Early access. This site has moved to bugrater.com.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.

All vendors Microsoft 12,233 Apple 9,322 Google Chrome 3,682 Mozilla 2,401 Drupal 1,973 Jenkins 1,545 NVIDIA 901 GitLab 590 Apache 380 Red Hat 302 FreeRDP 264 Frappe 205 Roundcube 180 Palo Alto Networks 173 Gitea 126 Eclipse Foundation 103 ImageMagick 81 Sgl-project 79 Open-webui 79 OpenBSD 70 OpenSSL 60 Hewlett Packard Enterprise (HPE) 55 Totolink 51 Getgrav 50 Zulip 42 Progress Software 42 Wazuh 40 QNAP Systems Inc. 39 Hickory-dns 37 Curl 36 Thorsten 35 Linux 33 SourceCodester 33 Mtrudel 30 Surrealdb 30 Netcore 29 N8n-io 29 Undici 29 SQLite 29 Rclone 28 Wavlink 27 Webkul 27 Hexpm 26 Zitadel 26 YesWiki 26 Advantech 25 ThemeREX 25 WatchGuard 25 Go-vikunja 24 Craftcms 24 Moodle 24 Mattermost 23 Sensiolabs 23 Jishenghua 23 Linksys 23 SemanticMediaWiki 23 Kyverno 23 Crocoblock 23 Zoom 23 Admidio 22 TP-Link Systems Inc. 21 Progress Software Corporation 21 OpenIdentityPlatform 21 Brainstorm Force 21 ZcashFoundation 21 Typo3 21 Djangoproject 20 LogicalDOC 20 Gnome 20 Splunk 20 Letta-ai 18 Liquid Web / StellarWP 18 GNU 18 Themeum 18 Redaxo 17 NLnet Labs 17 weDevs 17 Ggml-org 16 Grokability 16 Potatosalad 16 bPlugins 16 Diem-project 16 Edgelesssys 16 @sveltejs 16 Vllm-project 15 Cozmoslabs 15 Traefik 15 Dromara 15 Docker 15 AM System 15 Libyal 15 Sunhillo Corporation 15 Eosphoros-ai 15 Erlang 15 HashiCorp 14 ThemeGrill 14 X.org 14 Openpanel-dev 14 Unclecode 14 VideoWhisper.com 14 Dell 14 Itsourcecode 13 Opencats 13 phpMyAdmin 13 Arraytics 13 SolarWinds 13 Dalibo 12 Shenzhen Shine Industrial Co., Ltd. 12 Froxlor 12 BMC 12 WP ManageNinja LLC 12 ThimPress 12 Ginlix-ai 12 TrueBooker 12 Tigroumeow 12 VillaTheme 12 Siyuan-note 12 Agno-agi 12 Edimax 12 Coze-dev 12 E4jvikwp 11 boneIO 11 Progress 11 Netpbm 11 GeoDirectory 11 GiveWP 11 Thelia 11 Code-projects 11 The GNU C Library 11 Erzhongxmu 11 Magepeople inc. 11 GitoxideLabs 11 Nvm-sh 11 MISP 10 WP Chill 10 Control Web Panel 10 Sabbatic 10 Better-auth 10 Oray 10 Xen 10 Vraj404 10 Google 10 A2aproject 10 GeoVision Inc. 10 HMS Networks 10 RT-Labs 10 ZKTeco 10 Krupalshah 10 Rdesktop 10 Wpeverest 9 Php-web-design.com 9 FolioVision 9 Otrs 9 Iflytek 9 FFmpeg 9 SMCI 9 Kameleo 9 Oretnom23 9 Kiloview 9 FasterXML 9 myCred 9 TeamViewer 9 DrayTek 9 WPGraphQL 9 Guchengwuyue 9 Wpmudev 9 Darylldoyle 9 H3C 9 Sonatype 9 NocoDB 9 Finsys 8 WPVibes 8 Moxi624 8 Zen Cart 8 VideoLAN 8 PluginUs.Net 8 SonicWall 8 Fast-uri 8 Gedelumbung 8 WP Desk 8 SUSE 8 Cure53 8 Paoltaia 8 YITH 8 Tencent 8 Opnsense 8 Nextcloud 8 Satya-vinay 8 Delta Electronics 8 Erik Debye 8 Dav-ee 8 Snap Finance 8 FV Flowplayer Video Player 8 GitroomHQ 7 A2ui-project 7 Google Cloud 7 1Panel-dev 7 Aspose 7 Deepseek-ai 7 Themeisle 7 Bytecodealliance 7 OpenText 7 Scribus 7 TPC Software 7 Subhajitkhan 7 Wpmu Dev 7 Smub 7 Johnson Controls 7 HivePress 7 Davidanderson 7 Apereo Foundation 7 Nozomi Networks 7 Latepoint 7 OpenBMB 7 10web 7 Grafana 7 Uselotus 7 TDuckCloud 7 PT Norther Lights Production 7 Mathurvishal 7 Macrozheng 7 Sahlberg 7 Rapid7 7 Python Software Foundation 7 WC Lovers 7 GDATASoftwareAG 6 Grandnode 6 RT-Labs AB 6 Peterschulznl 6 Camunda 6 Eptura 6 Ash-project 6 Mamunur Rashid 6 WPExperts 6 D-Link 6 Petpooja 6 BdThemes 6 Parse-community 6 Stylemix 6 Mistralai 6 Ifso 6 WPManageNinja 6 nh4tvd 6 HuLaSpark 6 WP User Manager 6 Hisense 6 Nodemailer 6 StylemixThemes 6 Essential Real Estate 6 Pgadmin.org 6 ACF Extended 6 Handnot2 6 ASUS 6 David Lingren 6 Directorist: AI-Powered Business Directory, Listings & Classified Ads 6 Codepeople 6 Vtk 6 Fireware OS 6 Dolibarr 6 WolfVision 6 Contact Form by Supsystic 6 Realmag777 6 Document Gallery 6 DataEase 6 Semcms 6 Wpdevteam 6 TÜBİTAK BİLGEM Software Technologies Research Institute 6 Openremote 6 Jellyfin 6 Hwk-fr 6 HeyCyan App 6 Benoitc 6 Krayin 6 AzuraCast 6 Qcam 6 TMS 6 Project-MONAI 6 Foxit Software Inc. 6 Sunkaifei 6 Fraunhoferhhi 6 Jetmonsters 5 Micromatch 5 AxxonSoft 5 Thalesgroup 5 miniOrange 5 esaqa GmbH 5 ProFTPD Project 5 CGM 5 WuKongOpenSource 5 GPAC 5 Cloudflare 5 Essential Addons for Elementor 5 Elixir-lang 5 Automattic 5 Imgproxy 5 CozyThemes 5 Artbees 5 SEPPmail AG 5 Jarun 5 Libimobiledevice 5 Otter Blocks 5 Librenms 5 Blender Foundation 5 Vtenext 5 Yangzongzhuan 5 Cakephp 5 YunaiV 5 Meetecho 5 Tomdever 5 WProyal 5 LeapWorx 5 Octopus Deploy 5 Unlimited Elements 5 WPDeveloper 5 Multivendorx 5 Ag-ui-protocol 5 Gravity Forms 5 DedeCMS 5 Arketeam 5 Libexpat 5 Cesnet 5 Gen Digital 5 Acronis 5 Espocrm 5 DeepPavlov 5 Tenda 5 Magepeopleteam 5 Moxa 5 Netis 4 Jovancoding 4 Advanced Custom Fields (ACF®) 4 WebPros 4 zhimaAi 4 Kodezen 4 NXP 4 ExpressTech 4 Koozali 4 WatchGuard Fireware OS 4 Kstover 4 Nkoriyama 4 FaveoSuite 4 Netty 4 Libtins 4 Dj-extensions.com 4 Nexbox 4 WPvivid — Backup, Migration & Staging 4 PostgreSQL 4 FacturaScripts 4 Ministry of Justice General Directorate