Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.

All vendors Microsoft 11,445 Apple 7,503 Google Chrome 1,659 Drupal 1,606 Mozilla 1,421 Jenkins 1,414 GitLab 321 Roundcube 180 Frappe 179 FreeRDP 163 Red Hat 148 Apache 97 Open-webui 79 ImageMagick 61 Sgl-project 51 Eclipse Foundation 50 Getgrav 43 Totolink 33 Curl 26 Hexpm 26 OpenSSL 26 Advantech 25 Moodle 24 Zoom 23 Jishenghua 23 Surrealdb 22 Zitadel 22 Progress Software Corporation 21 Splunk 20 LogicalDOC 20 SourceCodester 19 Webkul 18 Linux 17 Edgelesssys 16 @sveltejs 16 Erlang 14 Typo3 14 ZcashFoundation 14 Gnome 13 Eosphoros-ai 12 Craftcms 12 Netcore 12 Opencats 12 Progress 11 Linksys 11 Traefik 10 VideoWhisper.com 10 Agno-agi 10 SolarWinds 10 Kiloview 9 ZKTeco 9 Otrs 9 Letta-ai 9 DrayTek 9 Dromara 9 Guchengwuyue 8 Brainstorm Force 8 Moxi624 8 Zen Cart 8 Erzhongxmu 8 Froxlor 8 GitoxideLabs 8 Erik Debye 8 Fast-uri 8 Unclecode 8 Uselotus 7 TP-Link Systems Inc. 7 Aspose 7 Macrozheng 7 Sahlberg 7 Diem-project 7 Itsourcecode 7 Krupalshah 6 Admidio 6 Semcms 6 1Panel-dev 6 Eptura 6 TrueBooker 6 MISP 6 Fireware OS 6 Google 6 TDuckCloud 6 nh4tvd 6 Vraj404 5 GeoVision Inc. 5 H3C 5 HMS Networks 5 Thelia 5 Rdesktop 5 Arraytics 5 Meetecho 5 CGM 5 Librenms 5 Yungengxin 4 Dav-ee 4 Project-MONAI 4 Emersion 4 Hotel Booking 4 Jovancoding 4 Opensource-socialnetwork 4 Ministry of Justice General Directorate of Information Technology 4 Eleveo 4 Pbuchbinder 4 Cure53 4 Otter Blocks 4 ElementsReady Addons for Elementor 4 WatchGuard Fireware OS 4 Siyuan-note 4 Tencent 4 VideoLAN 4 Gedelumbung 4 Easy Property Listings 4 Deepseek-ai 4 Oretnom23 4 FacturaScripts 4 Satya-vinay 4 Yangzongzhuan 3 NationalSecurityAgency 3 ACF Extended 3 SQLite 3 Westboy 3 Cloudflare 3 DeepPavlov 3 LiteSpeed Cache 3 WuKongOpenSource 3 Parse-community 3 Lavalite 3 Magepeople inc. 3 Camunda 3 aaPanel 3 E4jvikwp 3 GDATASoftwareAG 3 Krayin 3 Codepeople 3 VertiGIS Ltd. 3 Netis 3 Sunkaifei 3 Xnau webdesign 3 WP ManageNinja LLC 3 Houtini-ai 3 Subhajitkhan 3 BlackBeltTechnology 3 ASUS 3 Studio-Saelix 3 Stirling-Tools 2 Elunez 2 Dell 2 Neo4j 2 Python Software Foundation 2 Y 2 Gz-yami 2 GNU 2 GPAC 2 MikroTik 1 Grafana 1 The Wikimedia Foundation Mediaw 1 AWS 1 