Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.
All vendors
Microsoft 12,233
Apple 9,322
Google Chrome 3,682
Mozilla 2,401
Drupal 1,973
Jenkins 1,545
NVIDIA 901
GitLab 590
Apache 380
Red Hat 302
FreeRDP 264
Frappe 205
Roundcube 180
Palo Alto Networks 173
Gitea 126
Eclipse Foundation 103
ImageMagick 81
Open-webui 79
Sgl-project 79
OpenBSD 70
OpenSSL 60
Hewlett Packard Enterprise (HPE) 55
Totolink 51
Getgrav 50
Zulip 42
Progress Software 42
Wazuh 40
QNAP Systems Inc. 39
Hickory-dns 37
Curl 36
Thorsten 35
Linux 33
SourceCodester 33
Surrealdb 30
Mtrudel 30
Netcore 29
Undici 29
N8n-io 29
SQLite 29
Rclone 28
Wavlink 27
Webkul 27
Hexpm 26
Zitadel 26
YesWiki 26
Advantech 25
ThemeREX 25
WatchGuard 25
Go-vikunja 24
Craftcms 24
Moodle 24
Mattermost 23
Sensiolabs 23
Jishenghua 23
Linksys 23
SemanticMediaWiki 23
Kyverno 23
Crocoblock 23
Zoom 23
Admidio 22
TP-Link Systems Inc. 21
OpenIdentityPlatform 21
Progress Software Corporation 21
Brainstorm Force 21
ZcashFoundation 21
Typo3 21
Djangoproject 20
LogicalDOC 20
Gnome 20
Splunk 20
Letta-ai 18
Liquid Web / StellarWP 18
GNU 18
Themeum 18
NLnet Labs 17
Redaxo 17
weDevs 17
Ggml-org 16
Grokability 16
Potatosalad 16
bPlugins 16
Edgelesssys 16
Diem-project 16
@sveltejs 16
Cozmoslabs 15
Traefik 15
Vllm-project 15
Dromara 15
Docker 15
AM System 15
Libyal 15
Eosphoros-ai 15
Sunhillo Corporation 15
Erlang 15
X.org 14
HashiCorp 14
ThemeGrill 14
Unclecode 14
VideoWhisper.com 14
Openpanel-dev 14
Dell 14
Itsourcecode 13
Opencats 13
phpMyAdmin 13
Arraytics 13
SolarWinds 13
Dalibo 12
Shenzhen Shine Industrial Co., Ltd. 12
Froxlor 12
BMC 12
ThimPress 12
WP ManageNinja LLC 12
Ginlix-ai 12
TrueBooker 12
Tigroumeow 12
VillaTheme 12
Edimax 12
Siyuan-note 12
Agno-agi 12
Coze-dev 12
boneIO 11
E4jvikwp 11
Progress 11
Netpbm 11
GeoDirectory 11
GiveWP 11
Thelia 11
The GNU C Library 11
Erzhongxmu 11
Code-projects 11
Magepeople inc. 11
GitoxideLabs 11
Nvm-sh 11
MISP 10
WP Chill 10
Sabbatic 10
Control Web Panel 10
Better-auth 10
Oray 10
Xen 10
Google 10
Vraj404 10
A2aproject 10
GeoVision Inc. 10
Krupalshah 10
Rdesktop 10
HMS Networks 10
RT-Labs 10
ZKTeco 10
Php-web-design.com 9
FolioVision 9
Wpeverest 9
Kameleo 9
Oretnom23 9
Otrs 9
Iflytek 9
FFmpeg 9
SMCI 9
Kiloview 9
FasterXML 9
myCred 9
TeamViewer 9
Guchengwuyue 9
DrayTek 9
WPGraphQL 9
Darylldoyle 9
Wpmudev 9
H3C 9
Sonatype 9
NocoDB 9
WPVibes 8
Moxi624 8
Finsys 8
VideoLAN 8
Zen Cart 8