of Information Technology 4 Pbuchbinder 4 ElementsReady Addons for Elementor 4 Bytebase 4 Hotel Booking 4 Properfraction 4 Francoisjacquet 4 Shapedplugin 4 Emersion 4 WPVR 4 Secure Custom Fields 4 Icagenda.com 4 Media Library Assistant 4 Harfbuzz 4 HAVELSAN Inc. 4 LaraDashboard 4 aaPanel 4 Danoli3 4 Purocean 4 Wuxi Wubang Security Software 4 CervantesSec 4 Qihoo 360 4 Eleveo 4 WPFunnels Team 4 BlackBeltTechnology 4 Tata Motors 4 Houtini-ai 4 SPIP 4 Easy Property Listings 4 Ztxz16 4 Yungengxin 4 The EPICS Community 4 Hankcs 4 All-in-One Video Gallery 4 Igor Funa 4 Coupa 4 Hupe13 4 NationalSecurityAgency 4 WWBN 4 Litespeedtech 4 Melograno 4 eLightUp 4 Opensource-socialnetwork 4 Jetbrains 4 Wpsoul 4 Westboy 4 impleCode 4 Moodle Project 4 Infiniflow 4 Icret 4 Royal Addons for Elementor 4 Aguila Technologies 4 Campcodes 4 Boldgrid 4 AWS 4 WebberZone 3 Xnau webdesign 3 CoreUnion 3 Zmister2016 3 Surecart 3 Easysoft 3 Open5gs 3 MB Custom Post Types & Custom Taxonomies 3 Pretix 3 Pipeshub-ai 3 Romkatv 3 Elementor 3 Studio-Saelix 3 Royal MCP 3 Spacetime 3 Dayrui 3 Blazethemes 3 Mmitch 3 RelyWP 3 ThemeHigh 3 Team-alembic 3 OpenStack 3 Ahmad 3 GStreamer 3 Surfer 3 Saadiqbal 3 Oqtane 3 AyeCode Ltd 3 GitHub 3 Centreon 3 Owen2345 3 Agentscope-ai 3 Teamfunnelkit 3 Blueprintue 3 Beam-cloud 3 Yoosee 3 Ninenines 3 Prasathmani 3 Best Practical Solutions 3 Tribulant Software 3 BuddyForms 3 Frangoteam 3 PublishPress 3 WP Mailster 3 Welcart e-Commerce 3 Phoenix Contact 3 Everest Forms 3 Phpipam 3 Stiofansisland 3 Alexandregz 3 Webmin 3 Meow Apps 3 Wpmet 3 WebToffee 3 Yaycommerce 3 PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes 3 Gz-yami 3 LiteSpeed Cache 3 Pie Register 3 Kubernetes 3 Forgejo 3 Webasyst 3 Outline 3 Uscnanbu 3 Gemini Labs 3 Coder 3 Quickjs-ng 3 Huawei 3 Canva 3 Travisun 3 Krajowa Izba Rozliczeniowa 3 VertiGIS Ltd. 3 I.r.i.s S.a. 3 Premium Packages 3 Razorpay for WooCommerce 3 Osamaesh 3 Libsdl-org 3 C97net 3 Elunez 3 Jupyterlab 3 Go standard library 3 Kali Forms — Contact Form & Drag-and-Drop Builder 3 Link Library 3 Photo Engine (Media Organizer & Lightroom) 3 Maccmspro 3 WIT 3 Keywordrush 3 Sanluan 3 Cloud Foundry 3 Webba Plugins 3 Plugins360 3 Themefusion 3 Xxyopen 3 Lavalite 3 Argilla 3 Kaliforms 3 Supsystic 3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution 3 WSO2 3 Optimole 3 Wpchill 3 Presenton 3 Y 2 Checkmk GmbH 2 SuiteCRM 2 Twisted 2 Spesmilo 2 ArcadeData 2 Tornadoweb 2 Lightdash 2 Bricks 