Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.

All vendors Microsoft 11,405 Apple 7,503 Google Chrome 1,659 Drupal 1,585 Mozilla 1,421 Jenkins 1,414 GitLab 321 Roundcube 180 Frappe 179 Red Hat 121 FreeRDP 119 Apache 97 Open-webui 79 ImageMagick 61 Sgl-project 50 Getgrav 43 Totolink 33 Eclipse Foundation 32 Curl 26 Hexpm 26 Advantech 25 Moodle 24 Zoom 23 Jishenghua 23 Surrealdb 22 Zitadel 22 Progress Software Corporation 21 Splunk 20 LogicalDOC 20 SourceCodester 19 Webkul 18 Edgelesssys 16 @sveltejs 16 Typo3 14 ZcashFoundation 14 Gnome 12 Eosphoros-ai 12 Craftcms 12 Netcore 12 Opencats 12 Progress 11 OpenSSL 11 Linksys 11 Traefik 10 VideoWhisper.com 10 Agno-agi 10 SolarWinds 10 Otrs 9 Letta-ai 9 DrayTek 9 Dromara 9 Erlang 8 Guchengwuyue 8 Brainstorm Force 8 Moxi624 8 Zen Cart 8 Froxlor 8 GitoxideLabs 8 Erik Debye 8 Fast-uri 8 Uselotus 7 ZKTeco 7 Aspose 7 Diem-project 7 Itsourcecode 7 Krupalshah 6 Admidio 6 Semcms 6 1Panel-dev 6 Erzhongxmu 6 Eptura 6 TrueBooker 6 MISP 6 Macrozheng 6 TDuckCloud 6 nh4tvd 6 Unclecode 6 Vraj404 5 GeoVision Inc. 5 H3C 5 Thelia 5 HMS Networks 5 Rdesktop 5 Arraytics 5 Meetecho 5 Librenms 5 Yungengxin 4 Dav-ee 4 Hotel Booking 4 Jovancoding 4 Project-MONAI 4 Emersion 4 Eleveo 4 Pbuchbinder 4 Opensource-socialnetwork 4 Ministry of Justice General Directorate of Information Technology 4 ElementsReady Addons for Elementor 4 Cure53 4 Siyuan-note 4 WatchGuard Fireware OS 4 Google 4 Tencent 4 VideoLAN 4 Easy Property Listings 4 FacturaScripts 4 Satya-vinay 4 Oretnom23 4 ACF Extended 3 Yangzongzhuan 3 WuKongOpenSource 3 Westboy 3 Cloudflare 3 DeepPavlov 3 TP-Link Systems Inc. 3 Camunda 3 aaPanel 3 Lavalite 3 Krayin 3 Netis 3 Sunkaifei 3 WP ManageNinja LLC 3 Fireware OS 3 Studio-Saelix 3 Houtini-ai 3 Subhajitkhan 3 BlackBeltTechnology 3 Deepseek-ai 3 Elunez 2 Parse-community 2 Neo4j 2 Gz-yami 2 GPAC 2 MikroTik 1 Dell 1 Grafana 1 The Wikimedia Foundation Mediaw 1 Stormshield 1 Y 1 C4illin 0 Trusted Domain Project 0 MongoDB 0 Pypa 0 GestSup 0 E2fsprogs 0 Dassault Systèmes 0 A2aproject 0 Hewlett Packard Enterprise 0 Unisoc 0 Argoproj 0 SQLite 0 Eyeplus 0 WSO2 0 Libxml2 0 Samsung 0 Zephyrproject-rtos 0 Linux 0 Tox-dev 0 David-Crty 0 IBM 0 Util-linux 0 Ziroom 0 Kernel 0 Vitejs 0 FOSSBilling 0 YS-infoware 0 Vitest-dev 0 Linux Kernel 0 Kvcache-ai 0 Python 0 ASUS 0 Markdown-it 0 OpenPrinting 0 DevaslanPHP 0 Qt 0 Mljar 0 Https://github.com/curl/curl 0 Python-pillow 0 HAProxy 0 Aio-libs 0 Oracle Corporation 0 Apostrophecms 0 Fortinet 0 Siemens 0 OpenVPN 0 Systemd 0 Zephyrproject 0 openGauss-server 0 NewType Infortech 0
500 researchers
#51
Ro Achterberg of Nosebeard Labs
64 credits 13 CVEs May 2026 → Sep 2026
59 CVE 5 recognition
64
credits
#52
Byzero with Kunlun Lab
64 credits 64 CVEs Jul 2026 → Oct 2026
64 CVE
64
credits
#53
P1hcn
63 credits 32 CVEs May 2026 → Oct 2026
32 CVE 31 other
63
credits
#54
Lee Rowlands (larowlan) of the Drupal Security Team
63 credits 32 CVEs Mar 2025 → Oct 2026
6 CVE 57 other
63
credits
#55
leediay153 from Viettel Post
61 credits 58 CVEs 29 vendors Sep 2026 → Oct 2026
61 CVE
61
credits
#56
Tommy DeVoss from Braze Security Team (@thedawgyg)
61 credits 7 CVEs Jun 2026 → Sep 2026
54 CVE 7 recognition
61
credits
#57
Byzero with Kunlun Lab & Zhiniang Peng with HUST
60 credits 60 CVEs Sep 2026 → Oct 2026
60
credits
#58
Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
60 credits 30 CVEs Jun 2026 → Sep 2026
30 CVE 30 other
60
credits
#59
Yaroslav Afenkin, CloudBees, Inc.
60 credits 56 CVEs Jun 2022 → Dec 2025
56 CVE 4 other
60
credits
#60
Jonghoi Kim
60 credits 31 CVEs Jun 2026 → Oct 2026
31 CVE 29 other
60
credits
#61
goodbyeselene
59 credits 29 CVEs 2 vendors Jun 2026 → Oct 2026
29 CVE 30 other
59
credits
#62
dr3dd
59 credits 8 CVEs May 2026 → Aug 2026
54 CVE 5 recognition
59
credits
#63
Drew Webber (mcdruid) of the Drupal Security Team
58 credits 31 CVEs Feb 2025 → Oct 2026
36 CVE 22 other
58
credits
#64
Richard Zana
56 credits 9 CVEs May 2026 → Sep 2026
53 CVE 3 recognition
56
credits
#65
Ky0toFu
54 credits 30 CVEs May 2026 → Oct 2026
30 CVE 24 other
54
credits
#66
Hwiwon Lee (hwiwonl) with UIUC
53 credits 29 CVEs 2 vendors May 2026 → Oct 2026
34 CVE 19 other
53
credits
#67
diptanilsaha
51 credits 51 CVEs Oct 2026 → Oct 2026
51 CVE
51
credits
#68
Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
51 credits 26 CVEs May 2026 → Sep 2026
26 CVE 25 other
51
credits
#69
R4nger with Kunlun Lab
51 credits 50 CVEs Jun 2026 → Oct 2026
50 CVE 1 other
51
credits
#70
SeaDragnoL with Qrious Secure
51 credits 26 CVEs Jul 2026 → Oct 2026
26 CVE 25 other
51
credits
#71
sweetchip
51 credits 26 CVEs Jul 2026 → Oct 2026
26 CVE 25 other
51
credits
#72
Jongseong Kim (nevul37) with UIUC
51 credits 28 CVEs 2 vendors May 2026 → Oct 2026
33 CVE 18 other
51
credits
#73
DongJun Kim (smlijun) with UIUC
51 credits 28 CVEs 2 vendors May 2026 → Oct 2026
33 CVE 18 other
51
credits
#74
Anemone
49 credits 37 CVEs Jun 2026 → Oct 2026
37 CVE 12 other
49
credits
#75
Thanatos Tian (HKPolyU) & wgg & @2st__ with Diffract & Zhiniang Peng with HUST
49 credits 49 CVEs Jun 2026 → Oct 2026
49
credits
#76
R4nger with Kunlun Lab & Zhiniang Peng with HUST
48 credits 48 CVEs Jun 2026 → Oct 2026
48
credits
#77
James Holderness, IB Boost
48 credits 47 CVEs Aug 2019 → Sep 2020
47 CVE 1 other
48
credits
#78
Amy Burnett of OpenAI
47 credits 12 CVEs Sep 2026 → Oct 2026
47 CVE
47
credits
#79
Franco Belman at Blackwing Intelligence
47 credits 6 CVEs Jul 2026 → Sep 2026
42 CVE 5 recognition
47
credits
#80
Feng Xue
46 credits 7 CVEs May 2026 → Sep 2026
43 CVE 3 recognition
46
credits
#81
XGPT of ThreatBook
46 credits 7 CVEs May 2026 → Sep 2026
43 CVE 3 recognition
46
credits
#82
Rahul Raj
46 credits 5 CVEs Jul 2026 → Sep 2026
44 CVE 2 recognition
46
credits
#83
Stanislav Jelezoglo
45 credits 8 CVEs Jul 2026 → Sep 2026
45 CVE
45
credits
#84
Hyunwoo Kim (@v4bel)
45 credits 8 CVEs Jun 2026 → Sep 2026
45 CVE
45
credits
#85
Donghyeon Oh with Patchpoint
44 credits 22 CVEs Jun 2026 → Jul 2026
22 CVE 22 other
44
credits
#86
Surya Narayan Kushwaha
43 credits 7 CVEs Jul 2026 → Sep 2026
36 CVE 7 recognition
43
credits
#87
Xinyang Ge
43 credits 35 CVEs Sep 2026 → Oct 2026
43 CVE
43
credits
#88
Stuart Wallace
43 credits 8 CVEs Jul 2026 → Sep 2026
41 CVE 2 recognition
43
credits
#89
Rajesh Kumar
43 credits 35 CVEs Aug 2026 → Oct 2026
35 CVE 8 other
43
credits
#90
wgg with Diffract
42 credits 42 CVEs Jul 2026 → Oct 2026
42 CVE
42
credits
#91
Jacob Rockowitz (jrockowitz)
42 credits 21 CVEs Jul 2026 → Sep 2026
42
credits
#92
Ashish Kunwar
42 credits 7 CVEs 2 vendors May 2026 → Sep 2026
33 CVE 7 recognition 2 other
42
credits
#93
Ye Zhang (@VAR10CK) of Baidu Security
42 credits 5 CVEs Jun 2026 → Sep 2026
37 CVE 5 recognition
42
credits
#94
The Shadowserver Foundation
41 credits 41 CVEs 37 vendors Oct 2026 → Oct 2026
41 CVE
41
credits
#95
Lee Rowlands of the Drupal Security Team
41 credits 21 CVEs Feb 2022 → Nov 2024
41
credits
#96
sangnt (@gnas0x0018) with Viettel Cyber Security
39 credits 20 CVEs Jun 2026 → Oct 2026
20 CVE 19 other
39
credits
#97
hazard
38 credits 21 CVEs May 2026 → Oct 2026
21 CVE 17 other
38
credits
#98
Varun Goel
38 credits 19 CVEs Jun 2026 → Oct 2026
19 CVE 19 other
38
credits
#99
Zhang WangJunJie with Hillstone Networks
38 credits 19 CVEs Sep 2026 → Oct 2026
19 CVE 19 other
38
credits
#100
boolgombear
38 credits 21 CVEs Jul 2026 → Oct 2026
21 CVE 17 other
38
credits