Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 188 credit lines in published advisories.

All vendors Microsoft 11,405 Apple 7,503 Google Chrome 1,659 Drupal 1,585 Mozilla 1,421 Jenkins 1,414 GitLab 321 Roundcube 180 Frappe 179 Red Hat 121 FreeRDP 119 Apache 97 Open-webui 79 ImageMagick 61 Sgl-project 50 Getgrav 43 Totolink 33 Eclipse Foundation 32 Curl 26 Hexpm 26 Advantech 25 Moodle 24 Zoom 23 Jishenghua 23 Surrealdb 22 Zitadel 22 Progress Software Corporation 21 Splunk 20 LogicalDOC 20 SourceCodester 19 Webkul 18 Edgelesssys 16 @sveltejs 16 Typo3 14 ZcashFoundation 14 Gnome 12 Eosphoros-ai 12 Craftcms 12 Netcore 12 Opencats 12 Progress 11 Linksys 11 OpenSSL 11 Traefik 10 VideoWhisper.com 10 Agno-agi 10 SolarWinds 10 Otrs 9 Letta-ai 9 DrayTek 9 Dromara 9 Guchengwuyue 8 Brainstorm Force 8 Erlang 8 Moxi624 8 Zen Cart 8 Froxlor 8 GitoxideLabs 8 Erik Debye 8 Fast-uri 8 Uselotus 7 ZKTeco 7 Aspose 7 Diem-project 7 Itsourcecode 7 Krupalshah 6 Admidio 6 Semcms 6 1Panel-dev 6 Erzhongxmu 6 TrueBooker 6 MISP 6 Eptura 6 Macrozheng 6 TDuckCloud 6 nh4tvd 6 Unclecode 6 Vraj404 5 GeoVision Inc. 5 H3C 5 Thelia 5 HMS Networks 5 Rdesktop 5 Arraytics 5 Meetecho 5 Librenms 5 Yungengxin 4 Dav-ee 4 Project-MONAI 4 Emersion 4 Hotel Booking 4 Jovancoding 4 Ministry of Justice General Directorate of Information Technology 4 Eleveo 4 Pbuchbinder 4 Opensource-socialnetwork 4 ElementsReady Addons for Elementor 4 Cure53 4 Siyuan-note 4 WatchGuard Fireware OS 4 Google 4 Tencent 4 VideoLAN 4 Easy Property Listings 4 Oretnom23 4 FacturaScripts 4 Satya-vinay 4 Yangzongzhuan 3 ACF Extended 3 Cloudflare 3 DeepPavlov 3 WuKongOpenSource 3 Westboy 3 TP-Link Systems Inc. 3 Camunda 3 aaPanel 3 Lavalite 3 Krayin 3 Netis 3 Sunkaifei 3 WP ManageNinja LLC 3 Fireware OS 3 Subhajitkhan 3 BlackBeltTechnology 3 Studio-Saelix 3 Houtini-ai 3 Deepseek-ai 3 Elunez 2 Parse-community 2 Neo4j 2 Gz-yami 2 GPAC 2 MikroTik 1 Grafana 1 Dell 1 The Wikimedia Foundation Mediaw 1 Stormshield 1 Y 1 E2fsprogs 0 C4illin 0 Trusted Domain Project 0 MongoDB 0 Pypa 0 GestSup 0 Argoproj 0 SQLite 0 Dassault Systèmes 0 A2aproject 0 Hewlett Packard Enterprise 0 Unisoc 0 Samsung 0 Zephyrproject-rtos 0 Eyeplus 0 WSO2 0 Libxml2 0 David-Crty 0 Linux 0 Tox-dev 0 IBM 0 Util-linux 0 Ziroom 0 Kernel 0 Vitejs 0 Linux Kernel 0 Kvcache-ai 0 Python 0 FOSSBilling 0 YS-infoware 0 Vitest-dev 0 Apostrophecms 0 Fortinet 0 ASUS 0 Markdown-it 0 OpenPrinting 0 DevaslanPHP 0 Qt 0 Mljar 0 Https://github.com/curl/curl 0 Python-pillow 0 HAProxy 0 Aio-libs 0 Oracle Corporation 0 openGauss-server 0 NewType Infortech 0 Siemens 0 OpenVPN 0 Systemd 0 Zephyrproject 0
188 researchers · Google Chrome
#51
Ziyue Pan
2 credits 1 CVE Sep 2026 → Oct 2026
2 CVE
2
credits
#52
Hafiizh (https://www.linkedin.com/in/hafiizh-7aa6bb31/)
2 credits 1 CVE Oct 2026 → Oct 2026
2 CVE
2
credits
#53
Aria Akhavan - Haikhavan Security
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#54
Manojkumar Jaganathan Aka TheWhiteEvil with HackerBro Technologies
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#55
flyyy
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#56
Qadhafy Muhammad Tera
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#57
Sharkkcode
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#58
Keita Sode
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#59
Ashutosh
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#60
Umar Farooq
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#61
Michal Andryskowski
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#62
Young Min Kim (@ylemkimon)
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#63
Francesco Topol
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#64
Siung kim (@ksw9722) on 2026-09-06 [TBD][558342353] High CVE-2026-91711: Out of bounds write in ServiceWorker. Reported by Cristian Di Nicola (@crih.exe) on 2026-09-07 [TBD][558367547] High CVE-2026-91715: Type confusion
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#65
kirtikumarar
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#66
Autodidact
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#67
mikey233 of HackerOne
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#68
ywatanabee
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#69
Oran Simhony from Palo Alto Networks
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#70
Goodluck
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#71
Hyeonjun Ahn (@_deayzl)
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#72
0599jiangyc
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#73
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
SSP
#74
Syn4pse (@ret2happy)
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#75
Lexi Groves (49016) on 2026-08-08 [N/A][546252753] Critical CVE-2026-87488: Use after free in WebGL. Reported by Google on 2026-08-14 [N/A][548127218] Critical CVE-2026-87438: Out of bounds write in WebGL. Reported by Go
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#76
Bhavya
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#77
Werner Kasselman
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#78
Muhammad Alifa Ramdhan (STARLABS SG)
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#79
Duc Nguyen of Calif.io in collaboration with OpenAI Codex Security
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#80
zenneth (randomguy6407)
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#81
Pan ZhenPeng
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#82
Google on 2026-04-13[N/A][533502257] High CVE-2026-85043: Incomplete cleanup in Network. Reported by Google on 2026-07-10[TBD][540357382] High CVE-2026-85048: Use after free in Compositing. Reported by Ngoc Hieu on 2026-
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#83
James Burton
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#84
Alessandro Rizzo (0xAlessandro)
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#85
Team Allied (Hyeongeun Ji, h4nk3r1n, h4vrut4, HunSec, nag0x)
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#86
Lyra Rebane (rebane2001)
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#87
with Xint
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#88
Naoya Miyaguchi
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#89
Emond Papegaaij
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#90
phamtien.ohr.s
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#91
Security
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#92
Anymous
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#93
TheKng
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#94
ngrunbaum
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#95
Florian Pradines
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#96
Putra Mahardika | Instagram @mhrdkaa._
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#97
heesun
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#98
Shaked Reiner (Palo Alto Networks)
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#99
triaged by Andrés Luksenberg
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#100
med.bassia
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits