Early access. This site has moved to bugrater.com.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.

All vendors Microsoft 12,233 Apple 9,322 Google Chrome 3,682 Mozilla 2,401 Drupal 1,973 Jenkins 1,545 NVIDIA 901 GitLab 590 Apache 380 Red Hat 302 FreeRDP 264 Frappe 205 Roundcube 180 Palo Alto Networks 173 Gitea 126 Eclipse Foundation 103 ImageMagick 81 Open-webui 79 Sgl-project 79 OpenBSD 70 OpenSSL 60 Hewlett Packard Enterprise (HPE) 55 Totolink 51 Getgrav 50 Zulip 42 Progress Software 42 Wazuh 40 QNAP Systems Inc. 39 Hickory-dns 37 Curl 36 Thorsten 35 Linux 33 SourceCodester 33 Surrealdb 30 Mtrudel 30 Netcore 29 Undici 29 N8n-io 29 SQLite 29 Rclone 28 Wavlink 27 Webkul 27 Hexpm 26 Zitadel 26 YesWiki 26 Advantech 25 ThemeREX 25 WatchGuard 25 Go-vikunja 24 Craftcms 24 Moodle 24 Mattermost 23 Sensiolabs 23 Jishenghua 23 Linksys 23 SemanticMediaWiki 23 Kyverno 23 Crocoblock 23 Zoom 23 Admidio 22 TP-Link Systems Inc. 21 OpenIdentityPlatform 21 Progress Software Corporation 21 Brainstorm Force 21 ZcashFoundation 21 Typo3 21 Djangoproject 20 LogicalDOC 20 Gnome 20 Splunk 20 Letta-ai 18 Liquid Web / StellarWP 18 GNU 18 Themeum 18 NLnet Labs 17 Redaxo 17 weDevs 17 Ggml-org 16 Grokability 16 Potatosalad 16 bPlugins 16 Edgelesssys 16 Diem-project 16 @sveltejs 16 Cozmoslabs 15 Traefik 15 Vllm-project 15 Dromara 15 Docker 15 AM System 15 Libyal 15 Eosphoros-ai 15 Sunhillo Corporation 15 Erlang 15 X.org 14 HashiCorp 14 ThemeGrill 14 Unclecode 14 VideoWhisper.com 14 Openpanel-dev 14 Dell 14 Itsourcecode 13 Opencats 13 phpMyAdmin 13 Arraytics 13 SolarWinds 13 Dalibo 12 Shenzhen Shine Industrial Co., Ltd. 12 Froxlor 12 BMC 12 ThimPress 12 WP ManageNinja LLC 12 Ginlix-ai 12 TrueBooker 12 Tigroumeow 12 VillaTheme 12 Edimax 12 Siyuan-note 12 Agno-agi 12 Coze-dev 12 boneIO 11 E4jvikwp 11 Progress 11 Netpbm 11 GeoDirectory 11 GiveWP 11 Thelia 11 The GNU C Library 11 Erzhongxmu 11 Code-projects 11 Magepeople inc. 11 GitoxideLabs 11 Nvm-sh 11 MISP 10 WP Chill 10 Sabbatic 10 Control Web Panel 10 Better-auth 10 Oray 10 Xen 10 Google 10 Vraj404 10 A2aproject 10 GeoVision Inc. 10 Krupalshah 10 Rdesktop 10 HMS Networks 10 RT-Labs 10 ZKTeco 10 Php-web-design.com 9 FolioVision 9 Wpeverest 9 Kameleo 9 Oretnom23 9 Otrs 9 Iflytek 9 FFmpeg 9 SMCI 9 Kiloview 9 FasterXML 9 myCred 9 TeamViewer 9 Guchengwuyue 9 DrayTek 9 WPGraphQL 9 Darylldoyle 9 Wpmudev 9 H3C 9 Sonatype 9 NocoDB 9 WPVibes 8 Moxi624 8 Finsys 8 VideoLAN 8 Zen Cart 8 SonicWall 8 Fast-uri 8 PluginUs.Net 8 SUSE 8 Gedelumbung 8 WP Desk 8 YITH 8 Tencent 8 Opnsense 8 Cure53 8 Paoltaia 8 Nextcloud 8 Delta Electronics 8 Erik Debye 8 Dav-ee 8 Satya-vinay 8 Snap Finance 8 FV Flowplayer Video Player 8 Google Cloud 7 GitroomHQ 7 A2ui-project 7 1Panel-dev 7 Aspose 7 Deepseek-ai 7 Themeisle 7 Bytecodealliance 7 OpenText 7 Scribus 7 TPC Software 7 Subhajitkhan 7 Smub 7 Johnson Controls 7 Wpmu Dev 7 OpenBMB 7 10web 7 HivePress 7 Davidanderson 7 Apereo Foundation 7 Nozomi Networks 7 Latepoint 7 Mathurvishal 7 Macrozheng 7 Sahlberg 7 Rapid7 7 Python Software Foundation 7 WC Lovers 7 Grafana 7 Uselotus 7 TDuckCloud 7 PT Norther Lights Production 7 Camunda 6 Eptura 6 Ash-project 6 GDATASoftwareAG 6 Grandnode 6 RT-Labs AB 6 Peterschulznl 6 Parse-community 6 Mamunur Rashid 6 WPExperts 6 D-Link 6 Petpooja 6 BdThemes 6 nh4tvd 6 HuLaSpark 6 WP User Manager 6 Hisense 6 Stylemix 6 Mistralai 6 Ifso 6 WPManageNinja 6 ACF Extended 6 Handnot2 6 Nodemailer 6 StylemixThemes 6 Essential Real Estate 6 Pgadmin.org 6 Fireware OS 6 Dolibarr 6 WolfVision 6 ASUS 6 David Lingren 6 Directorist: AI-Powered Business Directory, Listings & Classified Ads 6 Codepeople 6 Vtk 6 Document Gallery 6 DataEase 6 Semcms 6 Wpdevteam 6 Contact Form by Supsystic 6 Realmag777 6 Hwk-fr 6 HeyCyan App 6 Benoitc 6 Krayin 6 AzuraCast 6 Qcam 6 TÜBİTAK BİLGEM Software Technologies Research Institute 6 Openremote 6 Jellyfin 6 TMS 6 Project-MONAI 6 Foxit Software Inc. 6 Sunkaifei 6 Fraunhoferhhi 6 Micromatch 5 AxxonSoft 5 Thalesgroup 5 miniOrange 5 esaqa GmbH 5 Jetmonsters 5 WuKongOpenSource 5 ProFTPD Project 5 CGM 5 Automattic 5 Imgproxy 5 CozyThemes 5 Artbees 5 SEPPmail AG 5 Jarun 5 Libimobiledevice 5 GPAC 5 Cloudflare 5 Essential Addons for Elementor 5 Elixir-lang 5 YunaiV 5 Otter Blocks 5 Librenms 5 Blender Foundation 5 Vtenext 5 Yangzongzhuan 5 Cakephp 5 LeapWorx 5 Octopus Deploy 5 Unlimited Elements 5 WPDeveloper 5 Meetecho 5 Tomdever 5 WProyal 5 Arketeam 5 Libexpat 5 Multivendorx 5 Ag-ui-protocol 5 Gravity Forms 5 DedeCMS 5 Acronis 5 Cesnet 5 Gen Digital 5 Tenda 5 Magepeopleteam 5 Moxa 5 Espocrm 5 DeepPavlov 5 NXP 4 ExpressTech 4 Koozali 4 WatchGuard Fireware OS 4 Kstover 4 Nkoriyama 4 Netis 4 Jovancoding 4 Advanced Custom Fields (ACF®) 4 WebPros 4 zhimaAi 4 Kodezen 4 WPvivid — Backup, Migration & Staging 4 PostgreSQL 4 FacturaScripts 4 Ministry of Justice General Directorate of Information Technology 4 FaveoSuite 4 Netty 4 Libtins 4 Dj-extensions.com 4 Nexbox 4 WPVR 4 Secure Custom Fields 4 Icagenda.com 4 Pbuchbinder 4 ElementsReady Addons for Elementor 4 Bytebase 4 Hotel Booking 4 Properfraction 4 Francoisjacquet 4 Shapedplugin 4 Emersion 4 Danoli3 4 Purocean 4 Wuxi Wubang Security Software 4 Media Library Assistant 4 Harfbuzz 4 HAVELSAN Inc. 4 LaraDashboard 4 aaPanel 4 Ztxz16 4 Yungengxin 4 The EPICS Community 4 CervantesSec 4 Qihoo 360 4 Eleveo 4 WPFunnels Team 4 BlackBeltTechnology 4 Tata Motors 4 Houtini-ai 4 SPIP 4 Easy Property Listings 4 Hupe13 4 NationalSecurityAgency 4 WWBN 4 Litespeedtech 4 Hankcs 4 All-in-One Video Gallery 4 Igor Funa 4 Coupa 4 Westboy 4 impleCode 4 Moodle Project 4 Infiniflow 4 Icret 4 Melograno 4 eLightUp 4 Opensource-socialnetwork 4 Jetbrains 4 Wpsoul 4 Boldgrid 4 AWS 4 Royal Addons for Elementor 4 Aguila Technologies 4 Campcodes 4 Surecart 3 Easysoft 3 Open5gs 3 MB Custom Post Types & Custom Taxonomies 3 Pretix 3 Pipeshub-ai 3 Romkatv 3 WebberZone 3 Xnau webdesign 3 CoreUnion 3 Zmister2016 3 Surfer 3 Saadiqbal 3 Oqtane 3 AyeCode Ltd 3 GitHub 3 Elementor 3 Studio-Saelix 3 Royal MCP 3 Spacetime 3 Dayrui 3 Blazethemes 3 Mmitch 3 RelyWP 3 ThemeHigh 3 Team-alembic 3 OpenStack 3 Ahmad 3 GStreamer 3 Yoosee 3 Ninenines 3 Prasathmani 3 Best Practical Solutions 3 Tribulant Software 3 Centreon 3 Owen2345 3 Agentscope-ai 3 Teamfunnelkit 3 Blueprintue 3 Beam-cloud 3 Phoenix Contact 3 Everest Forms 3 Phpipam 3 Stiofansisland 3 Alexandregz 3 BuddyForms 3 Frangoteam 3 PublishPress 3 WP Mailster 3 Welcart e-Commerce 3 Gz-yami 3 LiteSpeed Cache 3 Pie Register 3 Kubernetes 3 Webmin 3 Meow Apps 3 Wpmet 3 WebToffee 3 Yaycommerce 3 PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes 3 Canva 3 Travisun 3 Krajowa Izba Rozliczeniowa 3 VertiGIS Ltd. 3 I.r.i.s S.a. 3 Premium Packages 3 Razorpay for WooCommerce 3 Osamaesh 3 Forgejo 3 Webasyst 3 Outline 3 Uscnanbu 3 Gemini Labs 3 Coder 3 Quickjs-ng 3 Huawei 3 Link Library 3 Photo Engine (Media Organizer & Lightroom) 3 Maccmspro 3 WIT 3 Keywordrush 3 Libsdl-org 3 C97net 3 Elunez 3 Jupyterlab 3 Go standard library 3 Kali Forms — Contact Form & Drag-and-Drop Builder 3 Kaliforms 3 Supsystic 3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution 3 WSO2 3 Optimole 3 Wpchill 3 Presenton 3 Sanluan 3 Cloud Foundry 3 Webba Plugins 3 Plugins360 