Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.
All vendors
Microsoft 11,405
Apple 7,503
Google Chrome 1,659
Drupal 1,585
Mozilla 1,421
Jenkins 1,414
GitLab 321
Roundcube 180
Frappe 179
Red Hat 121
FreeRDP 119
Apache 97
Open-webui 79
ImageMagick 61
Sgl-project 50
Getgrav 43
Totolink 33
Eclipse Foundation 32
Curl 26
Hexpm 26
Advantech 25
Moodle 24
Zoom 23
Jishenghua 23
Surrealdb 22
Zitadel 22
Progress Software Corporation 21
Splunk 20
LogicalDOC 20
SourceCodester 19
Webkul 18
Edgelesssys 16
@sveltejs 16
Typo3 14
ZcashFoundation 14
Gnome 12
Eosphoros-ai 12
Craftcms 12
Netcore 12
Opencats 12
Progress 11
OpenSSL 11
Linksys 11
Traefik 10
VideoWhisper.com 10
Agno-agi 10
SolarWinds 10
Otrs 9
Letta-ai 9
DrayTek 9
Dromara 9
Erlang 8
Guchengwuyue 8
Brainstorm Force 8
Moxi624 8
Zen Cart 8
Froxlor 8
GitoxideLabs 8
Erik Debye 8
Fast-uri 8
Uselotus 7
ZKTeco 7
Aspose 7
Diem-project 7
Itsourcecode 7
Krupalshah 6
Admidio 6
Semcms 6
1Panel-dev 6
Erzhongxmu 6
Eptura 6
TrueBooker 6
MISP 6
Macrozheng 6
TDuckCloud 6
nh4tvd 6
Unclecode 6
Vraj404 5
GeoVision Inc. 5
H3C 5
Thelia 5
HMS Networks 5
Rdesktop 5
Arraytics 5
Meetecho 5
Librenms 5
Yungengxin 4
Dav-ee 4
Hotel Booking 4
Jovancoding 4
Project-MONAI 4
Emersion 4
Eleveo 4
Pbuchbinder 4
Opensource-socialnetwork 4
Ministry of Justice General Directorate of Information Technology 4
ElementsReady Addons for Elementor 4
Cure53 4
Siyuan-note 4
WatchGuard Fireware OS 4
Google 4
Tencent 4
VideoLAN 4
Easy Property Listings 4
FacturaScripts 4
Satya-vinay 4
Oretnom23 4
ACF Extended 3
Yangzongzhuan 3
WuKongOpenSource 3
Westboy 3
Cloudflare 3
DeepPavlov 3
TP-Link Systems Inc. 3
Camunda 3
aaPanel 3
Lavalite 3
Krayin 3
Netis 3
Sunkaifei 3
WP ManageNinja LLC 3
Fireware OS 3
Studio-Saelix 3
Houtini-ai 3
Subhajitkhan 3
BlackBeltTechnology 3
Deepseek-ai 3
Elunez 2
Parse-community 2
Neo4j 2
Gz-yami 2
GPAC 2
MikroTik 1
Dell 1
Grafana 1
The Wikimedia Foundation Mediaw 1
Stormshield 1
Y 1
C4illin 0
Trusted Domain Project 0
MongoDB 0
Pypa 0
GestSup 0
E2fsprogs 0
Dassault Systèmes 0
A2aproject 0
Hewlett Packard Enterprise 0
Unisoc 0
Argoproj 0
SQLite 0
Eyeplus 0
WSO2 0
Libxml2 0
Samsung 0
Zephyrproject-rtos 0
Linux 0
Tox-dev 0
David-Crty 0
IBM 0
Util-linux 0
Ziroom 0
Kernel 0
Vitejs 0
FOSSBilling 0
YS-infoware 0
Vitest-dev 0
Linux Kernel 0
Kvcache-ai 0
Python 0
ASUS 0
Markdown-it 0
OpenPrinting 0
DevaslanPHP 0
Qt 0
Mljar 0
Https://github.com/curl/curl 0
Python-pillow 0
HAProxy 0
Aio-libs 0
Oracle Corporation 0
Apostrophecms 0
Fortinet 0
Siemens 0
OpenVPN 0
Systemd 0
Zephyrproject 0
openGauss-server 0
NewType Infortech 0
#51
Ro Achterberg of Nosebeard Labs
64 credits
13 CVEs May 2026 → Sep 2026
59 CVE 5 recognition
64
credits
#52
Byzero with Kunlun Lab
64 credits
64 CVEs Jul 2026 → Oct 2026
64 CVE
64
credits
#53
P1hcn
63 credits
32 CVEs May 2026 → Oct 2026
32 CVE 31 other
63
credits
#54
Lee Rowlands (larowlan) of the Drupal Security Team
63 credits
32 CVEs Mar 2025 → Oct 2026
6 CVE 57 other
63
credits
#55
leediay153 from Viettel Post
61 credits
58 CVEs 29 vendors
Sep 2026 → Oct 2026
61 CVE
61
credits
#56
Tommy DeVoss from Braze Security Team (@thedawgyg)
61 credits
7 CVEs Jun 2026 → Sep 2026
54 CVE 7 recognition
61
credits
#57
Byzero with Kunlun Lab & Zhiniang Peng with HUST
60 credits
60 CVEs Sep 2026 → Oct 2026
60
credits
#58
Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
60 credits
30 CVEs Jun 2026 → Sep 2026
30 CVE 30 other
60
credits
#59
Yaroslav Afenkin, CloudBees, Inc.
