
Reading Time: 2 minutes
Solving cybersecurity threats shouldn’t be seen as discrete. Rather it is important to take a holistic approach to achieve the overall result of cybersecurity.
Read the articleQ&A: Auditing and Authorization
Tuesday, February 6th, 2024
Reading Time: 6 minutes
Reading Time: 6 minutes
David Brossard and Matt Luckett discuss how policy-driven authorization can help improve auditing.
Read the articleHandling multi-valued attributes in ALFA – How “bag” can it get?
Friday, February 2nd, 2024
Reading Time: 3 minutes
Reading Time: 3 minutes
See how you can leverage the power of ALFA to help your Policy Decision Point (PDP) handle multi-valued attributes.
Read the articleThe future of work, or work today, requires access control
Thursday, January 11th, 2024
Reading Time: 3 minutes
Reading Time: 3 minutes
As the world shifts to being remote there is an importance placed on collaboration. This shift requires access control to make the experience frictionless.
Read the articleManual access recertification is tedious and ineffective. So…why do we still ask managers to do this?
Tuesday, December 12th, 2023
Reading Time: 3 minutes
Reading Time: 3 minutes
A look into the manual recertification process and the extremes companies think to go to to ensure the process is done correctly.
Read the articleQ&A: Critical infrastructure and policy-driven authorization with Mark Cassetta
Thursday, December 7th, 2023
Reading Time: 4 minutes
Reading Time: 4 minutes
Mark Cassetta discusses how policy-driven authorization reduces cyber risks that critical infrastructure organizations face in a modern world.
Read the articleWhat can the travel industry do to prevent another Southwest outage
Wednesday, November 29th, 2023
Reading Time: 3 minutes
Reading Time: 3 minutes
The holiday season is one of the busiest travel times each year. As traveling picks up, organizations must prioritize modernizing their cybersecurity strategy.
Read the articleWhat is cloud-native authorization and why should I care?
Monday, November 20th, 2023
Reading Time: 3 minutes
Reading Time: 3 minutes
Cloud-native software is a priority for enterprises. Learn what the biggest challenge along the cloud-native authorization journey and how to solve it.
Read the articlePlaybook drilldown: Deployment methodology
Tuesday, November 14th, 2023
Reading Time: 3 minutes
Reading Time: 3 minutes
We’ve pulled together a few questions we often ask that identify core priorities for a policy-driven authorization deployment.
Read the articlePlaying by the book: Authorization
Wednesday, November 1st, 2023
Reading Time: 3 minutes
Reading Time: 3 minutes
While enterprises are acknowledging the importance of authorization, there is still a lack of understanding of what authorization really is.
Read the article