SonicWall 8
Fast-uri 8
PluginUs.Net 8
SUSE 8
Gedelumbung 8
WP Desk 8
YITH 8
Tencent 8
Opnsense 8
Cure53 8
Paoltaia 8
Nextcloud 8
Delta Electronics 8
Erik Debye 8
Dav-ee 8
Satya-vinay 8
Snap Finance 8
FV Flowplayer Video Player 8
Google Cloud 7
GitroomHQ 7
A2ui-project 7
1Panel-dev 7
Aspose 7
Deepseek-ai 7
Themeisle 7
Bytecodealliance 7
OpenText 7
Scribus 7
TPC Software 7
Subhajitkhan 7
Smub 7
Johnson Controls 7
Wpmu Dev 7
OpenBMB 7
10web 7
HivePress 7
Davidanderson 7
Apereo Foundation 7
Nozomi Networks 7
Latepoint 7
Mathurvishal 7
Macrozheng 7
Sahlberg 7
Rapid7 7
Python Software Foundation 7
WC Lovers 7
Grafana 7
Uselotus 7
TDuckCloud 7
PT Norther Lights Production 7
Camunda 6
Eptura 6
Ash-project 6
GDATASoftwareAG 6
Grandnode 6
RT-Labs AB 6
Peterschulznl 6
Parse-community 6
Mamunur Rashid 6
WPExperts 6
D-Link 6
Petpooja 6
BdThemes 6
nh4tvd 6
HuLaSpark 6
WP User Manager 6
Hisense 6
Stylemix 6
Mistralai 6
Ifso 6
WPManageNinja 6
ACF Extended 6
Handnot2 6
Nodemailer 6
StylemixThemes 6
Essential Real Estate 6
Pgadmin.org 6
Fireware OS 6
Dolibarr 6
WolfVision 6
ASUS 6
David Lingren 6
Directorist: AI-Powered Business Directory, Listings & Classified Ads 6
Codepeople 6
Vtk 6
Document Gallery 6
DataEase 6
Semcms 6
Wpdevteam 6
Contact Form by Supsystic 6
Realmag777 6
Hwk-fr 6
HeyCyan App 6
Benoitc 6
Krayin 6
AzuraCast 6
Qcam 6
TÜBİTAK BİLGEM Software Technologies Research Institute 6
Openremote 6
Jellyfin 6
TMS 6
Project-MONAI 6
Foxit Software Inc. 6
Sunkaifei 6
Fraunhoferhhi 6
Micromatch 5
AxxonSoft 5
Thalesgroup 5
miniOrange 5
esaqa GmbH 5
Jetmonsters 5
WuKongOpenSource 5
ProFTPD Project 5
CGM 5
Automattic 5
Imgproxy 5
CozyThemes 5
Artbees 5
SEPPmail AG 5
Jarun 5
Libimobiledevice 5
GPAC 5
Cloudflare 5
Essential Addons for Elementor 5
Elixir-lang 5
YunaiV 5
Otter Blocks 5
Librenms 5
Blender Foundation 5
Vtenext 5
Yangzongzhuan 5
Cakephp 5
LeapWorx 5
Octopus Deploy 5
Unlimited Elements 5
WPDeveloper 5
Meetecho 5
Tomdever 5
WProyal 5
Arketeam 5
Libexpat 5
Multivendorx 5
Ag-ui-protocol 5
Gravity Forms 5
DedeCMS 5
Acronis 5
Cesnet 5
Gen Digital 5
Tenda 5
Magepeopleteam 5
Moxa 5
Espocrm 5
DeepPavlov 5
NXP 4
ExpressTech 4
Koozali 4
WatchGuard Fireware OS 4
Kstover 4
Nkoriyama 4
Netis 4
Jovancoding 4
Advanced Custom Fields (ACF®) 4
WebPros 4
zhimaAi 4
Kodezen 4
WPvivid — Backup, Migration & Staging 4
PostgreSQL 4
FacturaScripts 4
Ministry of Justice General Directorate of Information Technology 4
FaveoSuite 4
Netty 4
Libtins 4
Dj-extensions.com 4
Nexbox 4
WPVR 4
Secure Custom Fields 4
Icagenda.com 4
Pbuchbinder 4
ElementsReady Addons for Elementor 4
Bytebase 4
Hotel Booking 4
Properfraction 4
Francoisjacquet 4
Shapedplugin 4
Emersion 4
Danoli3 4
Purocean 4
Wuxi Wubang Security Software 4
Media Library Assistant 4
Harfbuzz 4
HAVELSAN Inc. 4
LaraDashboard 4
aaPanel 4
Ztxz16 4
Yungengxin 4
The EPICS Community 4
CervantesSec 4
Qihoo 360 4
Eleveo 4
WPFunnels Team 4
BlackBeltTechnology 4
Tata Motors 4
Houtini-ai 4
SPIP 4
Easy Property Listings 4
Hupe13 4
NationalSecurityAgency 4
WWBN 4
Litespeedtech 4
Hankcs 4
All-in-One Video Gallery 4
Igor Funa 4
Coupa 4
Westboy 4
impleCode 4
Moodle Project 4
Infiniflow 4
Icret 4
Melograno 4
eLightUp 4
Opensource-socialnetwork 4
Jetbrains 4
Wpsoul 4
Boldgrid 4
AWS 4
Royal Addons for Elementor 4
Aguila Technologies 4
Campcodes 4
Surecart 3
Easysoft 3
Open5gs 3
MB Custom Post Types & Custom Taxonomies 3
Pretix 3
Pipeshub-ai 3
Romkatv 3
WebberZone 3
Xnau webdesign 3
CoreUnion 3
Zmister2016 3
Surfer 3
Saadiqbal 3
Oqtane 3
AyeCode Ltd 3
GitHub 3
Elementor 3
Studio-Saelix 3
Royal MCP 3
Spacetime 3
Dayrui 3
Blazethemes 3
Mmitch 3
RelyWP 3
ThemeHigh 3
Team-alembic 3
OpenStack 3
Ahmad 3
GStreamer 3
Yoosee 3
Ninenines 3
Prasathmani 3
Best Practical Solutions 3
Tribulant Software 3
Centreon 3
Owen2345 3
Agentscope-ai 3
Teamfunnelkit 3
Blueprintue 3
Beam-cloud 3
Phoenix Contact 3
Everest Forms 3
Phpipam 3
Stiofansisland 3
Alexandregz 3
BuddyForms 3
Frangoteam 3
PublishPress 3
WP Mailster 3
Welcart e-Commerce 3
Gz-yami 3
LiteSpeed Cache 3
Pie Register 3
Kubernetes 3
Webmin 3
Meow Apps 3
Wpmet 3
WebToffee 3
Yaycommerce 3
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes 3
Canva 3
Travisun 3
Krajowa Izba Rozliczeniowa 3
VertiGIS Ltd. 3
I.r.i.s S.a. 3
Premium Packages 3
Razorpay for WooCommerce 3
Osamaesh 3
Forgejo 3
Webasyst 3
Outline 3
Uscnanbu 3
Gemini Labs 3
Coder 3
Quickjs-ng 3
Huawei 3
Link Library 3
Photo Engine (Media Organizer & Lightroom) 3
Maccmspro 3
WIT 3
Keywordrush 3
Libsdl-org 3
C97net 3
Elunez 3
Jupyterlab 3
Go standard library 3
Kali Forms — Contact Form & Drag-and-Drop Builder 3
Kaliforms 3
Supsystic 3
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution 3
WSO2 3
Optimole 3
Wpchill 3
Presenton 3
Sanluan 3
Cloud Foundry 3
Webba Plugins 3
Plugins360 3
