Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 336 credit lines in published advisories.

All vendors Microsoft 11,445 Apple 7,503 Google Chrome 1,659 Drupal 1,606 Mozilla 1,421 Jenkins 1,414 GitLab 321 Roundcube 180 Frappe 179 FreeRDP 163 Red Hat 148 Apache 97 Open-webui 79 ImageMagick 61 Sgl-project 51 Eclipse Foundation 50 Getgrav 43 Totolink 33 Curl 26 Hexpm 26 OpenSSL 26 Advantech 25 Moodle 24 Zoom 23 Jishenghua 23 Surrealdb 22 Zitadel 22 Progress Software Corporation 21 Splunk 20 LogicalDOC 20 SourceCodester 19 Webkul 18 Linux 17 Edgelesssys 16 @sveltejs 16 Erlang 14 Typo3 14 ZcashFoundation 14 Gnome 13 Eosphoros-ai 12 Craftcms 12 Netcore 12 Opencats 12 Progress 11 Linksys 11 Traefik 10 VideoWhisper.com 10 Agno-agi 10 SolarWinds 10 Kiloview 9 ZKTeco 9 Otrs 9 Letta-ai 9 DrayTek 9 Dromara 9 Guchengwuyue 8 Brainstorm Force 8 Moxi624 8 Zen Cart 8 Erzhongxmu 8 Froxlor 8 GitoxideLabs 8 Erik Debye 8 Fast-uri 8 Unclecode 8 Uselotus 7 TP-Link Systems Inc. 7 Aspose 7 Macrozheng 7 Sahlberg 7 Diem-project 7 Itsourcecode 7 Krupalshah 6 Admidio 6 Semcms 6 1Panel-dev 6 TrueBooker 6 MISP 6 Eptura 6 Google 6 Fireware OS 6 TDuckCloud 6 nh4tvd 6 Vraj404 5 GeoVision Inc. 5 H3C 5 Thelia 5 HMS Networks 5 Rdesktop 5 Arraytics 5 Meetecho 5 CGM 5 Librenms 5 Yungengxin 4 Dav-ee 4 Project-MONAI 4 Emersion 4 Hotel Booking 4 Jovancoding 4 Ministry of Justice General Directorate of Information Technology 4 Eleveo 4 Pbuchbinder 4 Opensource-socialnetwork 4 Otter Blocks 4 ElementsReady Addons for Elementor 4 Cure53 4 Siyuan-note 4 WatchGuard Fireware OS 4 Tencent 4 VideoLAN 4 Gedelumbung 4 Easy Property Listings 4 Oretnom23 4 FacturaScripts 4 Satya-vinay 4 Deepseek-ai 4 Yangzongzhuan 3 NationalSecurityAgency 3 ACF Extended 3 SQLite 3 Cloudflare 3 DeepPavlov 3 LiteSpeed Cache 3 WuKongOpenSource 3 Parse-community 3 Westboy 3 Camunda 3 aaPanel 3 Lavalite 3 Magepeople inc. 3 GDATASoftwareAG 3 Krayin 3 Codepeople 3 VertiGIS Ltd. 3 E4jvikwp 3 Netis 3 Sunkaifei 3 Xnau webdesign 3 WP ManageNinja LLC 3 Subhajitkhan 3 BlackBeltTechnology 3 ASUS 3 Studio-Saelix 3 Houtini-ai 3 Stirling-Tools 2 Elunez 2 Dell 2 Neo4j 2 Python Software Foundation 2 Y 2 Gz-yami 2 GNU 2 GPAC 2 MikroTik 1 Grafana 1 The Wikimedia Foundation Mediaw 1 Stormshield 1 AWS 1 E2fsprogs 0 C4illin 0 Trusted Domain Project 0 Part-DB 0 MongoDB 0 Okta 0 Pypa 0 GestSup 0 Gnutls 0 OpenStack 0 Argoproj 0 Openldap 0 Dassault Systèmes 0 A2aproject 0 Hewlett Packard Enterprise 0 Unisoc 0 Samsung 0 Zephyrproject-rtos 0 Eyeplus 0 WSO2 0 Libxml2 0 David-Crty 0 Tox-dev 0 IBM 0 Util-linux 0 Ziroom 0 Kernel 0 Vitejs 0 Nodejs 0 Linux Kernel 0 Kvcache-ai 0 Python 0 FOSSBilling 0 YS-infoware 0 Vitest-dev 0 Apostrophecms 0 Fortinet 0 Markdown-it 0 OpenPrinting 0 DevaslanPHP 0 Qt 0 Mljar 0 Https://github.com/curl/curl 0 Python-pillow 0 HAProxy 0 Cacti 0 Aio-libs 0 Oracle Corporation 0 openGauss-server 0 NewType Infortech 0 Authlib 0 Siemens 0 The-40-Thieves 0 OpenVPN 0 Systemd 0 Zephyrproject 0 Intranda 0
336 researchers · Drupal
#101
Kim Pepper (kim.pepper)
4 credits 2 CVEs Jun 2026 → Jul 2026
4
credits
#102
cantina_security
4 credits 2 CVEs Apr 2026 → Jun 2026
4 CVE
4
credits
#103
Jacek Bogdański
4 credits 2 CVEs Mar 2022 → Mar 2022
4 CVE
4
credits
#104
Annie Oelschlager (annieoelschlager)
4 credits 2 CVEs Sep 2026 → Sep 2026
4
credits
#105
Kristiaan Van den Eynde
4 credits 2 CVEs Apr 2022 → Nov 2024
2 CVE 2 other
4
credits
#106
mouhamed rayen mansouri (w0nd3r)
4 credits 2 CVEs Oct 2026 → Oct 2026
4 CVE
4
credits
#107
Yas Naoi (yas)
4 credits 2 CVEs Sep 2026 → Sep 2026