Stormshield 1 E2fsprogs 0 C4illin 0 Trusted Domain Project 0 Part-DB 0 MongoDB 0 Okta 0 Pypa 0 GestSup 0 Gnutls 0 Unisoc 0 OpenStack 0 Argoproj 0 Openldap 0 Dassault Systèmes 0 A2aproject 0 Hewlett Packard Enterprise 0 WSO2 0 Libxml2 0 Samsung 0 Zephyrproject-rtos 0 Eyeplus 0 David-Crty 0 Tox-dev 0 IBM 0 Util-linux 0 Ziroom 0 Kernel 0 Vitejs 0 Vitest-dev 0 Nodejs 0 Linux Kernel 0 Kvcache-ai 0 Python 0 FOSSBilling 0 YS-infoware 0 HAProxy 0 Cacti 0 Aio-libs 0 Oracle Corporation 0 Apostrophecms 0 Fortinet 0 Markdown-it 0 OpenPrinting 0 DevaslanPHP 0 Qt 0 Mljar 0 Https://github.com/curl/curl 0 Python-pillow 0 Intranda 0 openGauss-server 0 NewType Infortech 0 Authlib 0 Siemens 0 The-40-Thieves 0 OpenVPN 0 Systemd 0 Zephyrproject 0
500 researchers
#101
Sindre Sorhus
38 credits 9 CVEs Jul 2026 → Sep 2026
38 CVE
38
credits
#102
Varun Goel
38 credits 19 CVEs Jun 2026 → Oct 2026
19 CVE 19 other
38
credits
#103
Zhang WangJunJie with Hillstone Networks
38 credits 19 CVEs Sep 2026 → Oct 2026
19 CVE 19 other
38
credits
#104
namnp with Viettel Cyber Security
37 credits 20 CVEs May 2026 → Oct 2026
20 CVE 17 other
37
credits
#105
Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
37 credits 8 CVEs Jul 2026 → Sep 2026
36 CVE 1 recognition
37
credits
#106
Daejin Lee
37 credits 19 CVEs Jul 2026 → Oct 2026
19 CVE 18 other
37
credits
#107
Gia Bui (@yabeow) from Calif.io
37 credits 5 CVEs May 2026 → Aug 2026
37 CVE
37
credits
#108
Ruslan Dautov
37 credits 6 CVEs May 2026 → Sep 2026
35 CVE 2 recognition
37
credits
#109
Thanatos Tian (HKPolyU) & wgg with Diffract
36 credits 36 CVEs Jul 2026 → Oct 2026
36
credits
#110
ikram-4
36 credits 25 CVEs 6 vendors Oct 2026 → Oct 2026
36 CVE
36
credits
#111
Vitaly Simonovich
35 credits 5 CVEs 2 vendors May 2026 → Sep 2026
22 CVE 13 recognition
35
credits
#112
Classic298
35 credits 18 CVEs Oct 2026 → Oct 2026
35 CVE
35
credits
#113
Song Nuri
34 credits 4 CVEs Jun 2026 → Sep 2026
29 CVE 5 recognition
34
credits
#114
opensec-intelligence
34 credits 31 CVEs 3 vendors Oct 2026 → Oct 2026
34 CVE
34
credits
#115
Dhiyanesh Selvaraj (@redroot97)
34 credits 5 CVEs May 2026 → Sep 2026
32 CVE 2 recognition
34
credits
#116
Valdes Che Zogou, CloudBees, Inc.