Themefusion 3
Xxyopen 3
Lavalite 3
Argilla 3
Y 2
Checkmk GmbH 2
SuiteCRM 2
Twisted 2
Spesmilo 2
ArcadeData 2
Bricks 2
Tornadoweb 2
Lightdash 2
Neo4j 2
Zyxel 2
Fortinet 2
Glpi-project 2
Qt 2
Delinea 2
Radareorg 2
Stirling-Tools 2
DBeaver 2
Rustls 2
Zohocorp 2
Ericsson 2
David-Crty 2
Mlflow 2
Gfi Usa, Llc 2
MikroTik 2
INFINITT Healthcare 2
Openemr 2
Zakład Ubezpieczeń Społecznych 2
Balbooa.com 2
Stormshield 1
Element-hq 1
Ultralytics 1
Snowflake 1
Strapi 1
ServiceNow 1
Turboderp-org 1
Zephyrproject 1
Kubeflow 1
Honojs 1
Mobile builder 1
Immich-app 1
Bitdefender 1
Sveltejs 1
FOSSBilling 1
C4illin 1
Modelcontextprotocol 1
Ziroom 1
RankMath 1
The HDF Group 1
Hapijs 1
The Wikimedia Foundation Mediaw 1
Chamilo 1
Ntop 1
Argoproj 0
Aio-libs 0
Pavel-odintsov 0
Cisco 0
DevaslanPHP 0
Keil 0
Anthropics 0
Unisoc (Shanghai) Technologies Co., Ltd. 0
openGauss-server 0
Trusted Domain Project 0
Okta 0
Bubka 0
Systemd 0
Digitalbazaar 0
The-40-Thieves 0
Espressif 0
Eugeny 0
Cacti 0
GestSup 0
Yeti-platform 0
Go-jose 0
Imagination Technologies 0
Sebhildebrandt 0
Mautic 0
IBM 0
Python-pillow 0
Samsung Semiconductor 0
HAProxy 0
LabRedesCefetRJ 0
Esri 0
Owasp-modsecurity 0
Apostrophecms 0
Alpine 0
Jenkins Project 0
Markdown-it 0
Https://github.com/curl/curl 0
Amazon 0
Ubiquiti Inc 0
About Time Technologies 0
Part-DB 0
Enspirit 0
Openwrt 0
Eaton 0
Christianhelle 0
Tesseract-ocr 0
Oracle Corporation 0
Angular 0
YS-infoware 0
Signalwire 0
Kernel 0
Follow-redirects 0
Nodejs 0
LibreDWG 0
Chartbrew 0
Yamaha Corporation 0
AMD 0
Open-quantum-safe 0
Isomorphic-git 0
Ultravioletrs 0
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. 0
Hewlett Packard Enterprise 0
Microsoft Corporation 0
Randombit 0
Highcharts 0
Elastic 0
Hitachi 0
Roostorg 0
Tinyhumansai 0
Kvcache-ai 0
Asterisk 0
Readest 0
Vitejs 0
Zephyrproject-rtos 0
Labstack 0
Juniper Networks 0
Libxml2 0
Authlib 0
Quest 0
Open-reception 0
Welotec 0
Nuxt 0
Linux Kernel 0
Oauthlib 0
Socfortress 0
Koxudaxi 0
DataDog 0
Pypa 0
Devolutions 0
Hitachi Energy 0
Tsparticles 0
Xibosignage 0
OpenPrinting 0
Franklioxygen 0
GROWI, Inc. 0
Zip-rs 0
Ardatan 0
Openvm-org 0
Jgraph 0
Jhuckaby 0
Open-wanderer 0
Absolute Software 0
Rgrove 0
Veeam 0
Py-pdf 0
Eyeplus 0
NetApp 0
Samsung 0
Gpustack 0
Cesanta 0
Util-linux 0
GeoNode 0
JeromeDevome 0
Gnutls 0
Yealink 0
OpenVPN 0
Freescout-help-desk 0
Capricorn86 0
Pyasn1 0
H2o 0
Siemens 0
Python 0
Libexpat project 0
Esa 0
Sysadminsmedia 0
Openldap 0
Vitest-dev 0
Tanium 0
Perforce 0
E2fsprogs 0
HCL 0
Autodesk 0
Lxsmnsyc 0
LY Corporation 0
MongoDB 0
Shopperlabs 0
Dassault Systèmes 0
Trellix 0
Zuke-build 0
Pi-hole 0
Unisoc 0
Intel(R) Processors 0
Mljar 0
Onnx 0
Intranda 0
Langchain-ai 0
Mariadb-corporation 0
NewType Infortech 0
HCLSoftware 0
Tox-dev 0
#151
namnp with Viettel Cyber Security
38 credits
20 CVEs May 2026 → Oct 2026
20 CVE 18 other
38
credits
#152
Dongjun Kim (smlijun), UIUC
38 credits
19 CVEs Aug 2026 → Oct 2026
19 CVE 19 other
38
credits
#153
Varun Goel
38 credits
19 CVEs Jun 2026 → Oct 2026
19 CVE 19 other
38
credits
#154
Daejin Lee
37 credits
19 CVEs Jul 2026 → Oct 2026
19 CVE 18 other
37
credits
#155
AlpetGexha
37 credits
30 CVEs 7 vendors
Oct 2026 → Nov 2026
37 CVE
37
credits
#156
Mathis Mansière
37 credits
7 CVEs Jul 2026 → Oct 2026
33 CVE 4 recognition
37
credits
#157
Cem Onat Karagun
37 credits
6 CVEs May 2026 → Oct 2026
27 CVE 10 recognition
37
credits
#158
Dhiyanesh Selvaraj (@redroot97)
37 credits
5 CVEs May 2026 → Oct 2026
34 CVE 3 recognition
37
credits
#159
Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
37 credits
8 CVEs Jul 2026 → Sep 2026
36 CVE 1 recognition
37
credits
#160
Found by AISLE in partnership with Red Hat
36 credits
36 CVEs May 2026 → Oct 2026
36 CVE
36
credits
#161
Killer Queen
36 credits
18 CVEs Aug 2026 → Oct 2026
18 CVE 18 other
36
credits
#162
Anthropic
36 credits
9 CVEs 5 vendors
May 2026 → Nov 2026
29 CVE 7 recognition
36
credits
#163
Kwak Kiyong
36 credits
5 CVEs Jun 2026 → Oct 2026
31 CVE 5 recognition
36
credits
#164
Souhail Hammou
36 credits
18 CVEs Jun 2026 → Oct 2026
18 CVE 18 other
36
credits
#165
Classic298
35 credits
18 CVEs Oct 2026 → Oct 2026
35 CVE
35
credits
#166
Vitaly Simonovich
35 credits
5 CVEs 2 vendors
May 2026 → Sep 2026
22 CVE 13 recognition
35
credits
#167
Francesco Benvenuto of Cisco Talos
34 credits
9 CVEs 2 vendors
Apr 2026 → Oct 2026
32 CVE 2 recognition
34
credits
#168
Michael Sromin
34 credits
18 CVEs 13 vendors
Oct 2026 → Oct 2026
34 CVE
34
credits
#169
HeeChan Kim with TeamH4C
34 credits
17 CVEs Aug 2026 → Oct 2026
17 CVE 17 other
34
credits
#170
Noy Pearl
34 credits
18 CVEs 13 vendors
Oct 2026 → Oct 2026
34 CVE
34
credits
#171
grass341 with Viettel Cyber Security
34 credits
17 CVEs Jul 2026 → Oct 2026
17 CVE 17 other
34
credits
#172
Valdes Che Zogou, CloudBees, Inc.
