Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 188 credit lines in published advisories.
All vendors
Microsoft 11,405
Apple 7,503
Google Chrome 1,659
Drupal 1,585
Mozilla 1,421
Jenkins 1,414
GitLab 321
Roundcube 180
Frappe 179
Red Hat 121
FreeRDP 119
Apache 97
Open-webui 79
ImageMagick 61
Sgl-project 50
Getgrav 43
Totolink 33
Eclipse Foundation 32
Curl 26
Hexpm 26
Advantech 25
Moodle 24
Zoom 23
Jishenghua 23
Surrealdb 22
Zitadel 22
Progress Software Corporation 21
Splunk 20
LogicalDOC 20
SourceCodester 19
Webkul 18
Edgelesssys 16
@sveltejs 16
Typo3 14
ZcashFoundation 14
Gnome 12
Eosphoros-ai 12
Craftcms 12
Netcore 12
Opencats 12
Progress 11
Linksys 11
OpenSSL 11
Traefik 10
VideoWhisper.com 10
Agno-agi 10
SolarWinds 10
Otrs 9
Letta-ai 9
DrayTek 9
Dromara 9
Guchengwuyue 8
Brainstorm Force 8
Erlang 8
Moxi624 8
Zen Cart 8
Froxlor 8
GitoxideLabs 8
Erik Debye 8
Fast-uri 8
Uselotus 7
ZKTeco 7
Aspose 7
Diem-project 7
Itsourcecode 7
Krupalshah 6
Admidio 6
Semcms 6
1Panel-dev 6
Erzhongxmu 6
TrueBooker 6
MISP 6
Eptura 6
Macrozheng 6
TDuckCloud 6
nh4tvd 6
Unclecode 6
Vraj404 5
GeoVision Inc. 5
H3C 5
Thelia 5
HMS Networks 5
Rdesktop 5
Arraytics 5
Meetecho 5
Librenms 5
Yungengxin 4
Dav-ee 4
Project-MONAI 4
Emersion 4
Hotel Booking 4
Jovancoding 4
Ministry of Justice General Directorate of Information Technology 4
Eleveo 4
Pbuchbinder 4
Opensource-socialnetwork 4
ElementsReady Addons for Elementor 4
Cure53 4
Siyuan-note 4
WatchGuard Fireware OS 4
Google 4
Tencent 4
VideoLAN 4
Easy Property Listings 4
Oretnom23 4
FacturaScripts 4
Satya-vinay 4
Yangzongzhuan 3
ACF Extended 3
Cloudflare 3
DeepPavlov 3
WuKongOpenSource 3
Westboy 3
TP-Link Systems Inc. 3
Camunda 3
aaPanel 3
Lavalite 3
Krayin 3
Netis 3
Sunkaifei 3
WP ManageNinja LLC 3
Fireware OS 3
Subhajitkhan 3
BlackBeltTechnology 3
Studio-Saelix 3
Houtini-ai 3
Deepseek-ai 3
Elunez 2
Parse-community 2
Neo4j 2
Gz-yami 2
GPAC 2
MikroTik 1
Grafana 1
Dell 1
The Wikimedia Foundation Mediaw 1
Stormshield 1
Y 1
E2fsprogs 0
C4illin 0
Trusted Domain Project 0
MongoDB 0
Pypa 0
GestSup 0
Argoproj 0
SQLite 0
Dassault Systèmes 0
A2aproject 0
Hewlett Packard Enterprise 0
Unisoc 0
Samsung 0
Zephyrproject-rtos 0
Eyeplus 0
WSO2 0
Libxml2 0
David-Crty 0
Linux 0
Tox-dev 0
IBM 0
Util-linux 0
Ziroom 0
Kernel 0
Vitejs 0
Linux Kernel 0
Kvcache-ai 0
Python 0
FOSSBilling 0
YS-infoware 0
Vitest-dev 0
Apostrophecms 0
Fortinet 0
ASUS 0
Markdown-it 0
OpenPrinting 0
DevaslanPHP 0
Qt 0
Mljar 0
Https://github.com/curl/curl 0
Python-pillow 0
HAProxy 0
Aio-libs 0
Oracle Corporation 0
openGauss-server 0
NewType Infortech 0
Siemens 0
OpenVPN 0
Systemd 0
Zephyrproject 0
#51
Ziyue Pan
2 credits
1 CVE Sep 2026 → Oct 2026
2 CVE
2
credits
#52
Hafiizh (https://www.linkedin.com/in/hafiizh-7aa6bb31/)
2 credits
1 CVE Oct 2026 → Oct 2026
2 CVE
2
credits
#53
Aria Akhavan - Haikhavan Security
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#54
Manojkumar Jaganathan Aka TheWhiteEvil with HackerBro Technologies
1 credits
1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#55
flyyy
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#56
Qadhafy Muhammad Tera
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#57
Sharkkcode
1 credits
1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#58
Keita Sode
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#59
Ashutosh
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#60
Umar Farooq
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#61
Michal Andryskowski
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#62
Young Min Kim (@ylemkimon)
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#63
Francesco Topol
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#64
Siung kim (@ksw9722) on 2026-09-06 [TBD][558342353] High CVE-2026-91711: Out of bounds write in ServiceWorker. Reported by Cristian Di Nicola (@crih.exe) on 2026-09-07 [TBD][558367547] High CVE-2026-91715: Type confusion
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#65
kirtikumarar
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#66
Autodidact
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#67
mikey233 of HackerOne
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#68
ywatanabee
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#69
Oran Simhony from Palo Alto Networks
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#70
Goodluck
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#71
Hyeonjun Ahn (@_deayzl)
1 credits
1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#72
0599jiangyc
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#74
Syn4pse (@ret2happy)
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#75
Lexi Groves (49016) on 2026-08-08 [N/A][546252753] Critical CVE-2026-87488: Use after free in WebGL. Reported by Google on 2026-08-14 [N/A][548127218] Critical CVE-2026-87438: Out of bounds write in WebGL. Reported by Go
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#76
Bhavya
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#77
Werner Kasselman
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#78
Muhammad Alifa Ramdhan (STARLABS SG)
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#79
Duc Nguyen of Calif.io in collaboration with OpenAI Codex Security
1 credits
1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#80
zenneth (randomguy6407)
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#81
Pan ZhenPeng
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#82
Google on 2026-04-13[N/A][533502257] High CVE-2026-85043: Incomplete cleanup in Network. Reported by Google on 2026-07-10[TBD][540357382] High CVE-2026-85048: Use after free in Compositing. Reported by Ngoc Hieu on 2026-
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#83
James Burton
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#84
Alessandro Rizzo (0xAlessandro)
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#85
Team Allied (Hyeongeun Ji, h4nk3r1n, h4vrut4, HunSec, nag0x)
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#86
Lyra Rebane (rebane2001)
1 credits
1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#87
with Xint
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#88
Naoya Miyaguchi
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#89
Emond Papegaaij
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#90
phamtien.ohr.s
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#91
Security
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#92
Anymous
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#93
TheKng
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#94
ngrunbaum
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#95
Florian Pradines
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#96
Putra Mahardika | Instagram @mhrdkaa._
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#97
heesun
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#98
Shaked Reiner (Palo Alto Networks)
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#99
triaged by Andrés Luksenberg
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#100
med.bassia
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits