Early access. This site has moved to bugrater.com.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.

All vendors Microsoft 12,233 Apple 9,322 Google Chrome 3,682 Mozilla 2,401 Drupal 1,973 Jenkins 1,545 NVIDIA 901 GitLab 590 Apache 380 Red Hat 302 FreeRDP 264 Frappe 205 Roundcube 180 Palo Alto Networks 173 Gitea 126 Eclipse Foundation 103 ImageMagick 81 Sgl-project 79 Open-webui 79 OpenBSD 70 OpenSSL 60 Hewlett Packard Enterprise (HPE) 55 Totolink 51 Getgrav 50 Zulip 42 Progress Software 42 Wazuh 40 QNAP Systems Inc. 39 Hickory-dns 37 Curl 36 Thorsten 35 Linux 33 SourceCodester 33 Mtrudel 30 Surrealdb 30 Netcore 29 N8n-io 29 Undici 29 SQLite 29 Rclone 28 Wavlink 27 Webkul 27 Hexpm 26 Zitadel 26 YesWiki 26 Advantech 25 ThemeREX 25 WatchGuard 25 Go-vikunja 24 Craftcms 24 Moodle 24 Mattermost 23 Sensiolabs 23 Jishenghua 23 Linksys 23 SemanticMediaWiki 23 Kyverno 23 Crocoblock 23 Zoom 23 Admidio 22 TP-Link Systems Inc. 21 Progress Software Corporation 21 OpenIdentityPlatform 21 Brainstorm Force 21 ZcashFoundation 21 Typo3 21 Djangoproject 20 LogicalDOC 20 Gnome 20 Splunk 20 Letta-ai 18 Liquid Web / StellarWP 18 GNU 18 Themeum 18 Redaxo 17 NLnet Labs 17 weDevs 17 Ggml-org 16 Grokability 16 Potatosalad 16 bPlugins 16 Diem-project 16 Edgelesssys 16 @sveltejs 16 Vllm-project 15 Cozmoslabs 15 Traefik 15 Dromara 15 Docker 15 AM System 15 Libyal 15 Sunhillo Corporation 15 Eosphoros-ai 15 Erlang 15 HashiCorp 14 ThemeGrill 14 X.org 14 Openpanel-dev 14 Unclecode 14 VideoWhisper.com 14 Dell 14 Itsourcecode 13 Opencats 13 phpMyAdmin 13 Arraytics 13 SolarWinds 13 Dalibo 12 Shenzhen Shine Industrial Co., Ltd. 12 Froxlor 12 BMC 12 WP ManageNinja LLC 12 ThimPress 12 Ginlix-ai 12 TrueBooker 12 Tigroumeow 12 VillaTheme 12 Siyuan-note 12 Agno-agi 12 Edimax 12 Coze-dev 12 E4jvikwp 11 boneIO 11 Progress 11 Netpbm 11 GeoDirectory 11 GiveWP 11 Thelia 11 Code-projects 11 The GNU C Library 11 Erzhongxmu 11 Magepeople inc. 11 GitoxideLabs 11 Nvm-sh 11 MISP 10 WP Chill 10 Control Web Panel 10 Sabbatic 10 Better-auth 10 Oray 10 Xen 10 Vraj404 10 Google 10 A2aproject 10 GeoVision Inc. 10 HMS Networks 10 RT-Labs 10 ZKTeco 10 Krupalshah 10 Rdesktop 10 Wpeverest 9 Php-web-design.com 9 FolioVision 9 Otrs 9 Iflytek 9 FFmpeg 9 SMCI 9 Kameleo 9 Oretnom23 9 Kiloview 9 FasterXML 9 myCred 9 TeamViewer 9 DrayTek 9 WPGraphQL 9 Guchengwuyue 9 Wpmudev 9 Darylldoyle 9 H3C 9 Sonatype 9 NocoDB 9 Finsys 8 WPVibes 8 Moxi624 8 Zen Cart 8 VideoLAN 8 