Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.
All vendors
Microsoft 12,233
Apple 9,322
Google Chrome 3,682
Mozilla 2,401
Drupal 1,973
Jenkins 1,545
NVIDIA 901
GitLab 590
Apache 380
Red Hat 302
FreeRDP 264
Frappe 205
Roundcube 180
Palo Alto Networks 173
Gitea 126
Eclipse Foundation 103
ImageMagick 81
Sgl-project 79
Open-webui 79
OpenBSD 70
OpenSSL 60
Hewlett Packard Enterprise (HPE) 55
Totolink 51
Getgrav 50
Zulip 42
Progress Software 42
Wazuh 40
QNAP Systems Inc. 39
Hickory-dns 37
Curl 36
Thorsten 35
Linux 33
SourceCodester 33
Mtrudel 30
Surrealdb 30
Netcore 29
N8n-io 29
Undici 29
SQLite 29
Rclone 28
Wavlink 27
Webkul 27
Hexpm 26
Zitadel 26
YesWiki 26
Advantech 25
ThemeREX 25
WatchGuard 25
Go-vikunja 24
Craftcms 24
Moodle 24
Mattermost 23
Sensiolabs 23
Jishenghua 23
Linksys 23
SemanticMediaWiki 23
Kyverno 23
Crocoblock 23
Zoom 23
Admidio 22
TP-Link Systems Inc. 21
Progress Software Corporation 21
OpenIdentityPlatform 21
Brainstorm Force 21
ZcashFoundation 21
Typo3 21
Djangoproject 20
LogicalDOC 20
Gnome 20
Splunk 20
Letta-ai 18
Liquid Web / StellarWP 18
GNU 18
Themeum 18
Redaxo 17
NLnet Labs 17
weDevs 17
Ggml-org 16
Grokability 16
Potatosalad 16
bPlugins 16
Diem-project 16
Edgelesssys 16
@sveltejs 16
Vllm-project 15
Cozmoslabs 15
Traefik 15
Dromara 15
Docker 15
AM System 15
Libyal 15
Sunhillo Corporation 15
Eosphoros-ai 15
Erlang 15
HashiCorp 14
ThemeGrill 14
X.org 14
Openpanel-dev 14
Unclecode 14
VideoWhisper.com 14
Dell 14
Itsourcecode 13
Opencats 13
phpMyAdmin 13
Arraytics 13
SolarWinds 13
Dalibo 12
Shenzhen Shine Industrial Co., Ltd. 12
Froxlor 12
BMC 12
WP ManageNinja LLC 12
ThimPress 12
Ginlix-ai 12
TrueBooker 12
Tigroumeow 12
VillaTheme 12
Siyuan-note 12
Agno-agi 12
Edimax 12
Coze-dev 12
E4jvikwp 11
boneIO 11
Progress 11
Netpbm 11
GeoDirectory 11
GiveWP 11
Thelia 11
Code-projects 11
The GNU C Library 11
Erzhongxmu 11
Magepeople inc. 11
GitoxideLabs 11
Nvm-sh 11
MISP 10
WP Chill 10
Control Web Panel 10
Sabbatic 10
Better-auth 10
Oray 10
Xen 10
Vraj404 10
Google 10
A2aproject 10
GeoVision Inc. 10
HMS Networks 10
RT-Labs 10
ZKTeco 10
Krupalshah 10
Rdesktop 10
Wpeverest 9
Php-web-design.com 9
FolioVision 9
Otrs 9
Iflytek 9
FFmpeg 9
SMCI 9
Kameleo 9
Oretnom23 9
Kiloview 9
FasterXML 9
myCred 9
TeamViewer 9
DrayTek 9
WPGraphQL 9
Guchengwuyue 9
Wpmudev 9
Darylldoyle 9
H3C 9
Sonatype 9
NocoDB 9
Finsys 8
WPVibes 8
Moxi624 8
Zen Cart 8
VideoLAN 8
PluginUs.Net 8
SonicWall 8
Fast-uri 8
Gedelumbung 8
WP Desk 8
SUSE 8
Cure53 8
Paoltaia 8
YITH 8
Tencent 8
Opnsense 8
Nextcloud 8
Satya-vinay 8
Delta Electronics 8
Erik Debye 8
Dav-ee 8
Snap Finance 8
FV Flowplayer Video Player 8
GitroomHQ 7
A2ui-project 7
Google Cloud 7
1Panel-dev 7
Aspose 7
Deepseek-ai 7
Themeisle 7
Bytecodealliance 7
OpenText 7
Scribus 7
TPC Software 7
Subhajitkhan 7
Wpmu Dev 7
Smub 7
Johnson Controls 7
HivePress 7
Davidanderson 7
Apereo Foundation 7
Nozomi Networks 7
Latepoint 7
OpenBMB 7
10web 7
Grafana 7
Uselotus 7
TDuckCloud 7
PT Norther Lights Production 7
Mathurvishal 7
Macrozheng 7
Sahlberg 7
Rapid7 7
Python Software Foundation 7
WC Lovers 7
GDATASoftwareAG 6
Grandnode 6
RT-Labs AB 6
Peterschulznl 6
Camunda 6
Eptura 6
Ash-project 6
Mamunur Rashid 6
WPExperts 6
D-Link 6
Petpooja 6
BdThemes 6
Parse-community 6
Stylemix 6
Mistralai 6
Ifso 6
WPManageNinja 6
nh4tvd 6
HuLaSpark 6
WP User Manager 6
Hisense 6
Nodemailer 6
StylemixThemes 6
Essential Real Estate 6
Pgadmin.org 6
ACF Extended 6
Handnot2 6
ASUS 6
David Lingren 6
Directorist: AI-Powered Business Directory, Listings & Classified Ads 6
Codepeople 6
Vtk 6
Fireware OS 6
Dolibarr 6
WolfVision 6
Contact Form by Supsystic 6
Realmag777 6
Document Gallery 6
DataEase 6
Semcms 6
Wpdevteam 6
TÜBİTAK BİLGEM Software Technologies Research Institute 6
Openremote 6
Jellyfin 6
Hwk-fr 6
HeyCyan App 6
Benoitc 6
Krayin 6
AzuraCast 6
Qcam 6
TMS 6
Project-MONAI 6
Foxit Software Inc. 6
Sunkaifei 6
Fraunhoferhhi 6
Jetmonsters 5
Micromatch 5
AxxonSoft 5
Thalesgroup 5
miniOrange 5
esaqa GmbH 5
ProFTPD Project 5
CGM 5
WuKongOpenSource 5
GPAC 5
Cloudflare 5
Essential Addons for Elementor 5
Elixir-lang 5
Automattic 5
Imgproxy 5
CozyThemes 5
Artbees 5
SEPPmail AG 5
Jarun 5
Libimobiledevice 5
Otter Blocks 5
Librenms 5
Blender Foundation 5
Vtenext 5
Yangzongzhuan 5
Cakephp 5
YunaiV 5
Meetecho 5
Tomdever 5
WProyal 5
LeapWorx 5
Octopus Deploy 5
Unlimited Elements 5
WPDeveloper 5
Multivendorx 5
Ag-ui-protocol 5
Gravity Forms 5
DedeCMS 5
Arketeam 5
Libexpat 5
Cesnet 5
Gen Digital 5
Acronis 5
Espocrm 5
DeepPavlov 5
Tenda 5
Magepeopleteam 5
Moxa 5
Netis 4
Jovancoding 4
Advanced Custom Fields (ACF®) 4
WebPros 4
zhimaAi 4
Kodezen 4
NXP 4
ExpressTech 4
Koozali 4
WatchGuard Fireware OS 4
Kstover 4
Nkoriyama 4
FaveoSuite 4
Netty 4
Libtins 4
Dj-extensions.com 4
Nexbox 4
WPvivid — Backup, Migration & Staging 4
PostgreSQL 4
FacturaScripts 4
Ministry of Justice General Directorate of Information Technology 4
