People and machines, together
Represent users, devices, services, workloads, and applications as entities in a common identity model.
Identity & access
Atom
One model for who can do what.
Identity, authentication, and runtime authorization for people, devices, services, applications, and AI agents.
Open source Identity → policy → decision
ABSTRACT MACHINES / INFRASTRUCTURESee how it works
The purpose
The idea behind
Atom.
As systems grow, permissions spread across services, devices, and applications. Atom brings identity and access decisions into a shared control plane: who an entity is, how it authenticated, and what it can do now.
People and machines use the same identity model. Tenants, roles, policies, and resource definitions give product teams a foundation for access control, with decisions evaluated against current state and explanations available for review.
Read the documentationInside Atom
A closer look.
Explore the capabilities
and the thinking behind them.
Permissions evaluated at runtime
Evaluate the current policy state for each authorization decision, so access changes do not depend on reissuing permission-bearing tokens.
Boundaries for every tenant
Model tenants, groups, resources, and roles with explicit ownership and permission boundaries.
Understand the decision
Inspect why access was allowed or denied, and use the public API to make security part of the application workflow.
From intent to action
How it works.
A path through Atom,
one step at a time.
- 01
Model
Define the entities, resources, tenants, and actions that matter in your application.
- 02
Authenticate
Issue the credentials and sessions your people and machine clients need.
- 03
Authorize
Evaluate access against live policies and use the decision in your application.
Go further
Find your
starting point.
Read, explore, or start a conversation about what Atom could mean for your work.
Your next step
Where could
Atom take you?
Tell us about your project.
Let’s find the right way forward.