PluginUs.Net 8 SonicWall 8 Fast-uri 8 Gedelumbung 8 WP Desk 8 SUSE 8 Cure53 8 Paoltaia 8 YITH 8 Tencent 8 Opnsense 8 Nextcloud 8 Satya-vinay 8 Delta Electronics 8 Erik Debye 8 Dav-ee 8 Snap Finance 8 FV Flowplayer Video Player 8 GitroomHQ 7 A2ui-project 7 Google Cloud 7 1Panel-dev 7 Aspose 7 Deepseek-ai 7 Themeisle 7 Bytecodealliance 7 OpenText 7 Scribus 7 TPC Software 7 Subhajitkhan 7 Wpmu Dev 7 Smub 7 Johnson Controls 7 HivePress 7 Davidanderson 7 Apereo Foundation 7 Nozomi Networks 7 Latepoint 7 OpenBMB 7 10web 7 Grafana 7 Uselotus 7 TDuckCloud 7 PT Norther Lights Production 7 Mathurvishal 7 Macrozheng 7 Sahlberg 7 Rapid7 7 Python Software Foundation 7 WC Lovers 7 GDATASoftwareAG 6 Grandnode 6 RT-Labs AB 6 Peterschulznl 6 Camunda 6 Eptura 6 Ash-project 6 Mamunur Rashid 6 WPExperts 6 D-Link 6 Petpooja 6 BdThemes 6 Parse-community 6 Stylemix 6 Mistralai 6 Ifso 6 WPManageNinja 6 nh4tvd 6 HuLaSpark 6 WP User Manager 6 Hisense 6 Nodemailer 6 StylemixThemes 6 Essential Real Estate 6 Pgadmin.org 6 ACF Extended 6 Handnot2 6 ASUS 6 David Lingren 6 Directorist: AI-Powered Business Directory, Listings & Classified Ads 6 Codepeople 6 Vtk 6 Fireware OS 6 Dolibarr 6 WolfVision 6 Contact Form by Supsystic 6 Realmag777 6 Document Gallery 6 DataEase 6 Semcms 6 Wpdevteam 6 TÜBİTAK BİLGEM Software Technologies Research Institute 6 Openremote 6 Jellyfin 6 Hwk-fr 6 HeyCyan App 6 Benoitc 6 Krayin 6 AzuraCast 6 Qcam 6 TMS 6 Project-MONAI 6 Foxit Software Inc. 6 Sunkaifei 6 Fraunhoferhhi 6 Jetmonsters 5 Micromatch 5 AxxonSoft 5 Thalesgroup 5 miniOrange 5 esaqa GmbH 5 ProFTPD Project 5 CGM 5 WuKongOpenSource 5 GPAC 5 Cloudflare 5 Essential Addons for Elementor 5 Elixir-lang 5 Automattic 5 Imgproxy 5 CozyThemes 5 Artbees 5 SEPPmail AG 5 Jarun 5 Libimobiledevice 5 Otter Blocks 5 Librenms 5 Blender Foundation 5 Vtenext 5 Yangzongzhuan 5 Cakephp 5 YunaiV 5 Meetecho 5 Tomdever 5 WProyal 5 LeapWorx 5 Octopus Deploy 5 Unlimited Elements 5 WPDeveloper 5 Multivendorx 5 Ag-ui-protocol 5 Gravity Forms 5 DedeCMS 5 Arketeam 5 Libexpat 5 Cesnet 5 Gen Digital 5 Acronis 5 Espocrm 5 DeepPavlov 5 Tenda 5 Magepeopleteam 5 Moxa 5 Netis 4 Jovancoding 4 Advanced Custom Fields (ACF®) 4 WebPros 4 zhimaAi 4 Kodezen 4 NXP 4 ExpressTech 4 Koozali 4 WatchGuard Fireware OS 4 Kstover 4 Nkoriyama 4 FaveoSuite 4 Netty 4 Libtins 4 Dj-extensions.com 4 Nexbox 4 WPvivid — Backup, Migration & Staging 4 PostgreSQL 4 FacturaScripts 4 Ministry of Justice General