Pbuchbinder 4
ElementsReady Addons for Elementor 4
Bytebase 4
Hotel Booking 4
Properfraction 4
Francoisjacquet 4
Shapedplugin 4
Emersion 4
WPVR 4
Secure Custom Fields 4
Icagenda.com 4
Media Library Assistant 4
Harfbuzz 4
HAVELSAN Inc. 4
LaraDashboard 4
aaPanel 4
Danoli3 4
Purocean 4
Wuxi Wubang Security Software 4
CervantesSec 4
Qihoo 360 4
Eleveo 4
WPFunnels Team 4
BlackBeltTechnology 4
Tata Motors 4
Houtini-ai 4
SPIP 4
Easy Property Listings 4
Ztxz16 4
Yungengxin 4
The EPICS Community 4
Hankcs 4
All-in-One Video Gallery 4
Igor Funa 4
Coupa 4
Hupe13 4
NationalSecurityAgency 4
WWBN 4
Litespeedtech 4
Melograno 4
eLightUp 4
Opensource-socialnetwork 4
Jetbrains 4
Wpsoul 4
Westboy 4
impleCode 4
Moodle Project 4
Infiniflow 4
Icret 4
Royal Addons for Elementor 4
Aguila Technologies 4
Campcodes 4
Boldgrid 4
AWS 4
WebberZone 3
Xnau webdesign 3
CoreUnion 3
Zmister2016 3
Surecart 3
Easysoft 3
Open5gs 3
MB Custom Post Types & Custom Taxonomies 3
Pretix 3
Pipeshub-ai 3
Romkatv 3
Elementor 3
Studio-Saelix 3
Royal MCP 3
Spacetime 3
Dayrui 3
Blazethemes 3
Mmitch 3
RelyWP 3
ThemeHigh 3
Team-alembic 3
OpenStack 3
Ahmad 3
GStreamer 3
Surfer 3
Saadiqbal 3
Oqtane 3
AyeCode Ltd 3
GitHub 3
Centreon 3
Owen2345 3
Agentscope-ai 3
Teamfunnelkit 3
Blueprintue 3
Beam-cloud 3
Yoosee 3
Ninenines 3
Prasathmani 3
Best Practical Solutions 3
Tribulant Software 3
BuddyForms 3
Frangoteam 3
PublishPress 3
WP Mailster 3
Welcart e-Commerce 3
Phoenix Contact 3
Everest Forms 3
Phpipam 3
Stiofansisland 3
Alexandregz 3
Webmin 3
Meow Apps 3
Wpmet 3
WebToffee 3
Yaycommerce 3
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes 3
Gz-yami 3
LiteSpeed Cache 3
Pie Register 3
Kubernetes 3
Forgejo 3
Webasyst 3
Outline 3
Uscnanbu 3
Gemini Labs 3
Coder 3
Quickjs-ng 3
Huawei 3
Canva 3
Travisun 3
Krajowa Izba Rozliczeniowa 3
VertiGIS Ltd. 3
I.r.i.s S.a. 3
Premium Packages 3
Razorpay for WooCommerce 3
Osamaesh 3
Libsdl-org 3
C97net 3
Elunez 3
Jupyterlab 3
Go standard library 3
Kali Forms — Contact Form & Drag-and-Drop Builder 3
Link Library 3
Photo Engine (Media Organizer & Lightroom) 3
Maccmspro 3
WIT 3
Keywordrush 3
Sanluan 3
Cloud Foundry 3
Webba Plugins 3
Plugins360 3
Themefusion 3
Xxyopen 3
Lavalite 3
Argilla 3
Kaliforms 3
Supsystic 3
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution 3
WSO2 3
Optimole 3
Wpchill 3
Presenton 3
Y 2
Checkmk GmbH 2
SuiteCRM 2
Twisted 2
Spesmilo 2
ArcadeData 2
Tornadoweb 2
Lightdash 2