2 Fortinet 2 Glpi-project 2 Qt 2 Neo4j 2 Zyxel 2 DBeaver 2 Delinea 2 Radareorg 2 Stirling-Tools 2 David-Crty 2 Rustls 2 Zohocorp 2 Ericsson 2 Mlflow 2 Balbooa.com 2 Gfi Usa, Llc 2 MikroTik 2 INFINITT Healthcare 2 Openemr 2 Zakład Ubezpieczeń Społecznych 2 Element-hq 1 Stormshield 1 ServiceNow 1 Turboderp-org 1 Zephyrproject 1 Ultralytics 1 Snowflake 1 Strapi 1 Honojs 1 Mobile builder 1 Kubeflow 1 Immich-app 1 Bitdefender 1 FOSSBilling 1 C4illin 1 Modelcontextprotocol 1 Ziroom 1 Sveltejs 1 Hapijs 1 RankMath 1 The HDF Group 1 The Wikimedia Foundation Mediaw 1 Chamilo 1 Ntop 1 Bubka 0 Systemd 0 Digitalbazaar 0 The-40-Thieves 0 Espressif 0 Eugeny 0 Cacti 0 GestSup 0 Yeti-platform 0 Argoproj 0 Aio-libs 0 Pavel-odintsov 0 Cisco 0 DevaslanPHP 0 Keil 0 Anthropics 0 Unisoc (Shanghai) Technologies Co., Ltd. 0 openGauss-server 0 Trusted Domain Project 0 Okta 0 HAProxy 0 LabRedesCefetRJ 0 Esri 0 Owasp-modsecurity 0 Apostrophecms 0 Alpine 0 Jenkins Project 0 Markdown-it 0 Https://github.com/curl/curl 0 Amazon 0 Ubiquiti Inc 0 About Time Technologies 0 Go-jose 0 Imagination Technologies 0 Sebhildebrandt 0 Mautic 0 IBM 0 Python-pillow 0 Samsung Semiconductor 0 Nodejs 0 LibreDWG 0 Chartbrew 0 Yamaha Corporation 0 AMD 0 Open-quantum-safe 0 Part-DB 0 Enspirit 0 Openwrt 0 Eaton 0 Christianhelle 0 Tesseract-ocr 0 Oracle Corporation 0 Angular 0 YS-infoware 0 Signalwire 0 Kernel 0 Follow-redirects 0 Roostorg 0 Tinyhumansai 0 Kvcache-ai 0 Readest 0 Asterisk 0 Vitejs 0 Zephyrproject-rtos 0 Labstack 0 Juniper Networks 0 Libxml2 0 Authlib 0 Quest 0 Open-reception 0 Isomorphic-git 0 Ultravioletrs 0 FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. 0 Hewlett Packard Enterprise 0 Microsoft Corporation 0 Randombit 0 Highcharts 0 Elastic 0 Hitachi 0 Xibosignage 0 OpenPrinting 0 Franklioxygen 0 GROWI, Inc. 0 Zip-rs 0 Ardatan 0 Openvm-org 0 Jgraph 0 Welotec 0 Nuxt 0 Linux Kernel 0 Oauthlib 0 Socfortress 0 Koxudaxi 0 DataDog 0 Pypa 0 Devolutions 0 Hitachi Energy 0 Tsparticles 0 Gpustack 0 Cesanta 0 Util-linux 0 GeoNode 0 JeromeDevome 0 Gnutls 0 Yealink 0 OpenVPN 0 Freescout-help-desk 0 Jhuckaby 0 Open-wanderer 0 Absolute Software 0 Rgrove 0 Veeam 0 Py-pdf 0 Eyeplus 0 NetApp 0 Samsung 0 Openldap 0 Vitest-dev 0 Tanium 0 Perforce 0 E2fsprogs 0 HCL 0 Autodesk 0 Lxsmnsyc 0 Capricorn86 0 Pyasn1 0 H2o 0 Siemens 0 Python 0 Libexpat project 0 Esa 0 Sysadminsmedia 0 Intel(R) Processors 0 Mljar 0 Onnx 0 Intranda 0 Langchain-ai 0 Mariadb-corporation 0 NewType Infortech 0 HCLSoftware 0 Tox-dev 0 LY Corporation 0 MongoDB 0 Shopperlabs 0 Dassault Systèmes 0 Trellix 0 Zuke-build 0 Pi-hole 0 Unisoc 0
500 researchers
#1
Google
2,758 credits 1450 CVEs Jul 2026 → Nov 2026
2758 CVE
2,758
credits
#2
Mozilla
1,129 credits 243 CVEs 2 vendors Aug 2026 → Nov 2026
1129 CVE
1,129
credits
#3
Anonymous
661 credits 661 CVEs 2 vendors Jun 2026 → Oct 2026
1 CVE 660 other
661
credits
#4
0ccbbf129444eb66344ccafb92b00df4
523 credits 263 CVEs May 2026 → Oct 2026
263 CVE 260 other
523
credits
#5
yhw
370 credits 289 CVEs Jun 2026 → Oct 2026
289 CVE 81 other
370
credits
#6
hieuPenguinnn
325 credits 319 CVEs 234 vendors Oct 2026 → Nov 2026
325 CVE
325
credits
#7
Peter Malone
268 credits 55 CVEs May 2026 → Oct 2026
259 CVE 9 recognition
268
credits
#8
Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
263 credits 38 CVEs May 2026 → Oct 2026
245 CVE 18 recognition
263
credits
#9
HaiND from the Post and Telecommunication Institute of Technology
259 credits 245 CVEs 170 vendors Oct 2026 → Nov 2026
259 CVE
259
credits
#10
Billy Jheng Bing Jhong
259 credits 37 CVEs 2 vendors May 2026 → Oct 2026
241 CVE 18 recognition
259
credits
#11
Zhiniang Peng with HUST
240 credits 226 CVEs May 2026 → Oct 2026
227 CVE 13 other
240
credits
#12
Thanatos Tian (HKPolyU)
224 credits 219 CVEs 2 vendors Jun 2026 → Oct 2026
224 CVE
224
credits
#13
Daniel Beck, CloudBees, Inc.
222 credits 185 CVEs Feb 2018 → Sep 2026
204 CVE 18 other
222
credits
#14
haowei yan
219 credits 148 CVEs Jun 2026 → Oct 2026
148 CVE 71 other
219
credits
#15
Pwnforr777
209 credits 105 CVEs Jun 2026 → Oct 2026
104 CVE 105 other
209
credits
#16
txz
207 credits 207 CVEs Jun 2026 → Oct 2026
207 CVE
207
credits
#17
yhw & txz
199 credits 199 CVEs Jun 2026 → Oct 2026
199
credits
#18
Seung Chan Kim
194 credits 97 CVEs Jun 2026 → Oct 2026
97 CVE 97 other
194
credits
#19
AIフィジカルインターフェイス二号機
179 credits 90 CVEs May 2026 → Oct 2026
90 CVE 89 other
179
credits
#20
Jmini
178 credits 91 CVEs Jul 2026 → Oct 2026
91 CVE 87 other
178
credits
#21
stratan (@5tratan)
162 credits 21 CVEs Jul 2026 → Oct 2026
155 CVE 7 recognition
162
credits
#22
pwn2addr
160 credits 81 CVEs 3 vendors May 2026 → Oct 2026
81 CVE 79 other
160
credits
#23
Yaqi Chao
160 credits 137 CVEs 10 vendors Oct 2026 → Oct 2026
160 CVE
160
credits
#24
OpenAI Codex Security (kylebot)
152 credits 39 CVEs 2 vendors Oct 2026 → Nov 2026
152 CVE
152
credits
#25
Marcus Johansson (marcus_johansson)
149 credits 64 CVEs Aug 2026 → Nov 2026
144 CVE 5 other
149
credits
#26
41ae55e9310ff27fa6f26af4727e5590
144 credits 72 CVEs Jun 2026 → Oct 2026
72 CVE 72 other
144
credits
#27
Nathaniel Oh (@calysteon)
134 credits 41 CVEs 2 vendors May 2026 → Oct 2026
125 CVE 5 recognition 4 other
134
credits
#28
Wordfence PRISM
132 credits 129 CVEs 92 vendors Oct 2026 → Nov 2026
132 CVE
132
credits
#29
wgg
128 credits 125 CVEs 2 vendors Jun 2026 → Oct 2026
128 CVE
128
credits
#30
Kugelblitz with Microsoft
126 credits 63 CVEs Jul 2026 → Aug 2026
63 CVE 63 other
126
credits
#31
Kevin Guerroudj, CloudBees, Inc.
121 credits 116 CVEs Jan 2022 → Aug 2026
116 CVE 5 other
121
credits
#32
k0shl
120 credits 60 CVEs Jun 2026 → Oct 2026
60 CVE 60 other
120
credits
#33
Wadeck Follonier, CloudBees, Inc.
119 credits 113 CVEs Aug 2018 → Mar 2024
116 CVE 3 other
119
credits
#34
Aobo Wang
118 credits 59 CVEs Jul 2026 → Oct 2026
59 CVE 59 other
118
credits
#35
Xinyang Ge
116 credits 58 CVEs Sep 2026 → Nov 2026
116 CVE
116
credits
#36
Minjea Park
114 credits 60 CVEs Jul 2026 → Oct 2026
60 CVE 54 other
114
credits
#37
Jeongmin Choi
112 credits 56 CVEs Jun 2026 → Oct 2026
56 CVE 56 other
112
credits
#38
@2st__ with Diffract
108 credits 107 CVEs Jun 2026 → Oct 2026
108 CVE
108
credits
#39
manus-use
105 credits 87 CVEs 32 vendors Oct 2026 → Nov 2026
105 CVE
105
credits
#40
George Chen
105 credits 89 CVEs 76 vendors Oct 2026 → Nov 2026
105 CVE
105
credits
#41
Haein Lee with KAIST Hacking Lab
103 credits 52 CVEs May 2026 → Oct 2026
52 CVE 51 other
103
credits
#42
Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
102 credits 53 CVEs May 2026 → Oct 2026
53 CVE 49 other
102
credits
#43
Viktor Gazdag
100 credits 83 CVEs Jun 2018 → Apr 2019
96 CVE 4 other
100
credits
#44
OpenAI Codex Security - Amy Burnett
99 credits 15 CVEs Jun 2026 → Oct 2026
93 CVE 6 recognition
99
credits
#45
Tristan Madani (@TristanInSec) from Talence Security
95 credits 14 CVEs May 2026 → Oct 2026
88 CVE 7 recognition
95
credits
#46
Amy Burnett of OpenAI
94 credits 19 CVEs Sep 2026 → Oct 2026
94 CVE
94
credits
#47
Andreas Jaegersberger
90 credits 23 CVEs May 2026 → Oct 2026
85 CVE 5 recognition
90
credits
#48
Microsoft
85 credits 48 CVEs May 2026 → Sep 2026
48 CVE 37 other
85
credits
#49
h4urek with secsys lab
84 credits 43 CVEs May 2026 → Oct 2026
43 CVE 41 other
84
credits
#50
Abraxas Labs
83 credits 80 CVEs 22 vendors Oct 2026 → Oct 2026
83 CVE
83
credits
1 2 3 4 Next »