← Back to database

Predaxia Research

Magnet AXIOM

Magnet Forensics · Canada

ActiveThoma Bravo 2023Grayshift 2024
3

Confidence 3/5

VendorMagnet Forensics Inc.
Country of originCanada (Waterloo, ON)
Founded2010
FounderJad Saliba (ex-Waterloo Regional Police ICAC Unit)
Current statusActive. Private since April 2023 (Thoma Bravo)
US Entity ListNo
AcquisitionsGrayshift (GrayKey) acquired March 2024
Predaxia GlossaryWhat it means in practicePlain-English explainer · Threat model · Action steps

Technical capabilities

Magnet AXIOM is a full-spectrum digital forensics suite. Unlike GrayKey, which is dedicated to passcode bypass and physical extraction, AXIOM is an analysis and acquisition platform that ingests data from computers, mobile devices, cloud services, vehicles and IoT endpoints, then surfaces artifacts for investigators.

Modules include Magnet AXIOM Cyber (incident response), AXIOM Process (acquisition), AXIOM Examine (analysis), and integrations with Magnet OUTRIDER (triage) and the Grayshift GrayKey appliance for AFU/BFU device unlock since the March 2024 acquisition. Cloud acquisition supports Google Workspace, Microsoft 365, iCloud, Amazon Web Services and major social platforms subject to account credentials or tokens.

Documented use

AXIOM is widely deployed in routine law-enforcement digital forensics and corporate incident response. It has been cited in court testimony, regulatory filings, and security industry publications. Magnet Forensics estimates more than 5,000 law-enforcement and corporate customers across 90+ countries in pre-privatization annual reports.

Unlike Pegasus or Predator, AXIOM does not provide remote zero-click capability. It depends on lawful seizure or authenticated cloud access. Documented misuse against journalists or dissidents has not surfaced in public reporting.

Customer states

Public procurement records and press releases identify customers across Five Eyes nations, most EU member states, Japan, South Korea, Australia and many Latin American jurisdictions. Magnet has stated compliance with Canadian export controls under the Export and Import Permits Act.

Legal and procurement status

  • Not on the US Department of Commerce Entity List.
  • Taken private by Thoma Bravo in April 2023 for approximately CAD 1.8B.
  • Acquired Grayshift (GrayKey) in March 2024 for $148M cash plus stock.
  • Subject to Canadian export-control review for sales to certain destinations.

Technical countermeasures

  • Full-disk encryption: macOS FileVault, Windows BitLocker, LUKS on Linux. Forces AXIOM into requiring credentials or recovery keys.
  • VeraCrypt containers: hidden volumes within encrypted disks reduce surface for forensic recovery.
  • Tor Browser: leaves minimal local artifacts compared to standard browsers.
  • Cloud account hardening: hardware security keys, app-specific passwords, periodic session revocation.
  • Encrypted messaging: Signal with disappearing messages reduces forensic recoverable content.
  • Wiped devices: zero-fill and re-encryption of unused storage reduces residual artifact recovery.
For at-risk individuals. AXIOM and similar digital forensics platforms cannot extract data they were never given access to. Strong encryption, hardware keys, and disciplined cloud account hygiene defeat most lawful-seizure pipelines.

Sources

  1. Magnet Forensics, Grayshift acquisition press release (March 19, 2024)
  2. Reuters, Thoma Bravo takes Magnet Forensics private (January 2023)
  3. Bloomberg, Magnet Forensics privatization coverage
  4. Forensic Focus, Industry analysis of AXIOM platform
  5. Government of Canada, Export and Import Permits Act
  6. Magnet Forensics, Annual reports (pre-privatization SEDAR archive)

Update log

March 27, 2026: First publication. Sourced from Magnet Forensics public filings and press releases, Reuters and Bloomberg reporting on the Thoma Bravo transaction, and the Grayshift acquisition announcement of March 2024.

There’s no perfect setup. Anyone selling you perfect is selling fear. The goal is simple: make yourself a harder target than the person next to you.