Directorate of Information Technology 4 Pbuchbinder 4 ElementsReady Addons for Elementor 4 Bytebase 4 Hotel Booking 4 Properfraction 4 Francoisjacquet 4 Shapedplugin 4 Emersion 4 WPVR 4 Secure Custom Fields 4 Icagenda.com 4 Media Library Assistant 4 Harfbuzz 4 HAVELSAN Inc. 4 LaraDashboard 4 aaPanel 4 Danoli3 4 Purocean 4 Wuxi Wubang Security Software 4 CervantesSec 4 Qihoo 360 4 Eleveo 4 WPFunnels Team 4 BlackBeltTechnology 4 Tata Motors 4 Houtini-ai 4 SPIP 4 Easy Property Listings 4 Ztxz16 4 Yungengxin 4 The EPICS Community 4 Hankcs 4 All-in-One Video Gallery 4 Igor Funa 4 Coupa 4 Hupe13 4 NationalSecurityAgency 4 WWBN 4 Litespeedtech 4 Melograno 4 eLightUp 4 Opensource-socialnetwork 4 Jetbrains 4 Wpsoul 4 Westboy 4 impleCode 4 Moodle Project 4 Infiniflow 4 Icret 4 Royal Addons for Elementor 4 Aguila Technologies 4 Campcodes 4 Boldgrid 4 AWS 4 WebberZone 3 Xnau webdesign 3 CoreUnion 3 Zmister2016 3 Surecart 3 Easysoft 3 Open5gs 3 MB Custom Post Types & Custom Taxonomies 3 Pretix 3 Pipeshub-ai 3 Romkatv 3 Elementor 3 Studio-Saelix 3 Royal MCP 3 Spacetime 3 Dayrui 3 Blazethemes 3 Mmitch 3 RelyWP 3 ThemeHigh 3 Team-alembic 3 OpenStack 3 Ahmad 3 GStreamer 3 Surfer 3 Saadiqbal 3 Oqtane 3 AyeCode Ltd 3 GitHub 3 Centreon 3 Owen2345 3 Agentscope-ai 3 Teamfunnelkit 3 Blueprintue 3 Beam-cloud 3 Yoosee 3 Ninenines 3 Prasathmani 3 Best Practical Solutions 3 Tribulant Software 3 BuddyForms 3 Frangoteam 3 PublishPress 3 WP Mailster 3 Welcart e-Commerce 3 Phoenix Contact 3 Everest Forms 3 Phpipam 3 Stiofansisland 3 Alexandregz 3 Webmin 3 Meow Apps 3 Wpmet 3 WebToffee 3 Yaycommerce 3 PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes 3 Gz-yami 3 LiteSpeed Cache 3 Pie Register 3 Kubernetes 3 Forgejo 3 Webasyst 3 Outline 3 Uscnanbu 3 Gemini Labs 3 Coder 3 Quickjs-ng 3 Huawei 3 Canva 3 Travisun 3 Krajowa Izba Rozliczeniowa 3 VertiGIS Ltd. 3 I.r.i.s S.a. 3 Premium Packages 3 Razorpay for WooCommerce 3 Osamaesh 3 Libsdl-org 3 C97net 3 Elunez 3 Jupyterlab 3 Go standard library 3 Kali Forms — Contact Form & Drag-and-Drop Builder 3 Link Library 3 Photo Engine (Media Organizer & Lightroom) 3 Maccmspro 3 WIT 3 Keywordrush 3 Sanluan 3 Cloud Foundry 3 Webba Plugins 3 Plugins360 3 Themefusion 3 Xxyopen 3 Lavalite 3 Argilla 3 Kaliforms 3 Supsystic 3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution 3 WSO2 3 Optimole 3 Wpchill 3 Presenton 3 Y 2 Checkmk GmbH 2 SuiteCRM 2 Twisted 2 Spesmilo 2 ArcadeData 2 Tornadoweb 