60 credits
56 CVEs Jun 2022 → Dec 2025
56 CVE 4 other
60
credits
#60
Jonghoi Kim
60 credits
31 CVEs Jun 2026 → Oct 2026
31 CVE 29 other
60
credits
#61
goodbyeselene
59 credits
29 CVEs 2 vendors
Jun 2026 → Oct 2026
29 CVE 30 other
59
credits
#62
dr3dd
59 credits
8 CVEs May 2026 → Aug 2026
54 CVE 5 recognition
59
credits
#63
Drew Webber (mcdruid) of the Drupal Security Team
58 credits
31 CVEs Feb 2025 → Oct 2026
36 CVE 22 other
58
credits
#64
Richard Zana
56 credits
9 CVEs May 2026 → Sep 2026
53 CVE 3 recognition
56
credits
#65
Ky0toFu
54 credits
30 CVEs May 2026 → Oct 2026
30 CVE 24 other
54
credits
#66
Hwiwon Lee (hwiwonl) with UIUC
53 credits
29 CVEs 2 vendors
May 2026 → Oct 2026
34 CVE 19 other
53
credits
#67
diptanilsaha
51 credits
51 CVEs Oct 2026 → Oct 2026
51 CVE
51
credits
#68
Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
51 credits
26 CVEs May 2026 → Sep 2026
26 CVE 25 other
51
credits
#69
R4nger with Kunlun Lab
51 credits
50 CVEs Jun 2026 → Oct 2026
50 CVE 1 other
51
credits
#70
SeaDragnoL with Qrious Secure
51 credits
26 CVEs Jul 2026 → Oct 2026
26 CVE 25 other
51
credits
#71
sweetchip
51 credits
26 CVEs Jul 2026 → Oct 2026
26 CVE 25 other
51
credits
#72
Jongseong Kim (nevul37) with UIUC
51 credits
28 CVEs 2 vendors
May 2026 → Oct 2026
33 CVE 18 other
51
credits
#73
DongJun Kim (smlijun) with UIUC
51 credits
28 CVEs 2 vendors
May 2026 → Oct 2026
33 CVE 18 other
51
credits
#74
Anemone
49 credits
37 CVEs Jun 2026 → Oct 2026
37 CVE 12 other
49
credits
#75
Thanatos Tian (HKPolyU) & wgg & @2st__ with Diffract & Zhiniang Peng with HUST
49 credits
49 CVEs Jun 2026 → Oct 2026
49
credits
#76
R4nger with Kunlun Lab & Zhiniang Peng with HUST
48 credits
48 CVEs Jun 2026 → Oct 2026
48
credits
#77
James Holderness, IB Boost
48 credits
47 CVEs Aug 2019 → Sep 2020
47 CVE 1 other
48
credits
#78
Amy Burnett of OpenAI
47 credits
12 CVEs Sep 2026 → Oct 2026
47 CVE
47
credits
#79
Franco Belman at Blackwing Intelligence
47 credits
6 CVEs Jul 2026 → Sep 2026
42 CVE 5 recognition
47
credits
#80
Feng Xue
46 credits
7 CVEs May 2026 → Sep 2026
43 CVE 3 recognition
46
credits
#81
XGPT of ThreatBook
46 credits
7 CVEs May 2026 → Sep 2026
43 CVE 3 recognition
46
credits
#82
Rahul Raj
46 credits
5 CVEs Jul 2026 → Sep 2026
44 CVE 2 recognition
46
credits
#83
Stanislav Jelezoglo
45 credits
8 CVEs Jul 2026 → Sep 2026
45 CVE
45
credits
#84
Hyunwoo Kim (@v4bel)
45 credits
8 CVEs Jun 2026 → Sep 2026
45 CVE
45
credits
#85
Donghyeon Oh with Patchpoint
44 credits
22 CVEs Jun 2026 → Jul 2026
22 CVE 22 other
44
credits
#86
Surya Narayan Kushwaha
43 credits
7 CVEs Jul 2026 → Sep 2026
36 CVE 7 recognition
43
credits
#87
Xinyang Ge
43 credits
35 CVEs Sep 2026 → Oct 2026
43 CVE
43
credits
#88
Stuart Wallace
43 credits
8 CVEs Jul 2026 → Sep 2026
41 CVE 2 recognition
43
credits
#89
Rajesh Kumar
43 credits
35 CVEs Aug 2026 → Oct 2026
35 CVE 8 other
43
credits
#90
wgg with Diffract
42 credits
42 CVEs Jul 2026 → Oct 2026
42 CVE
42
credits
#91
Jacob Rockowitz (jrockowitz)
42 credits
21 CVEs Jul 2026 → Sep 2026
42
credits
#92
Ashish Kunwar
42 credits
7 CVEs 2 vendors
May 2026 → Sep 2026
33 CVE 7 recognition 2 other
42
credits
#93
Ye Zhang (@VAR10CK) of Baidu Security
42 credits
5 CVEs Jun 2026 → Sep 2026
37 CVE 5 recognition
42
credits
#94
The Shadowserver Foundation
41 credits
41 CVEs 37 vendors
Oct 2026 → Oct 2026
41 CVE
41
credits
#95
Lee Rowlands of the Drupal Security Team
41 credits
21 CVEs Feb 2022 → Nov 2024
41
credits
#96
sangnt (@gnas0x0018) with Viettel Cyber Security
39 credits
20 CVEs Jun 2026 → Oct 2026
20 CVE 19 other
39
credits
#97
hazard
38 credits
21 CVEs May 2026 → Oct 2026
21 CVE 17 other
38
credits
#98
Varun Goel
38 credits
19 CVEs Jun 2026 → Oct 2026
19 CVE 19 other
38
credits
#99
Zhang WangJunJie with Hillstone Networks
38 credits
19 CVEs Sep 2026 → Oct 2026
19 CVE 19 other
38
credits
#100
boolgombear
38 credits
21 CVEs Jul 2026 → Oct 2026
21 CVE 17 other
38
credits