Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.
All vendors
Microsoft 11,445
Apple 7,503
Google Chrome 1,659
Drupal 1,606
Mozilla 1,421
Jenkins 1,414
GitLab 321
Roundcube 180
Frappe 179
FreeRDP 163
Red Hat 148
Apache 97
Open-webui 79
ImageMagick 61
Sgl-project 51
Eclipse Foundation 50
Getgrav 43
Totolink 33
Curl 26
Hexpm 26
OpenSSL 26
Advantech 25
Moodle 24
Zoom 23
Jishenghua 23
Surrealdb 22
Zitadel 22
Progress Software Corporation 21
Splunk 20
LogicalDOC 20
SourceCodester 19
Webkul 18
Linux 17
Edgelesssys 16
@sveltejs 16
Erlang 14
Typo3 14
ZcashFoundation 14
Gnome 13
Eosphoros-ai 12
Craftcms 12
Netcore 12
Opencats 12
Progress 11
Linksys 11
Traefik 10
VideoWhisper.com 10
Agno-agi 10
SolarWinds 10
Kiloview 9
ZKTeco 9
Otrs 9
Letta-ai 9
DrayTek 9
Dromara 9
Guchengwuyue 8
Brainstorm Force 8
Moxi624 8
Zen Cart 8
Erzhongxmu 8
Froxlor 8
GitoxideLabs 8
Erik Debye 8
Fast-uri 8
Unclecode 8
Uselotus 7
TP-Link Systems Inc. 7
Aspose 7
Macrozheng 7
Sahlberg 7
Diem-project 7
Itsourcecode 7
Krupalshah 6
Admidio 6
Semcms 6
1Panel-dev 6
Eptura 6
TrueBooker 6
MISP 6
Fireware OS 6
Google 6
TDuckCloud 6
nh4tvd 6
Vraj404 5
GeoVision Inc. 5
H3C 5
HMS Networks 5
Thelia 5
Rdesktop 5
Arraytics 5
Meetecho 5
CGM 5
Librenms 5
Yungengxin 4
Dav-ee 4
Project-MONAI 4
Emersion 4
Hotel Booking 4
Jovancoding 4
Opensource-socialnetwork 4
Ministry of Justice General Directorate of Information Technology 4
Eleveo 4
Pbuchbinder 4
Cure53 4
Otter Blocks 4
ElementsReady Addons for Elementor 4
WatchGuard Fireware OS 4
Siyuan-note 4
Tencent 4
VideoLAN 4
Gedelumbung 4
Easy Property Listings 4
Deepseek-ai 4
Oretnom23 4
FacturaScripts 4
Satya-vinay 4
Yangzongzhuan 3
NationalSecurityAgency 3
ACF Extended 3
SQLite 3
Westboy 3
Cloudflare 3
DeepPavlov 3
LiteSpeed Cache 3
WuKongOpenSource 3
Parse-community 3
Lavalite 3
Magepeople inc. 3
Camunda 3
aaPanel 3
E4jvikwp 3
GDATASoftwareAG 3
Krayin 3
Codepeople 3
VertiGIS Ltd. 3
Netis 3
Sunkaifei 3
Xnau webdesign 3
WP ManageNinja LLC 3
Houtini-ai 3
Subhajitkhan 3
BlackBeltTechnology 3
ASUS 3
Studio-Saelix 3
Stirling-Tools 2
Elunez 2
Dell 2
Neo4j 2
Python Software Foundation 2
Y 2
Gz-yami 2
GNU 2
GPAC 2
MikroTik 1
Grafana 1
The Wikimedia Foundation Mediaw 1