Bricks 2
Fortinet 2
Glpi-project 2
Qt 2
Neo4j 2
Zyxel 2
DBeaver 2
Delinea 2
Radareorg 2
Stirling-Tools 2
David-Crty 2
Rustls 2
Zohocorp 2
Ericsson 2
Mlflow 2
Balbooa.com 2
Gfi Usa, Llc 2
MikroTik 2
INFINITT Healthcare 2
Openemr 2
Zakład Ubezpieczeń Społecznych 2
Element-hq 1
Stormshield 1
ServiceNow 1
Turboderp-org 1
Zephyrproject 1
Ultralytics 1
Snowflake 1
Strapi 1
Honojs 1
Mobile builder 1
Kubeflow 1
Immich-app 1
Bitdefender 1
FOSSBilling 1
C4illin 1
Modelcontextprotocol 1
Ziroom 1
Sveltejs 1
Hapijs 1
RankMath 1
The HDF Group 1
The Wikimedia Foundation Mediaw 1
Chamilo 1
Ntop 1
Bubka 0
Systemd 0
Digitalbazaar 0
The-40-Thieves 0
Espressif 0
Eugeny 0
Cacti 0
GestSup 0
Yeti-platform 0
Argoproj 0
Aio-libs 0
Pavel-odintsov 0
Cisco 0
DevaslanPHP 0
Keil 0
Anthropics 0
Unisoc (Shanghai) Technologies Co., Ltd. 0
openGauss-server 0
Trusted Domain Project 0
Okta 0
HAProxy 0
LabRedesCefetRJ 0
Esri 0
Owasp-modsecurity 0
Apostrophecms 0
Alpine 0
Jenkins Project 0
Markdown-it 0
Https://github.com/curl/curl 0
Amazon 0
Ubiquiti Inc 0
About Time Technologies 0
Go-jose 0
Imagination Technologies 0
Sebhildebrandt 0
Mautic 0
IBM 0
Python-pillow 0
Samsung Semiconductor 0
Nodejs 0
LibreDWG 0
Chartbrew 0
Yamaha Corporation 0
AMD 0
Open-quantum-safe 0
Part-DB 0
Enspirit 0
Openwrt 0
Eaton 0
Christianhelle 0
Tesseract-ocr 0
Oracle Corporation 0
Angular 0
YS-infoware 0
Signalwire 0
Kernel 0
Follow-redirects 0
Roostorg 0
Tinyhumansai 0
Kvcache-ai 0
Readest 0
Asterisk 0
Vitejs 0
Zephyrproject-rtos 0
Labstack 0
Juniper Networks 0
Libxml2 0
Authlib 0
Quest 0
Open-reception 0
Isomorphic-git 0
Ultravioletrs 0
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. 0
Hewlett Packard Enterprise 0
Microsoft Corporation 0
Randombit 0
Highcharts 0
Elastic 0
Hitachi 0
Xibosignage 0
OpenPrinting 0
Franklioxygen 0
GROWI, Inc. 0
Zip-rs 0
Ardatan 0
Openvm-org 0
Jgraph 0
Welotec 0
Nuxt 0
Linux Kernel 0
Oauthlib 0
Socfortress 0
Koxudaxi 0
DataDog 0
Pypa 0
Devolutions 0
Hitachi Energy 0
Tsparticles 0
Gpustack 0
Cesanta 0
Util-linux 0
GeoNode 0
JeromeDevome 0
Gnutls 0
Yealink 0
OpenVPN 0
Freescout-help-desk 0
Jhuckaby 0
Open-wanderer 0
Absolute Software 0
Rgrove 0
Veeam 0
Py-pdf 0
Eyeplus 0
NetApp 0
Samsung 0
Openldap 0
Vitest-dev 0
Tanium 0
Perforce 0
E2fsprogs 0
HCL 0
Autodesk 0
Lxsmnsyc 0
Capricorn86 0
Pyasn1 0
H2o 0
Siemens 0
Python 0
Libexpat project 0
Esa 0
Sysadminsmedia 0
Intel(R) Processors 0
Mljar 0
Onnx 0
Intranda 0
Langchain-ai 0
