Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.
All vendors
Microsoft 12,233
Apple 9,322
Google Chrome 3,682
Mozilla 2,401
Drupal 1,973
Jenkins 1,545
NVIDIA 901
GitLab 590
Apache 380
Red Hat 302
FreeRDP 264
Frappe 205
Roundcube 180
Palo Alto Networks 173
Gitea 126
Eclipse Foundation 103
ImageMagick 81
Sgl-project 79
Open-webui 79
OpenBSD 70
OpenSSL 60
Hewlett Packard Enterprise (HPE) 55
Totolink 51
Getgrav 50
Zulip 42
Progress Software 42
Wazuh 40
QNAP Systems Inc. 39
Hickory-dns 37
Curl 36
Thorsten 35
Linux 33
SourceCodester 33
Mtrudel 30
Surrealdb 30
Netcore 29
N8n-io 29
Undici 29
SQLite 29
Rclone 28
Wavlink 27
Webkul 27
Hexpm 26
Zitadel 26
YesWiki 26
Advantech 25
ThemeREX 25
WatchGuard 25
Go-vikunja 24
Craftcms 24
Moodle 24
Mattermost 23
Sensiolabs 23
Jishenghua 23
Linksys 23
SemanticMediaWiki 23
Kyverno 23
Crocoblock 23
Zoom 23
Admidio 22
TP-Link Systems Inc. 21
Progress Software Corporation 21
OpenIdentityPlatform 21
Brainstorm Force 21
ZcashFoundation 21
Typo3 21
Djangoproject 20
LogicalDOC 20
Gnome 20
Splunk 20
Letta-ai 18
Liquid Web / StellarWP 18
GNU 18
Themeum 18
Redaxo 17
NLnet Labs 17
weDevs 17
Ggml-org 16
Grokability 16
Potatosalad 16
bPlugins 16
Diem-project 16
Edgelesssys 16
@sveltejs 16
Vllm-project 15
Cozmoslabs 15
Traefik 15
Dromara 15
Docker 15
AM System 15
Libyal 15
Sunhillo Corporation 15
Eosphoros-ai 15
Erlang 15
HashiCorp 14
ThemeGrill 14
X.org 14
Openpanel-dev 14
Unclecode 14
VideoWhisper.com 14
Dell 14
Itsourcecode 13
Opencats 13
phpMyAdmin 13
Arraytics 13
SolarWinds 13
Dalibo 12
Shenzhen Shine Industrial Co., Ltd. 12
Froxlor 12
BMC 12
WP ManageNinja LLC 12
ThimPress 12
Ginlix-ai 12
TrueBooker 12
Tigroumeow 12
VillaTheme 12
Siyuan-note 12
Agno-agi 12
Edimax 12
Coze-dev 12
E4jvikwp 11
boneIO 11
Progress 11
Netpbm 11
GeoDirectory 11
GiveWP 11
Thelia 11
Code-projects 11
The GNU C Library 11
Erzhongxmu 11
Magepeople inc. 11
GitoxideLabs 11
Nvm-sh 11
MISP 10
WP Chill 10
Control Web Panel 10
Sabbatic 10
Better-auth 10
Oray 10
Xen 10
Vraj404 10
Google 10
A2aproject 10
GeoVision Inc. 10
HMS Networks 10
RT-Labs 10
ZKTeco 10
Krupalshah 10
Rdesktop 10
Wpeverest 9
Php-web-design.com 9
FolioVision 9
Otrs 9
Iflytek 9
FFmpeg 9
SMCI 9
Kameleo 9
Oretnom23 9
Kiloview 9
FasterXML 9
myCred 9
TeamViewer 9
DrayTek 9
WPGraphQL 9
Guchengwuyue 9
Wpmudev 9
Darylldoyle 9
H3C 9
Sonatype 9
NocoDB 9
Finsys 8
WPVibes 8
Moxi624 8
Zen Cart 8
VideoLAN 8
PluginUs.Net 8
SonicWall 8
Fast-uri 8