AWS 1
Stormshield 1
E2fsprogs 0
C4illin 0
Trusted Domain Project 0
Part-DB 0
MongoDB 0
Okta 0
Pypa 0
GestSup 0
Gnutls 0
Unisoc 0
OpenStack 0
Argoproj 0
Openldap 0
Dassault Systèmes 0
A2aproject 0
Hewlett Packard Enterprise 0
WSO2 0
Libxml2 0
Samsung 0
Zephyrproject-rtos 0
Eyeplus 0
David-Crty 0
Tox-dev 0
IBM 0
Util-linux 0
Ziroom 0
Kernel 0
Vitejs 0
Vitest-dev 0
Nodejs 0
Linux Kernel 0
Kvcache-ai 0
Python 0
FOSSBilling 0
YS-infoware 0
HAProxy 0
Cacti 0
Aio-libs 0
Oracle Corporation 0
Apostrophecms 0
Fortinet 0
Markdown-it 0
OpenPrinting 0
DevaslanPHP 0
Qt 0
Mljar 0
Https://github.com/curl/curl 0
Python-pillow 0
Intranda 0
openGauss-server 0
NewType Infortech 0
Authlib 0
Siemens 0
The-40-Thieves 0
OpenVPN 0
Systemd 0
Zephyrproject 0
#101
Sindre Sorhus
38 credits
9 CVEs Jul 2026 → Sep 2026
38 CVE
38
credits
#102
Varun Goel
38 credits
19 CVEs Jun 2026 → Oct 2026
19 CVE 19 other
38
credits
#103
Zhang WangJunJie with Hillstone Networks
38 credits
19 CVEs Sep 2026 → Oct 2026
19 CVE 19 other
38
credits
#104
namnp with Viettel Cyber Security
37 credits
20 CVEs May 2026 → Oct 2026
20 CVE 17 other
37
credits
#105
Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
37 credits
8 CVEs Jul 2026 → Sep 2026
36 CVE 1 recognition
37
credits
#106
Daejin Lee
37 credits
19 CVEs Jul 2026 → Oct 2026
19 CVE 18 other
37
credits
#107
Gia Bui (@yabeow) from Calif.io
37 credits
5 CVEs May 2026 → Aug 2026
37 CVE
37
credits
#108
Ruslan Dautov
37 credits
6 CVEs May 2026 → Sep 2026
35 CVE 2 recognition
37
credits
#109
Thanatos Tian (HKPolyU) & wgg with Diffract
36 credits
36 CVEs Jul 2026 → Oct 2026
36
credits
#110
ikram-4
36 credits
25 CVEs 6 vendors
Oct 2026 → Oct 2026
36 CVE
36
credits
#111
Vitaly Simonovich
35 credits
5 CVEs 2 vendors
May 2026 → Sep 2026
22 CVE 13 recognition
35
credits
#112
Classic298
35 credits
18 CVEs Oct 2026 → Oct 2026
35 CVE
35
credits
#113
Song Nuri
34 credits
4 CVEs Jun 2026 → Sep 2026
29 CVE 5 recognition
34
credits
#114
opensec-intelligence
34 credits
31 CVEs 3 vendors
Oct 2026 → Oct 2026
34 CVE
34
credits
#115
Dhiyanesh Selvaraj (@redroot97)
34 credits
5 CVEs May 2026 → Sep 2026
32 CVE 2 recognition
34
credits
#116
Valdes Che Zogou, CloudBees, Inc.