3 Themefusion 3 Xxyopen 3 Lavalite 3 Argilla 3 Y 2 Checkmk GmbH 2 SuiteCRM 2 Twisted 2 Spesmilo 2 ArcadeData 2 Bricks 2 Tornadoweb 2 Lightdash 2 Neo4j 2 Zyxel 2 Fortinet 2 Glpi-project 2 Qt 2 Delinea 2 Radareorg 2 Stirling-Tools 2 DBeaver 2 Rustls 2 Zohocorp 2 Ericsson 2 David-Crty 2 Mlflow 2 Gfi Usa, Llc 2 MikroTik 2 INFINITT Healthcare 2 Openemr 2 Zakład Ubezpieczeń Społecznych 2 Balbooa.com 2 Stormshield 1 Element-hq 1 Ultralytics 1 Snowflake 1 Strapi 1 ServiceNow 1 Turboderp-org 1 Zephyrproject 1 Kubeflow 1 Honojs 1 Mobile builder 1 Immich-app 1 Bitdefender 1 Sveltejs 1 FOSSBilling 1 C4illin 1 Modelcontextprotocol 1 Ziroom 1 RankMath 1 The HDF Group 1 Hapijs 1 The Wikimedia Foundation Mediaw 1 Chamilo 1 Ntop 1 Argoproj 0 Aio-libs 0 Pavel-odintsov 0 Cisco 0 DevaslanPHP 0 Keil 0 Anthropics 0 Unisoc (Shanghai) Technologies Co., Ltd. 0 openGauss-server 0 Trusted Domain Project 0 Okta 0 Bubka 0 Systemd 0 Digitalbazaar 0 The-40-Thieves 0 Espressif 0 Eugeny 0 Cacti 0 GestSup 0 Yeti-platform 0 Go-jose 0 Imagination Technologies 0 Sebhildebrandt 0 Mautic 0 IBM 0 Python-pillow 0 Samsung Semiconductor 0 HAProxy 0 LabRedesCefetRJ 0 Esri 0 Owasp-modsecurity 0 Apostrophecms 0 Alpine 0 Jenkins Project 0 Markdown-it 0 Https://github.com/curl/curl 0 Amazon 0 Ubiquiti Inc 0 About Time Technologies 0 Part-DB 0 Enspirit 0 Openwrt 0 Eaton 0 Christianhelle 0 Tesseract-ocr 0 Oracle Corporation 0 Angular 0 YS-infoware 0 Signalwire 0 Kernel 0 Follow-redirects 0 Nodejs 0 LibreDWG 0 Chartbrew 0 Yamaha Corporation 0 AMD 0 Open-quantum-safe 0 Isomorphic-git 0 Ultravioletrs 0 FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. 0 Hewlett Packard Enterprise 0 Microsoft Corporation 0 Randombit 0 Highcharts 0 Elastic 0 Hitachi 0 Roostorg 0 Tinyhumansai 0 Kvcache-ai 0 Asterisk 0 Readest 0 Vitejs 0 Zephyrproject-rtos 0 Labstack 0 Juniper Networks 0 Libxml2 0 Authlib 0 Quest 0 Open-reception 0 Welotec 0 Nuxt 0 Linux Kernel 0 Oauthlib 0 Socfortress 0 Koxudaxi 0 DataDog 0 Pypa 0 Devolutions 0 Hitachi Energy 0 Tsparticles 0 Xibosignage 0 OpenPrinting 0 Franklioxygen 0 GROWI, Inc. 0 Zip-rs 0 Ardatan 0 Openvm-org 0 Jgraph 0 Jhuckaby 0 Open-wanderer 0 Absolute Software 0 Rgrove 0 Veeam 0 Py-pdf 0 Eyeplus 0 NetApp 0 Samsung 0 Gpustack 0 Cesanta 0 Util-linux 0 GeoNode 0 JeromeDevome 0 Gnutls 0 Yealink 0 OpenVPN 0 Freescout-help-desk 0 Capricorn86 0 Pyasn1 0 H2o 0 Siemens 0 Python 0 Libexpat project 0 Esa 0 Sysadminsmedia 0 Openldap 0 Vitest-dev 0 Tanium 0 Perforce 0 E2fsprogs 0 HCL 0 Autodesk 0 Lxsmnsyc 0 LY Corporation 0 MongoDB 0 Shopperlabs 0 Dassault Systèmes 0 Trellix 0 Zuke-build 0 Pi-hole 0 Unisoc 0 Intel(R) Processors 0 Mljar 0 Onnx 0 Intranda 0 Langchain-ai 0 Mariadb-corporation 0 NewType Infortech 0 HCLSoftware 0 Tox-dev 0
500 researchers
#151
namnp with Viettel Cyber Security
38 credits 20 CVEs May 2026 → Oct 2026
20 CVE 18 other
38
credits
#152
Dongjun Kim (smlijun), UIUC
38 credits 19 CVEs Aug 2026 → Oct 2026
19 CVE 19 other
38
credits
#153
Varun Goel
38 credits 19 CVEs Jun 2026 → Oct 2026
19 CVE 19 other
38
credits
#154
Daejin Lee
37 credits 19 CVEs Jul 2026 → Oct 2026
19 CVE 18 other
37
credits
#155
AlpetGexha
37 credits 30 CVEs 7 vendors Oct 2026 → Nov 2026
37 CVE
37
credits
#156
Mathis Mansière
37 credits 7 CVEs Jul 2026 → Oct 2026
33 CVE 4 recognition
37
credits
#157
Cem Onat Karagun
37 credits 6 CVEs May 2026 → Oct 2026
27 CVE 10 recognition
37
credits
#158
Dhiyanesh Selvaraj (@redroot97)
37 credits 5 CVEs May 2026 → Oct 2026
34 CVE 3 recognition
37
credits
#159
Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
37 credits 8 CVEs Jul 2026 → Sep 2026
36 CVE 1 recognition
37
credits
#160
Found by AISLE in partnership with Red Hat
36 credits 36 CVEs May 2026 → Oct 2026
36 CVE
36
credits
#161
Killer Queen
36 credits 18 CVEs Aug 2026 → Oct 2026
18 CVE 18 other
36
credits
#162
Anthropic
36 credits 9 CVEs 5 vendors May 2026 → Nov 2026
29 CVE 7 recognition
36
credits
#163
Kwak Kiyong
36 credits 5 CVEs Jun 2026 → Oct 2026
31 CVE 5 recognition
36
credits
#164
Souhail Hammou
36 credits 18 CVEs Jun 2026 → Oct 2026
18 CVE 18 other
36
credits
#165
Classic298
35 credits 18 CVEs Oct 2026 → Oct 2026
35 CVE
35
credits
#166
Vitaly Simonovich
35 credits 5 CVEs 2 vendors May 2026 → Sep 2026
22 CVE 13 recognition
35
credits
#167
Francesco Benvenuto of Cisco Talos
34 credits 9 CVEs 2 vendors Apr 2026 → Oct 2026
32 CVE 2 recognition
34
credits
#168
Michael Sromin
34 credits 18 CVEs 13 vendors Oct 2026 → Oct 2026
34 CVE
34
credits
#169
HeeChan Kim with TeamH4C
34 credits 17 CVEs Aug 2026 → Oct 2026
17 CVE 17 other
34
credits
#170
Noy Pearl
34 credits 18 CVEs 13 vendors Oct 2026 → Oct 2026
34 CVE
34
credits
#171
grass341 with Viettel Cyber Security
34 credits 17 CVEs Jul 2026 → Oct 2026
17 CVE 17 other
34
credits
#172
Valdes Che Zogou, CloudBees, Inc.