2 Lightdash 2 Bricks 2 Fortinet 2 Glpi-project 2 Qt 2 Neo4j 2 Zyxel 2 DBeaver 2 Delinea 2 Radareorg 2 Stirling-Tools 2 David-Crty 2 Rustls 2 Zohocorp 2 Ericsson 2 Mlflow 2 Balbooa.com 2 Gfi Usa, Llc 2 MikroTik 2 INFINITT Healthcare 2 Openemr 2 Zakład Ubezpieczeń Społecznych 2 Element-hq 1 Stormshield 1 ServiceNow 1 Turboderp-org 1 Zephyrproject 1 Ultralytics 1 Snowflake 1 Strapi 1 Honojs 1 Mobile builder 1 Kubeflow 1 Immich-app 1 Bitdefender 1 FOSSBilling 1 C4illin 1 Modelcontextprotocol 1 Ziroom 1 Sveltejs 1 Hapijs 1 RankMath 1 The HDF Group 1 The Wikimedia Foundation Mediaw 1 Chamilo 1 Ntop 1 Bubka 0 Systemd 0 Digitalbazaar 0 The-40-Thieves 0 Espressif 0 Eugeny 0 Cacti 0 GestSup 0 Yeti-platform 0 Argoproj 0 Aio-libs 0 Pavel-odintsov 0 Cisco 0 DevaslanPHP 0 Keil 0 Anthropics 0 Unisoc (Shanghai) Technologies Co., Ltd. 0 openGauss-server 0 Trusted Domain Project 0 Okta 0 HAProxy 0 LabRedesCefetRJ 0 Esri 0 Owasp-modsecurity 0 Apostrophecms 0 Alpine 0 Jenkins Project 0 Markdown-it 0 Https://github.com/curl/curl 0 Amazon 0 Ubiquiti Inc 0 About Time Technologies 0 Go-jose 0 Imagination Technologies 0 Sebhildebrandt 0 Mautic 0 IBM 0 Python-pillow 0 Samsung Semiconductor 0 Nodejs 0 LibreDWG 0 Chartbrew 0 Yamaha Corporation 0 AMD 0 Open-quantum-safe 0 Part-DB 0 Enspirit 0 Openwrt 0 Eaton 0 Christianhelle 0 Tesseract-ocr 0 Oracle Corporation 0 Angular 0 YS-infoware 0 Signalwire 0 Kernel 0 Follow-redirects 0 Roostorg 0 Tinyhumansai 0 Kvcache-ai 0 Readest 0 Asterisk 0 Vitejs 0 Zephyrproject-rtos 0 Labstack 0 Juniper Networks 0 Libxml2 0 Authlib 0 Quest 0 Open-reception 0 Isomorphic-git 0 Ultravioletrs 0 FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. 0 Hewlett Packard Enterprise 0 Microsoft Corporation 0 Randombit 0 Highcharts 0 Elastic 0 Hitachi 0 Xibosignage 0 OpenPrinting 0 Franklioxygen 0 GROWI, Inc. 0 Zip-rs 0 Ardatan 0 Openvm-org 0 Jgraph 0 Welotec 0 Nuxt 0 Linux Kernel 0 Oauthlib 0 Socfortress 0 Koxudaxi 0 DataDog 0 Pypa 0 Devolutions 0 Hitachi Energy 0 Tsparticles 0 Gpustack 0 Cesanta 0 Util-linux 0 GeoNode 0 JeromeDevome 0 Gnutls 0 Yealink 0 OpenVPN 0 Freescout-help-desk 0 Jhuckaby 0 Open-wanderer 0 Absolute Software 0 Rgrove 0 Veeam 0 Py-pdf 0 Eyeplus 0 NetApp 0 Samsung 0 Openldap 0 Vitest-dev 0 Tanium 0 Perforce 0 E2fsprogs 0 HCL 0 Autodesk 0 Lxsmnsyc 0 Capricorn86 0 Pyasn1 0 H2o 0 Siemens 0 Python 0 Libexpat project 0 Esa 0 Sysadminsmedia 0 Intel(R) Processors 0 Mljar 0 Onnx 0 Intranda 0 Langchain-ai 0 Mariadb-corporation 0 NewType Infortech 0 HCLSoftware 0 Tox-dev 0 LY Corporation 0 MongoDB 0 Shopperlabs 0 Dassault Systèmes 0 Trellix 0 Zuke-build 0 Pi-hole 0 Unisoc 0