Mariadb-corporation 0
NewType Infortech 0
HCLSoftware 0
Tox-dev 0
LY Corporation 0
MongoDB 0
Shopperlabs 0
Dassault Systèmes 0
Trellix 0
Zuke-build 0
Pi-hole 0
Unisoc 0
#101
Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
51 credits
26 CVEs May 2026 → Sep 2026
26 CVE 25 other
51
credits
#102
R4nger with Kunlun Lab
51 credits
50 CVEs Jun 2026 → Oct 2026
50 CVE 1 other
51
credits
#103
sweetchip
51 credits
26 CVEs Jul 2026 → Oct 2026
26 CVE 25 other
51
credits
#104
XGPT of ThreatBook
50 credits
8 CVEs May 2026 → Oct 2026
45 CVE 5 recognition
50
credits
#105
Feng Xue
50 credits
8 CVEs May 2026 → Oct 2026
45 CVE 5 recognition
50
credits
#106
R4nger with Kunlun Lab & Zhiniang Peng with HUST
49 credits
49 CVEs Jun 2026 → Oct 2026
49
credits
#107
Thanatos Tian (HKPolyU) & wgg & @2st__ with Diffract & Zhiniang Peng with HUST
49 credits
49 CVEs Jun 2026 → Oct 2026
49
credits
#108
James Holderness, IB Boost
48 credits
47 CVEs Aug 2019 → Sep 2020
47 CVE 1 other
48
credits
#109
Ashish Kunwar
48 credits
9 CVEs 3 vendors
May 2026 → Oct 2026
37 CVE 9 recognition 2 other
48
credits
#110
Peter Tang
48 credits
45 CVEs 36 vendors
Oct 2026 → Nov 2026
47 CVE 1 other
48
credits
#111
skigeek16
47 credits
44 CVEs 5 vendors
Oct 2026 → Nov 2026
47 CVE
47
credits
#112
Hcamael
47 credits
13 CVEs 2 vendors
Jul 2026 → Oct 2026
46 CVE 1 recognition
47
credits
#113
wgg with Diffract
47 credits
45 CVEs 2 vendors
Jul 2026 → Oct 2026
47 CVE
47
credits
#114
a92847865
46 credits
23 CVEs Oct 2025 → Jun 2026
46 CVE
46
credits
#115
Stanislav Jelezoglo
45 credits
8 CVEs Jul 2026 → Sep 2026
45 CVE
45
credits
#116
Jonatan Männchen / EEF
45 credits
36 CVEs 8 vendors
Jun 2026 → Nov 2026
1 CVE 44 other
45
credits
#117
Hyunwoo Kim (@v4bel)
45 credits
8 CVEs Jun 2026 → Sep 2026
45 CVE
45
credits
#118
Donghyeon Oh with Patchpoint
44 credits
22 CVEs Jun 2026 → Jul 2026
22 CVE 22 other
44
credits
#119
The Shadowserver Foundation
43 credits
43 CVEs 38 vendors
Oct 2026 → Oct 2026
43 CVE
43
credits
#120
Yaqoub Aldurayhim
43 credits
12 CVEs Sep 2026 → Oct 2026
42 CVE 1 other
43
credits
#121
boolgombear
43 credits
22 CVEs Jul 2026 → Oct 2026
22 CVE 21 other
43
credits
#122
Surya Narayan Kushwaha
43 credits
7 CVEs Jul 2026 → Sep 2026
36 CVE 7 recognition
43
credits
#123
Ye Zhang (@VAR10CK) of Baidu Security
43 credits
6 CVEs Jun 2026 → Oct 2026
38 CVE 5 recognition
43
credits
#124
opensec-intelligence
43 credits
40 CVEs 4 vendors