34 credits 30 CVEs Jun 2022 → Aug 2023
30 CVE 4 other
34
credits
#173
Anonymous working with TrendAI Zero Day Initiative
34 credits 18 CVEs 7 vendors May 2026 → Nov 2026
33 CVE 1 other
34
credits
#174
Ophir Dror
34 credits 18 CVEs 13 vendors Oct 2026 → Oct 2026
34 CVE
34
credits
#175
NVIDIA Offensive Security Research (OSR) team
33 credits 33 CVEs
33 CVE
33
credits
#176
Hiroki Imai (LAC Co., Ltd.)
33 credits 4 CVEs Jul 2026 → Sep 2026
30 CVE 3 recognition
33
credits
#177
Sudhanshu Dhage (sudhanshu0542)
33 credits 14 CVEs Aug 2026 → Oct 2026
15 CVE 18 other
33
credits
#178
Thomas de Grenier de Latour
33 credits 19 CVEs May 2018 → Feb 2020
32 CVE 1 other
33
credits
#179
Mustafa Calap (@ordinal0, dbg.re)
33 credits 7 CVEs Sep 2026 → Oct 2026
33 CVE
33
credits
#180
Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
33 credits 8 CVEs Jul 2026 → Oct 2026
33 CVE
33
credits
#181
Claudio Bozzato
33 credits 8 CVEs Jul 2026 → Oct 2026
31 CVE 2 recognition
33
credits
#182
Josh Maine of Calif.io
33 credits 6 CVEs Jul 2026 → Oct 2026
29 CVE 4 recognition
33
credits
#183
Aswin Kumar Gokulakannan
33 credits 9 CVEs May 2026 → Oct 2026
33 CVE
33
credits
#184
Ilya Andr (andrd3v)
32 credits 8 CVEs May 2026 → Oct 2026
28 CVE 4 recognition
32
credits
#185
Roman Zabicki
32 credits 6 CVEs Sep 2026 → Oct 2026
27 CVE 5 recognition
32
credits
#186
Myungyong Lee
32 credits 12 CVEs 4 vendors Sep 2026 → Oct 2026
27 CVE 5 other
32
credits
#187
xjm of the Drupal Security Team
32 credits 17 CVEs Nov 2021 → Oct 2024
32
credits
#188
OpenAI Codex Security (amyb)
32 credits 19 CVEs Aug 2026 → Nov 2026
32 CVE
32
credits
#189
Linzishan, Anemone
32 credits 32 CVEs Aug 2026 → Oct 2026
32 CVE
32
credits
#190
lighthousekeeper1212
32 credits 29 CVEs 17 vendors Oct 2026 → Oct 2026
32 CVE
32
credits
#191
Thanatos Tian (HKPolyU) & wgg & @2st__ with Diffract
31 credits 31 CVEs Jul 2026 → Oct 2026
31
credits
#192
go7f0
31 credits 16 CVEs Feb 2026 → Oct 2026
31 CVE
31
credits
#193
dzaku
31 credits 30 CVEs 23 vendors Oct 2026 → Nov 2026
31 CVE
31
credits
#194
Ilya Andr (andrd3v) of Positive Technologies
31 credits 6 CVEs Jul 2026 → Oct 2026
29 CVE 2 recognition
31
credits
#195
OGINOME Tomohito
31 credits 9 CVEs 2 vendors Jul 2026 → Nov 2026
31 CVE
31
credits
#196
Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
31 credits 5 CVEs May 2026 → Aug 2026
31 CVE
31
credits
#197
Jesse Glick, CloudBees, Inc.
30 credits 24 CVEs Mar 2018 → May 2025
29 CVE 1 other
30
credits
#198
Asaf Cohen
30 credits 8 CVEs May 2026 → Oct 2026
23 CVE 7 recognition
30
credits
#199
Khai Tran
30 credits 3 CVEs Jun 2026 → Aug 2026
30 CVE
30
credits
#200
Yanhaoxi
30 credits 16 CVEs 3 vendors Oct 2026 → Nov 2026
30 CVE
30
credits