Gedelumbung 8
WP Desk 8
SUSE 8
Cure53 8
Paoltaia 8
YITH 8
Tencent 8
Opnsense 8
Nextcloud 8
Satya-vinay 8
Delta Electronics 8
Erik Debye 8
Dav-ee 8
Snap Finance 8
FV Flowplayer Video Player 8
GitroomHQ 7
A2ui-project 7
Google Cloud 7
1Panel-dev 7
Aspose 7
Deepseek-ai 7
Themeisle 7
Bytecodealliance 7
OpenText 7
Scribus 7
TPC Software 7
Subhajitkhan 7
Wpmu Dev 7
Smub 7
Johnson Controls 7
HivePress 7
Davidanderson 7
Apereo Foundation 7
Nozomi Networks 7
Latepoint 7
OpenBMB 7
10web 7
Grafana 7
Uselotus 7
TDuckCloud 7
PT Norther Lights Production 7
Mathurvishal 7
Macrozheng 7
Sahlberg 7
Rapid7 7
Python Software Foundation 7
WC Lovers 7
GDATASoftwareAG 6
Grandnode 6
RT-Labs AB 6
Peterschulznl 6
Camunda 6
Eptura 6
Ash-project 6
Mamunur Rashid 6
WPExperts 6
D-Link 6
Petpooja 6
BdThemes 6
Parse-community 6
Stylemix 6
Mistralai 6
Ifso 6
WPManageNinja 6
nh4tvd 6
HuLaSpark 6
WP User Manager 6
Hisense 6
Nodemailer 6
StylemixThemes 6
Essential Real Estate 6
Pgadmin.org 6
ACF Extended 6
Handnot2 6
ASUS 6
David Lingren 6
Directorist: AI-Powered Business Directory, Listings & Classified Ads 6
Codepeople 6
Vtk 6
Fireware OS 6
Dolibarr 6
WolfVision 6
Contact Form by Supsystic 6
Realmag777 6
Document Gallery 6
DataEase 6
Semcms 6
Wpdevteam 6
TÜBİTAK BİLGEM Software Technologies Research Institute 6
Openremote 6
Jellyfin 6
Hwk-fr 6
HeyCyan App 6
Benoitc 6
Krayin 6
AzuraCast 6
Qcam 6
TMS 6
Project-MONAI 6
Foxit Software Inc. 6
Sunkaifei 6
Fraunhoferhhi 6
Jetmonsters 5
Micromatch 5
AxxonSoft 5
Thalesgroup 5
miniOrange 5
esaqa GmbH 5
ProFTPD Project 5
CGM 5
WuKongOpenSource 5
GPAC 5
Cloudflare 5
Essential Addons for Elementor 5
Elixir-lang 5
Automattic 5
Imgproxy 5
CozyThemes 5
Artbees 5
SEPPmail AG 5
Jarun 5
Libimobiledevice 5
Otter Blocks 5
Librenms 5
Blender Foundation 5
Vtenext 5
Yangzongzhuan 5
Cakephp 5
YunaiV 5
Meetecho 5
Tomdever 5
WProyal 5
LeapWorx 5
Octopus Deploy 5
Unlimited Elements 5
WPDeveloper 5
Multivendorx 5
Ag-ui-protocol 5
Gravity Forms 5
DedeCMS 5
Arketeam 5
Libexpat 5
Cesnet 5
Gen Digital 5
Acronis 5
Espocrm 5
DeepPavlov 5
Tenda 5
Magepeopleteam 5
Moxa 5
Netis 4
Jovancoding 4
Advanced Custom Fields (ACF®) 4
WebPros 4
zhimaAi 4
Kodezen 4
NXP 4
ExpressTech 4
Koozali 4
WatchGuard Fireware OS 4
Kstover 4
Nkoriyama 4
FaveoSuite 4
Netty 4
Libtins 4
Dj-extensions.com 4
Nexbox 4
WPvivid — Backup, Migration & Staging 4
PostgreSQL 4
FacturaScripts 4
Ministry of Justice General Directorate of Information Technology 4
Pbuchbinder 4
ElementsReady Addons for Elementor 4
Bytebase 4
Hotel Booking 4
Properfraction 4
Francoisjacquet 4
Shapedplugin 4
Emersion 4
WPVR 4
Secure Custom Fields 4
Icagenda.com 4
Media Library Assistant 4
Harfbuzz 4
HAVELSAN Inc. 4
LaraDashboard 4
aaPanel 4
Danoli3 4
Purocean 4
Wuxi Wubang Security Software 4
CervantesSec 4
Qihoo 360 4
Eleveo 4
WPFunnels Team 4
BlackBeltTechnology 4
Tata Motors 4
Houtini-ai 4
SPIP 4
Easy Property Listings 4
Ztxz16 4
Yungengxin 4
The EPICS Community 4
Hankcs 4
All-in-One Video Gallery 4
Igor Funa 4
Coupa 4
Hupe13 4
NationalSecurityAgency 4
WWBN 4
Litespeedtech 4
Melograno 4
eLightUp 4
Opensource-socialnetwork 4
Jetbrains 4
Wpsoul 4
Westboy 4
impleCode 4
Moodle Project 4
Infiniflow 4
Icret 4
Royal Addons for Elementor 4
Aguila Technologies 4
Campcodes 4
Boldgrid 4
AWS 4
WebberZone 3
Xnau webdesign 3
CoreUnion 3
Zmister2016 3
Surecart 3
Easysoft 3
Open5gs 3
MB Custom Post Types & Custom Taxonomies 3
Pretix 3
Pipeshub-ai 3
Romkatv 3
Elementor 3
Studio-Saelix 3
Royal MCP 3
Spacetime 3
Dayrui 3
Blazethemes 3
Mmitch 3
RelyWP 3
ThemeHigh 3
Team-alembic 3
OpenStack 3
Ahmad 3
GStreamer 3
Surfer 3
Saadiqbal 3
Oqtane 3
AyeCode Ltd 3
GitHub 3
Centreon 3
Owen2345 3
Agentscope-ai 3
Teamfunnelkit 3
Blueprintue 3
Beam-cloud 3
Yoosee 3
Ninenines 3
Prasathmani 3
Best Practical Solutions 3
Tribulant Software 3
BuddyForms 3
Frangoteam 3
PublishPress 3
WP Mailster 3
Welcart e-Commerce 3
Phoenix Contact 3
Everest Forms 3
Phpipam 3
Stiofansisland 3
Alexandregz 3
Webmin 3
Meow Apps 3
Wpmet 3
WebToffee 3
Yaycommerce 3
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes 3
Gz-yami 3
LiteSpeed Cache 3
Pie Register 3
Kubernetes 3
Forgejo 3
Webasyst 3
Outline 3
Uscnanbu 3
Gemini Labs 3
Coder 3
Quickjs-ng 3
Huawei 3
Canva 3
Travisun 3
Krajowa Izba Rozliczeniowa 3
VertiGIS Ltd. 3
I.r.i.s S.a. 3
Premium Packages 3
Razorpay for WooCommerce 3
Osamaesh 3
Libsdl-org 3
C97net 3
Elunez 3
Jupyterlab 3
Go standard library 3
Kali Forms — Contact Form & Drag-and-Drop Builder 3
Link Library 3
Photo Engine (Media Organizer & Lightroom) 3
Maccmspro 3
WIT 3
Keywordrush 3
Sanluan 3
Cloud Foundry 3
Webba Plugins 3
Plugins360 3
Themefusion 3
Xxyopen 3
Lavalite 3
Argilla 3
Kaliforms 3
Supsystic 3
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution 3
WSO2 3
Optimole 3
Wpchill 3
Presenton 3
Y 2
Checkmk GmbH 2
SuiteCRM 2
Twisted 2
Spesmilo 2
ArcadeData 2
Tornadoweb 2
Lightdash 2
Bricks 2
Fortinet 2
Glpi-project 2
Qt 2
Neo4j 2
Zyxel 2
DBeaver 2
Delinea 2
Radareorg 2
Stirling-Tools 2
David-Crty 2
Rustls 2
Zohocorp 2
Ericsson 2
Mlflow 2
Balbooa.com 2
Gfi Usa, Llc 2
MikroTik 2
INFINITT Healthcare 2
Openemr 2
Zakład Ubezpieczeń Społecznych 2
Element-hq 1
Stormshield 1
ServiceNow 1
Turboderp-org 1
Zephyrproject 1
Ultralytics 1
Snowflake 1
Strapi 1
Honojs 1
Mobile builder 1
Kubeflow 1
Immich-app 1
Bitdefender 1
FOSSBilling 1
C4illin 1
Modelcontextprotocol 1
Ziroom 1
Sveltejs 1
Hapijs 1
RankMath 1
The HDF Group 1
The Wikimedia Foundation Mediaw 1
Chamilo 1
Ntop 1
Bubka 0
Systemd 0
Digitalbazaar 0
The-40-Thieves 0
Espressif 0
Eugeny 0
Cacti 0
GestSup 0
Yeti-platform 0
Argoproj 0
Aio-libs 0
Pavel-odintsov 0
Cisco 0
DevaslanPHP 0
Keil 0
Anthropics 0
Unisoc (Shanghai) Technologies Co., Ltd. 0
openGauss-server 0
Trusted Domain Project 0
Okta 0
HAProxy 0
LabRedesCefetRJ 0
Esri 0
Owasp-modsecurity 0
Apostrophecms 0
Alpine 0
Jenkins Project 0
Markdown-it 0
Https://github.com/curl/curl 0
Amazon 0
Ubiquiti Inc 0
About Time Technologies 0
Go-jose 0
Imagination Technologies 0
Sebhildebrandt 0
Mautic 0
IBM 0
Python-pillow 0
Samsung Semiconductor 0
Nodejs 0
LibreDWG 0
Chartbrew 0
Yamaha Corporation 0
AMD 0
Open-quantum-safe 0
Part-DB 0
Enspirit 0
Openwrt 0
Eaton 0
Christianhelle 0
Tesseract-ocr 0
Oracle Corporation 0
Angular 0
YS-infoware 0
Signalwire 0
Kernel 0
Follow-redirects 0
Roostorg 0
Tinyhumansai 0
Kvcache-ai 0
Readest 0
Asterisk 0
Vitejs 0
Zephyrproject-rtos 0
Labstack 0
Juniper Networks 0
Libxml2 0
Authlib 0
Quest 0
Open-reception 0
Isomorphic-git 0
Ultravioletrs 0
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. 0
Hewlett Packard Enterprise 0
Microsoft Corporation 0
Randombit 0
Highcharts 0
Elastic 0
Hitachi 0
Xibosignage 0
OpenPrinting 0
Franklioxygen 0
GROWI, Inc. 0
Zip-rs 0
Ardatan 0
Openvm-org 0
Jgraph 0
Welotec 0
Nuxt 0
Linux Kernel 0
Oauthlib 0
Socfortress 0
Koxudaxi 0
DataDog 0
Pypa 0
Devolutions 0
Hitachi Energy 0
Tsparticles 0
Gpustack 0
Cesanta 0
Util-linux 0
GeoNode 0
JeromeDevome 0
Gnutls 0
Yealink 0
OpenVPN 0
Freescout-help-desk 0
Jhuckaby 0
Open-wanderer 0
Absolute Software 0
Rgrove 0
Veeam 0
Py-pdf 0
Eyeplus 0
NetApp 0
Samsung 0
Openldap 0
Vitest-dev 0
Tanium 0
Perforce 0
E2fsprogs 0
HCL 0
Autodesk 0
Lxsmnsyc 0
Capricorn86 0
Pyasn1 0
H2o 0
Siemens 0
Python 0
Libexpat project 0
Esa 0
Sysadminsmedia 0
Intel(R) Processors 0
Mljar 0
Onnx 0
Intranda 0
Langchain-ai 0
Mariadb-corporation 0
NewType Infortech 0
HCLSoftware 0
Tox-dev 0
LY Corporation 0
MongoDB 0
Shopperlabs 0
Dassault Systèmes 0
Trellix 0
Zuke-build 0
Pi-hole 0
Unisoc 0
#1
Google
2,758 credits
1450 CVEs Jul 2026 → Nov 2026
2758 CVE
2,758
credits
#2
Mozilla
1,129 credits
243 CVEs 2 vendors
Aug 2026 → Nov 2026
1129 CVE
1,129
credits
#3
Anonymous
661 credits
661 CVEs 2 vendors
Jun 2026 → Oct 2026
1 CVE 660 other
661
credits
#4
0ccbbf129444eb66344ccafb92b00df4
523 credits
263 CVEs May 2026 → Oct 2026
263 CVE 260 other
523
credits
#5
yhw
370 credits
289 CVEs Jun 2026 → Oct 2026
289 CVE 81 other
370
credits
#6
hieuPenguinnn
325 credits
319 CVEs 234 vendors
Oct 2026 → Nov 2026
325 CVE
325
credits
#7
Peter Malone
268 credits
55 CVEs May 2026 → Oct 2026
259 CVE 9 recognition
268
credits
#8
Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
263 credits
38 CVEs May 2026 → Oct 2026
245 CVE 18 recognition
263
credits
#9
HaiND from the Post and Telecommunication Institute of Technology
259 credits
245 CVEs 170 vendors
Oct 2026 → Nov 2026
259 CVE
259
credits
#10
Billy Jheng Bing Jhong
259 credits
37 CVEs 2 vendors
May 2026 → Oct 2026
241 CVE 18 recognition
259
credits
#11
Zhiniang Peng with HUST
240 credits
226 CVEs May 2026 → Oct 2026
227 CVE 13 other
240
credits
#12
Thanatos Tian (HKPolyU)
224 credits
219 CVEs 2 vendors
Jun 2026 → Oct 2026
224 CVE
224
credits
#13
Daniel Beck, CloudBees, Inc.
222 credits
185 CVEs Feb 2018 → Sep 2026
204 CVE 18 other
222
credits
#14
haowei yan
219 credits
148 CVEs Jun 2026 → Oct 2026
148 CVE 71 other
219
credits
#15
Pwnforr777
209 credits
105 CVEs Jun 2026 → Oct 2026
104 CVE 105 other
209
credits
#16
txz
207 credits
207 CVEs Jun 2026 → Oct 2026
207 CVE
207
credits
#17
yhw & txz
199 credits
199 CVEs Jun 2026 → Oct 2026
199
credits
#18
Seung Chan Kim
194 credits
97 CVEs Jun 2026 → Oct 2026
97 CVE 97 other
194
credits
#19
AIフィジカルインターフェイス二号機
179 credits
90 CVEs May 2026 → Oct 2026
90 CVE 89 other
179
credits
#20
Jmini
178 credits
91 CVEs Jul 2026 → Oct 2026
91 CVE 87 other
178
credits
#21
stratan (@5tratan)
162 credits
21 CVEs Jul 2026 → Oct 2026
155 CVE 7 recognition
162
credits
#22
pwn2addr
160 credits
81 CVEs 3 vendors
May 2026 → Oct 2026
81 CVE 79 other
160
credits
#23
Yaqi Chao
160 credits
137 CVEs 10 vendors
Oct 2026 → Oct 2026
160 CVE
160
credits
#24
OpenAI Codex Security (kylebot)
152 credits
39 CVEs 2 vendors
Oct 2026 → Nov 2026
152 CVE
152
credits
#25
Marcus Johansson (marcus_johansson)
