ISO/IEC 29147:2018
What is ISO/IEC 29147:2018?
ISO/IEC 29147 provides guidelines for the disclosure of potential vulnerabilities in products and online services. It addresses how vendors should receive vulnerability reports, process them, and publish advisories. It comprises 56 controls organised across 5 domains, published by ISO/IEC, and applies in International.
How ISO/IEC 29147:2018 maps to other frameworks
All 56 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 5 domains ISO/IEC 29147:2018 groups its controls into
Where ISO/IEC 29147:2018 overlaps with the standards you already hold
What ISO/IEC 29147:2018 means in your sector
What ISO/IEC 29147:2018 means for your job
Questions people ask about ISO/IEC 29147:2018
What is ISO/IEC 29147:2018?
How many controls does ISO/IEC 29147:2018 have?
Where does ISO/IEC 29147:2018 apply?
What frameworks does ISO/IEC 29147:2018 map to?
How do I get started with ISO/IEC 29147:2018 compliance?
Query ISO/IEC 29147:2018 programmatically
ISO/IEC 29147:2018, its 56 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ISO/IEC 29147:2018 API reference and MCP config →What ISO/IEC 29147:2018 requires, control by control
Each page carries the requirement text for one ISO/IEC 29147:2018 control and what an assessor expects to see as evidence.
How ready are you for ISO/IEC 29147:2018?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.