AXA XL has acquired S-RM, a global intelligence and cyber security consultancy, for an undisclosed amount. The transaction brings the specialist advisory firm under the ownership of the insurance and reinsurance company, marking a move to expand AXA XL’s capabilities in risk management and response services.
S-RM, founded in 2005, employs more than 400 practitioners across nine international offices. The firm provides intelligence for investment decisions, partnerships, and disputes, alongside cyber security consulting and crisis response. Its client base spans major sectors and regions, with a focus on delivering direct, objective advice. AXA XL, a division of AXA, offers property, casualty, and specialty insurance products, and has been building out its risk consulting and mitigation services in recent years.
The acquisition is strategic for AXA XL as it seeks to deepen its offerings in cyber risk and corporate resilience. By integrating S-RM’s investigative and response expertise, the insurer can better support clients before, during, and after cyber incidents or operational crises. For S-RM, joining AXA XL provides access to a broader global platform and a larger client network, potentially accelerating its growth in existing and new markets.
The deal is expected to create operational synergies by combining S-RM’s advisory and response teams with AXA XL’s insurance underwriting and claims processes. This could lead to more integrated solutions for policyholders, particularly in cyber insurance, where pre-incident intelligence and rapid response are increasingly valued. Both companies have indicated that S-RM will continue to operate with its current leadership and brand, preserving its independent client focus.
The combined entity will now offer a more comprehensive suite of risk services, from threat assessment to financial protection and incident recovery. As cyber threats and geopolitical uncertainties grow, the integration positions AXA XL to deliver end-to-end support, while S-RM gains the scale to expand its reach. The completion of the acquisition is subject to customary regulatory approvals.