34 credits
30 CVEs Jun 2022 → Aug 2023
30 CVE 4 other
34
credits
#173
Anonymous working with TrendAI Zero Day Initiative
34 credits
18 CVEs 7 vendors
May 2026 → Nov 2026
33 CVE 1 other
34
credits
#174
Ophir Dror
34 credits
18 CVEs 13 vendors
Oct 2026 → Oct 2026
34 CVE
34
credits
#175
NVIDIA Offensive Security Research (OSR) team
33 credits
33 CVEs
33 CVE
33
credits
#176
Hiroki Imai (LAC Co., Ltd.)
33 credits
4 CVEs Jul 2026 → Sep 2026
30 CVE 3 recognition
33
credits
#177
Sudhanshu Dhage (sudhanshu0542)
33 credits
14 CVEs Aug 2026 → Oct 2026
15 CVE 18 other
33
credits
#178
Thomas de Grenier de Latour
33 credits
19 CVEs May 2018 → Feb 2020
32 CVE 1 other
33
credits
#179
Mustafa Calap (@ordinal0, dbg.re)
33 credits
7 CVEs Sep 2026 → Oct 2026
33 CVE
33
credits
#180
Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
33 credits
8 CVEs Jul 2026 → Oct 2026
33 CVE
33
credits
#181
Claudio Bozzato
33 credits
8 CVEs Jul 2026 → Oct 2026
31 CVE 2 recognition
33
credits
#182
Josh Maine of Calif.io
33 credits
6 CVEs Jul 2026 → Oct 2026
29 CVE 4 recognition
33
credits
#183
Aswin Kumar Gokulakannan
33 credits
9 CVEs May 2026 → Oct 2026
33 CVE
33
credits
#184
Ilya Andr (andrd3v)
32 credits
8 CVEs May 2026 → Oct 2026
28 CVE 4 recognition
32
credits
#185
Roman Zabicki
32 credits
6 CVEs Sep 2026 → Oct 2026
27 CVE 5 recognition
32
credits
#186
Myungyong Lee
32 credits
12 CVEs 4 vendors
Sep 2026 → Oct 2026
27 CVE 5 other
32
credits
#187
xjm of the Drupal Security Team
32 credits
17 CVEs Nov 2021 → Oct 2024
32
credits
#188
OpenAI Codex Security (amyb)
32 credits
19 CVEs Aug 2026 → Nov 2026
32 CVE
32
credits
#189
Linzishan, Anemone
32 credits
32 CVEs Aug 2026 → Oct 2026
32 CVE
32
credits
#190
lighthousekeeper1212
32 credits
29 CVEs 17 vendors
Oct 2026 → Oct 2026
32 CVE
32
credits
#191
Thanatos Tian (HKPolyU) & wgg & @2st__ with Diffract
31 credits
31 CVEs Jul 2026 → Oct 2026
31
credits
#192
go7f0
31 credits
16 CVEs Feb 2026 → Oct 2026
31 CVE
31
credits
#193
dzaku
31 credits
30 CVEs 23 vendors
Oct 2026 → Nov 2026
31 CVE
31
credits
#194
Ilya Andr (andrd3v) of Positive Technologies
31 credits
6 CVEs Jul 2026 → Oct 2026
29 CVE 2 recognition
31
credits
#195
OGINOME Tomohito
31 credits
9 CVEs 2 vendors
Jul 2026 → Nov 2026
31 CVE
31
credits
#196
Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
31 credits
5 CVEs May 2026 → Aug 2026
31 CVE
31
credits
#197
Jesse Glick, CloudBees, Inc.
30 credits
24 CVEs Mar 2018 → May 2025
29 CVE 1 other
30
credits
#198
Asaf Cohen
30 credits
8 CVEs May 2026 → Oct 2026
23 CVE 7 recognition
30
credits
#199
Khai Tran
30 credits
3 CVEs Jun 2026 → Aug 2026
30 CVE
30
credits
#200
Yanhaoxi
30 credits
16 CVEs 3 vendors
Oct 2026 → Nov 2026
30 CVE
30
credits