34 credits
30 CVEs Jun 2022 → Aug 2023
30 CVE 4 other
34
credits
#117
John Lussier
34 credits
3 CVEs Jun 2026 → Sep 2026
23 CVE 11 recognition
34
credits
#118
skigeek16
34 credits
31 CVEs 3 vendors
Oct 2026 → Oct 2026
34 CVE
34
credits
#119
Pierre Rudloff (prudloff) of the Drupal Security Team
34 credits
18 CVEs Jul 2026 → Oct 2026
31 CVE 3 other
34
credits
#120
Meta Red Team X - Nik Tsytsarkin
34 credits
5 CVEs Aug 2026 → Sep 2026
30 CVE 4 recognition
34
credits
#121
grass341 with Viettel Cyber Security
34 credits
17 CVEs Jul 2026 → Oct 2026
17 CVE 17 other
34
credits
#122
Kushalkhemka
34 credits
31 CVEs 3 vendors
Oct 2026 → Oct 2026
34 CVE
34
credits
#123
Souhail Hammou
34 credits
18 CVEs Jun 2026 → Oct 2026
18 CVE 16 other
34
credits
#124
mayank-jangid-moon
34 credits
31 CVEs 3 vendors
Oct 2026 → Oct 2026
34 CVE
34
credits
#125
HeeChan Kim with TeamH4C
34 credits
17 CVEs Aug 2026 → Oct 2026
17 CVE 17 other
34
credits
#126
George Chen
33 credits
33 CVEs 29 vendors
Oct 2026 → Oct 2026
33 CVE
33
credits
#127
NVIDIA Offensive Security Research (OSR) team
33 credits
33 CVEs
33 CVE
33
credits
#128
Sudhanshu Dhage (sudhanshu0542)
33 credits
14 CVEs Aug 2026 → Oct 2026
15 CVE 18 other
33
credits
#129
Hiroki Imai (LAC Co., Ltd.)
33 credits
4 CVEs Jul 2026 → Sep 2026
30 CVE 3 recognition
33
credits
#130
Oleg Nenashev, CloudBees, Inc.
32 credits
28 CVEs Feb 2018 → Dec 2022
28 CVE 4 other
32
credits
#131
Jongseong Kim (nevul37), UIUC
32 credits
19 CVEs Aug 2026 → Oct 2026
19 CVE 13 other
32
credits
#132
xjm of the Drupal Security Team
32 credits
17 CVEs Nov 2021 → Oct 2024
32
credits
#133
manus-pi
32 credits
20 CVEs 10 vendors
Oct 2026 → Oct 2026
32 CVE
32
credits
#134
Dave G.
32 credits
10 CVEs May 2026 → Sep 2026
32 CVE
32
credits
#135
Anthropic
31 credits
5 CVEs 2 vendors
May 2026 → Oct 2026
24 CVE 7 recognition
31
credits
#136
Niels Hofmans
31 credits
6 CVEs May 2026 → Sep 2026
27 CVE 4 recognition
31
credits
#137
Yaqoub Aldurayhim
31 credits
6 CVEs Sep 2026 → Oct 2026
30 CVE 1 other
31
credits
#138
Narendra Singh (@_3P1C)
31 credits
6 CVEs Jun 2026 → Sep 2026
31 CVE
31
credits
#139
Ryan Hileman via Xint Code (xint.io)
31 credits
5 CVEs May 2026 → Sep 2026
28 CVE 3 recognition
31
credits
#140
Thanatos Tian (HKPolyU) & wgg & @2st__ with Diffract
31 credits
31 CVEs Jul 2026 → Oct 2026
31
credits
#141
Lilith Wyatt of Cisco Talos
30 credits
30 CVEs Oct 2026 → Oct 2026
30 CVE
30
credits
#142
Chris Bailey - Short Circuit
30 credits
5 CVEs Sep 2026 → Sep 2026
25 CVE 5 recognition
30
credits
#143
Linzishan, Anemone
30 credits
30 CVEs Aug 2026 → Oct 2026
30 CVE
30
credits
#144
Kwak Kiyong
30 credits
3 CVEs Jun 2026 → Aug 2026
25 CVE 5 recognition
30
credits
#145
Khai Tran
30 credits
3 CVEs Jun 2026 → Aug 2026
30 CVE
30
credits
#146
Brandon Fisher
30 credits
15 CVEs Jun 2026 → Sep 2026
15 CVE 15 other
30
credits
#147
Lyutoon
30 credits
3 CVEs Jun 2026 → Sep 2026
25 CVE 5 recognition
30
credits
#148
Nicholas Carlini with Claude
29 credits
3 CVEs May 2026 → Sep 2026
22 CVE 7 recognition
29
credits
#149
David Zhu with Microsoft
29 credits
15 CVEs Jul 2026 → Oct 2026
15 CVE 14 other
29
credits
#150
Navtej Kathuria
29 credits
29 CVEs
29 CVE
29
credits