Write, compile, and evaluate ALFA authorization policies

Try ALFA in ALFA Playground. No installation required.

About the Playground

Authorization, without the setup

The ALFA Playground by Axiomatics is a free, web-based environment that lets developers, architects, and security professionals learn, write, test, and evaluate ALFA authorization policies — without installing any software.

Whether you're new to policy-based authorization or already building fine-grained access control solutions, the Playground gives you a fast, hands-on way to experiment with ALFA, see how authorization decisions are made, and explore real-world access control scenarios.

Feature list:

Write and validate ALFA policies
Learn authorization concepts through hands-on examples
Explore policy-based and attribute-based access control (ABAC) models
Test authorization scenarios and see decision outcomes in real time
Build your understanding of modern authorization architecture

How it Works

From sign-up to your first decision — in minutes

The Playground follows the same write → compile → evaluate flow as building authorization in production, just without the setup.

Steps:

Sign up: Create an account to get started.
Start writing: Use the ALFA editor, or load a built-in sample policy to explore right away.
Compile: Compile your policy to check it's valid and ready to evaluate.
Build a Request: Add subject, action, resource, and environment attributes to simulate a real access request.
Evaluate: Run the request against your policy and see the decision.
Visualize: Switch to Graphical Policy View to see your policy's structure at a glance.

Take Me to the Sign up Page

Start with a Real-world Example

Not sure where to begin? The Playground comes with ready-to-run sample policies covering common access control scenarios. Each one is a working policy you can compile, evaluate, and modify.

Consultant Location Access

Permit consultants only when the user's and resource's locations match.

Document Sensitivity Access

Permit employees to access public documents, and managers to access confidential ones.

Payment Approval Workflow

Deny blocked payments first, then permit owners or approvers for different actions.

Healthcare Break-glass Access

Permit assigned clinicians, with a separate rule allowing emergency access when needed.

How We Handle Your Data

Your Session, Your Data

While you're using it

Your policy data stays in your browser while you're logged in — nothing is stored on our servers. Sessions last up to 14 days, and page reloads and logging out clears everything, so export first if you want to keep your work.

If you opt in to help improve ALFA Playground (optional)

With your permission, we may keep some policy content — always fully anonymized, with no link to you or your account — to help us understand how the Playground is used and improve ALFA and our products. You're in control: you can withdraw permission anytime by emailing legal@axiomatics.com.

Read our Playground Terms & Conditions for full details.

Ready to Write Your First Policy?

Free. No install. Get your first authorization policy running in minutes — with our ready-to-run sample policies, or start from scratch.

Sign up Now

FAQs

What is ALFA?

Abbreviated Language for Authorization (ALFA) is a high-level, human-readable language for defining access control policies. It simplifies the creation and management of authorization rules by offering a more concise and intuitive syntax, compiling it into XACML, and helping you write, read, and maintain complex policy logic more easily.

Who can use the Playground?

Anyone who wants to learn ALFA and how fine-grained, policy based access control works. Sign up with your company email.

Is my data stored, and for how long?

By default, no. Your policy data stays in your browser while you're logged in and isn't stored on our servers. Sessions stay active for up to 14 days, page reloads and logging out clears everything immediately — so export your work first if you want to keep or continue it later. If you opt in to "Help improve the ALFA Playground," some anonymized policy content may be retained, but it's never linked to you or your account.

Does it replace Axiomatics products?

No. The Playground is designed for learning, experimentation, and testing small scenarios. For production authorization, Axiomatics provides additional capabilities such as attribute connectors, integration with enforcement points in your applications and more. Learn more: Axiomatics Authorization Platform page

Where do I report bugs?

Use the "Give Feedback" button inside the Playground to report issues.

Cookie	Syfte	Lagringstid
consents	Används för att hantera samtycke	1 år
__hssrc	Närhelst HubSpot ändrar sessionscookien, ställs denna cookie också in för att avgöra om besökaren har startat om sin webbläsare.	Session

Cookie	Syfte	Lagringstid
__hssc	För att lagra anonymiserad statistik.	30 minuter
_gcl_au	För att lagra och spåra konverteringar.	3 månader

Cookie	Syfte	Lagringstid
__hstc	För att lagra besökstid.	6 månader
hubspotutk	För att lagra och spåra en besökares identitet.	6 månader

Product

Company