34 credits 30 CVEs Jun 2022 → Aug 2023
30 CVE 4 other
34
credits
#117
John Lussier
34 credits 3 CVEs Jun 2026 → Sep 2026
23 CVE 11 recognition
34
credits
#118
skigeek16
34 credits 31 CVEs 3 vendors Oct 2026 → Oct 2026
34 CVE
34
credits
#119
Pierre Rudloff (prudloff) of the Drupal Security Team
34 credits 18 CVEs Jul 2026 → Oct 2026
31 CVE 3 other
34
credits
#120
Meta Red Team X - Nik Tsytsarkin
34 credits 5 CVEs Aug 2026 → Sep 2026
30 CVE 4 recognition
34
credits
#121
grass341 with Viettel Cyber Security
34 credits 17 CVEs Jul 2026 → Oct 2026
17 CVE 17 other
34
credits
#122
Kushalkhemka
34 credits 31 CVEs 3 vendors Oct 2026 → Oct 2026
34 CVE
34
credits
#123
Souhail Hammou
34 credits 18 CVEs Jun 2026 → Oct 2026
18 CVE 16 other
34
credits
#124
mayank-jangid-moon
34 credits 31 CVEs 3 vendors Oct 2026 → Oct 2026
34 CVE
34
credits
#125
HeeChan Kim with TeamH4C
34 credits 17 CVEs Aug 2026 → Oct 2026
17 CVE 17 other
34
credits
#126
George Chen
33 credits 33 CVEs 29 vendors Oct 2026 → Oct 2026
33 CVE
33
credits
#127
NVIDIA Offensive Security Research (OSR) team
33 credits 33 CVEs
33 CVE
33
credits
#128
Sudhanshu Dhage (sudhanshu0542)
33 credits 14 CVEs Aug 2026 → Oct 2026
15 CVE 18 other
33
credits
#129
Hiroki Imai (LAC Co., Ltd.)
33 credits 4 CVEs Jul 2026 → Sep 2026
30 CVE 3 recognition
33
credits
#130
Oleg Nenashev, CloudBees, Inc.
32 credits 28 CVEs Feb 2018 → Dec 2022
28 CVE 4 other
32
credits
#131
Jongseong Kim (nevul37), UIUC
32 credits 19 CVEs Aug 2026 → Oct 2026
19 CVE 13 other
32
credits
#132
xjm of the Drupal Security Team
32 credits 17 CVEs Nov 2021 → Oct 2024
32
credits
#133
manus-pi
32 credits 20 CVEs 10 vendors Oct 2026 → Oct 2026
32 CVE
32
credits
#134
Dave G.
32 credits 10 CVEs May 2026 → Sep 2026
32 CVE
32
credits
#135
Anthropic
31 credits 5 CVEs 2 vendors May 2026 → Oct 2026
24 CVE 7 recognition
31
credits
#136
Niels Hofmans
31 credits 6 CVEs May 2026 → Sep 2026
27 CVE 4 recognition
31
credits
#137
Yaqoub Aldurayhim
31 credits 6 CVEs Sep 2026 → Oct 2026
30 CVE 1 other
31
credits
#138
Narendra Singh (@_3P1C)
31 credits 6 CVEs Jun 2026 → Sep 2026
31 CVE
31
credits
#139
Ryan Hileman via Xint Code (xint.io)
31 credits 5 CVEs May 2026 → Sep 2026
28 CVE 3 recognition
31
credits
#140
Thanatos Tian (HKPolyU) & wgg & @2st__ with Diffract
31 credits 31 CVEs Jul 2026 → Oct 2026
31
credits
#141
Lilith Wyatt of Cisco Talos
30 credits 30 CVEs Oct 2026 → Oct 2026
30 CVE
30
credits
#142
Chris Bailey - Short Circuit
30 credits 5 CVEs Sep 2026 → Sep 2026
25 CVE 5 recognition
30
credits
#143
Linzishan, Anemone
30 credits 30 CVEs Aug 2026 → Oct 2026
30 CVE
30
credits
#144
Kwak Kiyong
30 credits 3 CVEs Jun 2026 → Aug 2026
25 CVE 5 recognition
30
credits
#145
Khai Tran
30 credits 3 CVEs Jun 2026 → Aug 2026
30 CVE
30
credits
#146
Brandon Fisher
30 credits 15 CVEs Jun 2026 → Sep 2026
15 CVE 15 other
30
credits
#147
Lyutoon
30 credits 3 CVEs Jun 2026 → Sep 2026
25 CVE 5 recognition
30
credits
#148
Nicholas Carlini with Claude
29 credits 3 CVEs May 2026 → Sep 2026
22 CVE 7 recognition
29
credits
#149
David Zhu with Microsoft
29 credits 15 CVEs Jul 2026 → Oct 2026
15 CVE 14 other
29
credits
#150
Navtej Kathuria
29 credits 29 CVEs
29 CVE
29
credits