500 researchers
#101
Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
51 credits 26 CVEs May 2026 → Sep 2026
26 CVE 25 other
51
credits
#102
R4nger with Kunlun Lab
51 credits 50 CVEs Jun 2026 → Oct 2026
50 CVE 1 other
51
credits
#103
sweetchip
51 credits 26 CVEs Jul 2026 → Oct 2026
26 CVE 25 other
51
credits
#104
XGPT of ThreatBook
50 credits 8 CVEs May 2026 → Oct 2026
45 CVE 5 recognition
50
credits
#105
Feng Xue
50 credits 8 CVEs May 2026 → Oct 2026
45 CVE 5 recognition
50
credits
#106
R4nger with Kunlun Lab & Zhiniang Peng with HUST
49 credits 49 CVEs Jun 2026 → Oct 2026
49
credits
#107
Thanatos Tian (HKPolyU) & wgg & @2st__ with Diffract & Zhiniang Peng with HUST
49 credits 49 CVEs Jun 2026 → Oct 2026
49
credits
#108
James Holderness, IB Boost
48 credits 47 CVEs Aug 2019 → Sep 2020
47 CVE 1 other
48
credits
#109
Ashish Kunwar
48 credits 9 CVEs 3 vendors May 2026 → Oct 2026
37 CVE 9 recognition 2 other
48
credits
#110
Peter Tang
48 credits 45 CVEs 36 vendors Oct 2026 → Nov 2026
47 CVE 1 other
48
credits
#111
skigeek16
47 credits 44 CVEs 5 vendors Oct 2026 → Nov 2026
47 CVE
47
credits
#112
Hcamael
47 credits 13 CVEs 2 vendors Jul 2026 → Oct 2026
46 CVE 1 recognition
47
credits
#113
wgg with Diffract
47 credits 45 CVEs 2 vendors Jul 2026 → Oct 2026
47 CVE
47
credits
#114
a92847865
46 credits 23 CVEs Oct 2025 → Jun 2026
46 CVE
46
credits
#115
Stanislav Jelezoglo
45 credits 8 CVEs Jul 2026 → Sep 2026
45 CVE
45
credits
#116
Jonatan Männchen / EEF
45 credits 36 CVEs 8 vendors Jun 2026 → Nov 2026
1 CVE 44 other
45
credits
#117
Hyunwoo Kim (@v4bel)
45 credits 8 CVEs Jun 2026 → Sep 2026
45 CVE
45
credits
#118
Donghyeon Oh with Patchpoint
44 credits 22 CVEs Jun 2026 → Jul 2026
22 CVE 22 other
44
credits
#119
The Shadowserver Foundation
43 credits 43 CVEs 38 vendors Oct 2026 → Oct 2026
43 CVE
43
credits
#120
Yaqoub Aldurayhim
43 credits 12 CVEs Sep 2026 → Oct 2026
42 CVE 1 other
43
credits
#121
boolgombear
43 credits 22 CVEs Jul 2026 → Oct 2026
22 CVE 21 other
43
credits
#122
Surya Narayan Kushwaha
43 credits 7 CVEs Jul 2026 → Sep 2026
36 CVE 7 recognition
43
credits
#123
Ye Zhang (@VAR10CK) of Baidu Security
43 credits 6 CVEs Jun 2026 → Oct 2026
38 CVE 5 recognition
43
credits
#124
opensec-intelligence
43 credits 40 CVEs 4 vendors Oct 2026 → Oct 2026
43 CVE
43
credits
#125
Peter Ullrich
43 credits 35 CVEs 9 vendors Jun 2026 → Nov 2026
41 CVE 2 other
43
credits
#126
Jacob Rockowitz (jrockowitz)
42 credits 21 CVEs Jul 2026 → Sep 2026
42
credits
#127
Thanatos Tian (HKPolyU) & wgg with Diffract
42 credits 42 CVEs Jul 2026 → Oct 2026
42
credits
#128
ikram-4
42 credits 26 CVEs 6 vendors Oct 2026 → Oct 2026
42 CVE
42
credits
#129
Zhang WangJunJie with Hillstone Networks
42 credits 21 CVEs Sep 2026 → Oct 2026
21 CVE 21 other
42
credits
#130
sangnt (@gnas0x0018) with Viettel Cyber Security
42 credits 21 CVEs Jun 2026 → Oct 2026
21 CVE 21 other
42
credits
#131
Ruslan Dautov
41 credits 8 CVEs May 2026 → Oct 2026
39 CVE 2 recognition
41
credits
#132
Dave G.
41 credits 12 CVEs May 2026 → Oct 2026
41 CVE
41
credits
#133
Naoki Kawahigashi
41 credits 40 CVEs 40 vendors Oct 2025 → Nov 2026
41 CVE
41
credits
#134
Kuba
41 credits 41 CVEs 37 vendors Oct 2026 → Nov 2026
41 CVE
41
credits
#135
Lee Rowlands of the Drupal Security Team
41 credits 21 CVEs Feb 2022 → Nov 2024
41
credits
#136
Gia Bui (@yabeow) from Calif.io
40 credits 6 CVEs May 2026 → Oct 2026
40 CVE
40
credits
#137
Lyutoon
40 credits 8 CVEs Jun 2026 → Oct 2026
35 CVE 5 recognition
40
credits
#138
Oleg Nenashev, CloudBees, Inc.
40 credits 28 CVEs Feb 2018 → Dec 2022
36 CVE 4 other
40
credits
#139
Jongseong Kim (nevul37), UIUC
40 credits 20 CVEs Aug 2026 → Oct 2026
20 CVE 20 other
40
credits
#140
pwnie
40 credits 20 CVEs Jun 2025 → Apr 2026
40 CVE
40
credits
#141
이재영
40 credits 8 CVEs Jul 2026 → Oct 2026
38 CVE 2 recognition
40
credits
#142
Arni Hardarson (Neonix Security)
39 credits 17 CVEs 2 vendors Jul 2026 → Nov 2026
37 CVE 2 recognition
39
credits
#143
Zachariah Mithani
39 credits 31 CVEs 30 vendors Oct 2026 → Oct 2026
39 CVE
39
credits
#144
Pierre Rudloff (prudloff) of the Drupal Security Team
39 credits 23 CVEs Jul 2026 → Nov 2026
36 CVE 3 other
39
credits
#145
John Lussier
38 credits 4 CVEs Jun 2026 → Oct 2026
27 CVE 11 recognition
38
credits
#146
Hwiwon Lee (hwiwonl), UIUC
38 credits 20 CVEs Jul 2026 → Oct 2026
20 CVE 18 other
38
credits
#147
Ryan Hileman via Xint Code (xint.io)
38 credits 6 CVEs May 2026 → Oct 2026
33 CVE 5 recognition
38
credits
#148
hazard
38 credits 21 CVEs May 2026 → Oct 2026
21 CVE 17 other
38
credits
#149
yvvdwf
38 credits 19 CVEs Jun 2025 → Sep 2026
38 CVE
38
credits
#150
Mickey Jin (@patch1t)
38 credits 14 CVEs Jul 2026 → Oct 2026
38 CVE
38
credits