149 credits
64 CVEs Aug 2026 → Nov 2026
144 CVE 5 other
149
credits
#26
41ae55e9310ff27fa6f26af4727e5590
144 credits
72 CVEs Jun 2026 → Oct 2026
72 CVE 72 other
144
credits
#27
Nathaniel Oh (@calysteon)
134 credits
41 CVEs 2 vendors
May 2026 → Oct 2026
125 CVE 5 recognition 4 other
134
credits
#28
Wordfence PRISM
132 credits
129 CVEs 92 vendors
Oct 2026 → Nov 2026
132 CVE
132
credits
#29
wgg
128 credits
125 CVEs 2 vendors
Jun 2026 → Oct 2026
128 CVE
128
credits
#30
Kugelblitz with Microsoft
126 credits
63 CVEs Jul 2026 → Aug 2026
63 CVE 63 other
126
credits
#31
Kevin Guerroudj, CloudBees, Inc.
121 credits
116 CVEs Jan 2022 → Aug 2026
116 CVE 5 other
121
credits
#32
k0shl
120 credits
60 CVEs Jun 2026 → Oct 2026
60 CVE 60 other
120
credits
#33
Wadeck Follonier, CloudBees, Inc.
119 credits
113 CVEs Aug 2018 → Mar 2024
116 CVE 3 other
119
credits
#34
Aobo Wang
118 credits
59 CVEs Jul 2026 → Oct 2026
59 CVE 59 other
118
credits
#35
Xinyang Ge
116 credits
58 CVEs Sep 2026 → Nov 2026
116 CVE
116
credits
#36
Minjea Park
114 credits
60 CVEs Jul 2026 → Oct 2026
60 CVE 54 other
114
credits
#37
Jeongmin Choi
112 credits
56 CVEs Jun 2026 → Oct 2026
56 CVE 56 other
112
credits
#38
@2st__ with Diffract
108 credits
107 CVEs Jun 2026 → Oct 2026
108 CVE
108
credits
#39
manus-use
105 credits
87 CVEs 32 vendors
Oct 2026 → Nov 2026
105 CVE
105
credits
#40
George Chen
105 credits
89 CVEs 76 vendors
Oct 2026 → Nov 2026
105 CVE
105
credits
#41
Haein Lee with KAIST Hacking Lab
103 credits
52 CVEs May 2026 → Oct 2026
52 CVE 51 other
103
credits
#42
Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
102 credits
53 CVEs May 2026 → Oct 2026
53 CVE 49 other
102
credits
#43
Viktor Gazdag
100 credits
83 CVEs Jun 2018 → Apr 2019
96 CVE 4 other
100
credits
#44
OpenAI Codex Security - Amy Burnett
99 credits
15 CVEs Jun 2026 → Oct 2026
93 CVE 6 recognition
99
credits
#45
Tristan Madani (@TristanInSec) from Talence Security
95 credits
14 CVEs May 2026 → Oct 2026
88 CVE 7 recognition
95
credits
#46
Amy Burnett of OpenAI
94 credits
19 CVEs Sep 2026 → Oct 2026
94 CVE
94
credits
#47
Andreas Jaegersberger
90 credits
23 CVEs May 2026 → Oct 2026
85 CVE 5 recognition
90
credits
#48
Microsoft
85 credits
48 CVEs May 2026 → Sep 2026
48 CVE 37 other
85
credits
#49
h4urek with secsys lab
84 credits
43 CVEs May 2026 → Oct 2026
43 CVE 41 other
84
credits
#50
Abraxas Labs
83 credits
80 CVEs 22 vendors
Oct 2026 → Oct 2026
83 CVE
83
credits