Odense, Denmark, 27th January 2026, open-source .NET CMS platform vendor, Umbraco, has announced that it has achieved ISO 27001/IEC:2022 certification.

ISO 27001 is an internationally recognized accreditation standard used to verify that an organization’s information security management system aligns with international best practices for its industry.

ISO 27001 provides a proven framework for:

  • Identifying and managing security risks
  • Ensuring consistent and documented security practices
  • Creating accountability and transparency across teams
  • Continuously reviewing and updating security as products and organizations evolve

The ISO 27001 audit and certification applies specifically to Umbraco’s product organization.

Achievement of the certification follows an extensive audit of Umbraco’s people, processes, and technologies by an independent security specialist. The ISO 27001 accreditation shows that Umbraco has demonstrated its ongoing commitment to maintaining the confidentiality, integrity and availability of sensitive data within its products.

Umbraco CEO, Mats Persson, notes that ISO 27001 certification supports the implementation of the Umbraco CMS and associated products by larger, multinational organizations and companies operating in regulated industries.

Umbraco CEO, Mats Persson

We already implement robust information security processes to comply with the NIS2 Directive and EU Cyber Resilience Act. ISO 27001 certification provides our global partners and customers with the reassurance that Umbraco follows international best practices governing the way that our products process, store, and protect sensitive data,” says Persson.

Gaining the ISO 27001 certification shows that independent auditors have scrutinised the processes used to develop, operate, and maintain Umbraco products, and confirmed that the company reviews and manages security risks on an ongoing basisThis is a milestone on a continuous security journey.” 

About Umbraco:

Founded in 2003,Umbraco is the most widely-used open-source content management system built on Microsoft .NET. Umbraco’s user-friendly CMS seamlessly integrates with third-party applications to provide unparalleled flexibility and extensibility, empowering organizations to create bespoke websites and digital solutions tailored to their exact needs. Its intuitive interface simplifies web content management for editors. The combination of open source, usability, extensibility, and scalability provides organizations of all sizes with a cost-effective, future-proof platform that grows with their business and offers impressive time-to-market for new digital solutions. Umbraco Cloud offers enterprise-level scalability, with regional hosting.

Umbraco’s success lies in the open-source model, a highly-engaged community of more than 250,000 developers and users, and a well-established global partner network of digital agencies.

Headquartered in Odense, Denmark, with offices in the USA, UK, and Australia, Umbraco employs 150+ people.