Oct 2026 → Oct 2026
43 CVE
43
credits
#125
Peter Ullrich
43 credits
35 CVEs 9 vendors
Jun 2026 → Nov 2026
41 CVE 2 other
43
credits
#126
Jacob Rockowitz (jrockowitz)
42 credits
21 CVEs Jul 2026 → Sep 2026
42
credits
#127
Thanatos Tian (HKPolyU) & wgg with Diffract
42 credits
42 CVEs Jul 2026 → Oct 2026
42
credits
#128
ikram-4
42 credits
26 CVEs 6 vendors
Oct 2026 → Oct 2026
42 CVE
42
credits
#129
Zhang WangJunJie with Hillstone Networks
42 credits
21 CVEs Sep 2026 → Oct 2026
21 CVE 21 other
42
credits
#130
sangnt (@gnas0x0018) with Viettel Cyber Security
42 credits
21 CVEs Jun 2026 → Oct 2026
21 CVE 21 other
42
credits
#131
Ruslan Dautov
41 credits
8 CVEs May 2026 → Oct 2026
39 CVE 2 recognition
41
credits
#132
Dave G.
41 credits
12 CVEs May 2026 → Oct 2026
41 CVE
41
credits
#133
Naoki Kawahigashi
41 credits
40 CVEs 40 vendors
Oct 2025 → Nov 2026
41 CVE
41
credits
#134
Kuba
41 credits
41 CVEs 37 vendors
Oct 2026 → Nov 2026
41 CVE
41
credits
#135
Lee Rowlands of the Drupal Security Team
41 credits
21 CVEs Feb 2022 → Nov 2024
41
credits
#136
Gia Bui (@yabeow) from Calif.io
40 credits
6 CVEs May 2026 → Oct 2026
40 CVE
40
credits
#137
Lyutoon
40 credits
8 CVEs Jun 2026 → Oct 2026
35 CVE 5 recognition
40
credits
#138
Oleg Nenashev, CloudBees, Inc.
40 credits
28 CVEs Feb 2018 → Dec 2022
36 CVE 4 other
40
credits
#139
Jongseong Kim (nevul37), UIUC
40 credits
20 CVEs Aug 2026 → Oct 2026
20 CVE 20 other
40
credits
#140
pwnie
40 credits
20 CVEs Jun 2025 → Apr 2026
40 CVE
40
credits
#141
이재영
40 credits
8 CVEs Jul 2026 → Oct 2026
38 CVE 2 recognition
40
credits
#142
Arni Hardarson (Neonix Security)
39 credits
17 CVEs 2 vendors
Jul 2026 → Nov 2026
37 CVE 2 recognition
39
credits
#143
Zachariah Mithani
39 credits
31 CVEs 30 vendors
Oct 2026 → Oct 2026
39 CVE
39
credits
#144
Pierre Rudloff (prudloff) of the Drupal Security Team
39 credits
23 CVEs Jul 2026 → Nov 2026
36 CVE 3 other
39
credits
#145
John Lussier
38 credits
4 CVEs Jun 2026 → Oct 2026
27 CVE 11 recognition
38
credits
#146
Hwiwon Lee (hwiwonl), UIUC
38 credits
20 CVEs Jul 2026 → Oct 2026
20 CVE 18 other
38
credits
#147
Ryan Hileman via Xint Code (xint.io)
38 credits
6 CVEs May 2026 → Oct 2026
33 CVE 5 recognition
38
credits
#148
hazard
38 credits
21 CVEs May 2026 → Oct 2026
21 CVE 17 other
38
credits
#149
yvvdwf
38 credits
19 CVEs Jun 2025 → Sep 2026
38 CVE
38
credits
#150
Mickey Jin (@patch1t)
38 credits
14 CVEs Jul 2026 → Oct 2026
38 CVE
38
credits