4
credits
#108
haii haii (hai27ii2o)
4 credits 2 CVEs Jul 2026 → Oct 2026
4 CVE
4
credits
#109
Mustafa Ahmed (mustafa007)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#110
omidsec
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#111
abdo.boutanos@richemont.com
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#112
Jen Lampton (jenlampton), provisional member of the Drupal Security Team
3 credits 2 CVEs Mar 2025 → Nov 2025
3
credits
#113
Kalle Kipinä (kekkis)
3 credits 3 CVEs Oct 2026 → Oct 2026
3 CVE
3
credits
#114
Matan Kotick (matank001)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#115
Mitch Portier (arkener)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#116
Théodore Biadala
3 credits 1 CVE Jan 2022 → Feb 2022
3
credits
#117
Wesley Giles (seraphdev)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#118
Ivo Van Geertruyen (mr.baileys) of the Drupal Security Team
3 credits 2 CVEs Sep 2026 → Oct 2026
3
credits
#119
Anna Kalata (akalata), provisional member of the Drupal Security Team
3 credits 2 CVEs Mar 2025 → Nov 2025
3
credits
#120
enyug
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#121
Lauri (laurii)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#122
Guy Elsmore-Paddock
3 credits 2 CVEs Jul 2022 → Apr 2023
3 CVE
3
credits
#123
Serhii Checheniev (serhii-che)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#124
Jon Jordan (joncjordan)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#125
Alex Pott (alexpott) of the Drupal Security Team
3 credits 2 CVEs Mar 2025 → Nov 2025
3
credits
#126
Nate Lampton
3 credits 1 CVE Feb 2022 → Mar 2023
3
credits
#127
Frank Mably (mably)
3 credits 2 CVEs Sep 2026 → Oct 2026
1 CVE 2 other
3
credits
#128
Stef Rouschop (stefro)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#129
Pierre Rudloff
3 credits 2 CVEs Jul 2022 → Oct 2024
3 CVE
3
credits
#130
Adam G-H (phenaproxima)
3 credits 2 CVEs Mar 2025 → Jun 2026
3
credits
#131
Timo De Clercq (timodc)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#132
Sascha Grossenbacher
3 credits 1 CVE Sep 2022 → Mar 2023
3
credits
#133
Dezső BICZÓ
3 credits 2 CVEs Apr 2022 → May 2022
3 CVE
3
credits
#134
Erwin Eggenberger (eeg)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#135
Utkarsh Choudhary (sisyphus_ut)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#136
chulhan park (cjfgks1230)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#137
Conrad Lara
3 credits 2 CVEs Jul 2022 → Apr 2023
3 CVE
3
credits
#138
Abdulhakeem Onipede (kism37)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#139
Jonni Kalpio (thatguy)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#140
karing
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#141
Elar Lang
3 credits 1 CVE Jul 2022 → Mar 2023
2 CVE 1 other
3
credits
#142
Dan Wilga (gribnif)
3 credits 2 CVEs Aug 2026 → Oct 2026
2 CVE 1 other
3
credits
#143
Bernhard Karimi (bernhardk_oww)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#144
catch of the Drupal Security Team
3 credits 2 CVEs Oct 2024 → Nov 2024
3
credits
#145
Majdi Alomari (majdi)
3 credits 1 CVE Sep 2026 → Oct 2026
3 CVE
3
credits
#146
Michael Lander (michaellander)
3 credits 2 CVEs Sep 2026 → Oct 2026
3
credits
#147
Lauri Eskola
3 credits Nov 2021 → Jan 2022
3
credits
#148
Jay Beaton
2 credits 1 CVE Nov 2024 → Nov 2024
2 CVE
2
credits
#149
Dave Long Provisional Member of the Drupal Security Team
2 credits 1 CVE Jul 2022 → Jul 2022
2
credits
#150
Miguel Ferreira (miguelpamferreira)
2 credits 1 CVE Sep 2026 → Sep 2026
2
credits