Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 113 credit lines in published advisories.
All vendors
Microsoft 11,405
Apple 7,503
Google Chrome 1,659
Drupal 1,585
Mozilla 1,421
Jenkins 1,414
GitLab 321
Roundcube 180
Frappe 179
Red Hat 121
FreeRDP 119
Apache 97
Open-webui 79
ImageMagick 61
Sgl-project 50
Getgrav 43
Totolink 33
Eclipse Foundation 32
Curl 26
Hexpm 26
Advantech 25
Moodle 24
Zoom 23
Jishenghua 23
Surrealdb 22
Zitadel 22
Progress Software Corporation 21
Splunk 20
LogicalDOC 20
SourceCodester 19
Webkul 18
Edgelesssys 16
@sveltejs 16
Typo3 14
ZcashFoundation 14
Gnome 12
Craftcms 12
Eosphoros-ai 12
Netcore 12
Opencats 12
Progress 11
OpenSSL 11
Linksys 11
Traefik 10
VideoWhisper.com 10
Agno-agi 10
SolarWinds 10
Otrs 9
DrayTek 9
Letta-ai 9
Dromara 9
Guchengwuyue 8
Brainstorm Force 8
Erlang 8
Moxi624 8
Zen Cart 8
Froxlor 8
GitoxideLabs 8
Erik Debye 8
Fast-uri 8
Uselotus 7
ZKTeco 7
Aspose 7
Diem-project 7
Itsourcecode 7
Admidio 6
Krupalshah 6
1Panel-dev 6
Erzhongxmu 6
Semcms 6
Eptura 6
TrueBooker 6
MISP 6
Macrozheng 6
TDuckCloud 6
Unclecode 6
nh4tvd 6
Vraj404 5
GeoVision Inc. 5
H3C 5
HMS Networks 5
Thelia 5
Rdesktop 5
Arraytics 5
Meetecho 5
Librenms 5
Yungengxin 4
Dav-ee 4
Jovancoding 4
Project-MONAI 4
Emersion 4
Hotel Booking 4
Opensource-socialnetwork 4
Ministry of Justice General Directorate of Information Technology 4
Eleveo 4
Pbuchbinder 4
ElementsReady Addons for Elementor 4
Cure53 4
Siyuan-note 4
WatchGuard Fireware OS 4
Tencent 4
Google 4
VideoLAN 4
Easy Property Listings 4
FacturaScripts 4
Satya-vinay 4
Oretnom23 4
ACF Extended 3
Yangzongzhuan 3
WuKongOpenSource 3
Westboy 3
Cloudflare 3
DeepPavlov 3
aaPanel 3
Lavalite 3
TP-Link Systems Inc. 3
Camunda 3
Krayin 3
WP ManageNinja LLC 3
Fireware OS 3
Netis 3
Sunkaifei 3
Studio-Saelix 3
Houtini-ai 3
Subhajitkhan 3
BlackBeltTechnology 3
Deepseek-ai 3
Elunez 2
Parse-community 2
Neo4j 2
Gz-yami 2
GPAC 2
MikroTik 1
Grafana 1
Dell 1
The Wikimedia Foundation Mediaw 1
Stormshield 1
Y 1
GestSup 0
E2fsprogs 0
C4illin 0
Trusted Domain Project 0
MongoDB 0
Pypa 0
Dassault Systèmes 0
A2aproject 0
Hewlett Packard Enterprise 0
Unisoc 0
Argoproj 0
SQLite 0
WSO2 0
Libxml2 0
Samsung 0
Zephyrproject-rtos 0
Eyeplus 0
Tox-dev 0
David-Crty 0
Linux 0
Util-linux 0
Ziroom 0
Kernel 0
Vitejs 0
IBM 0
YS-infoware 0
Vitest-dev 0
Linux Kernel 0
Kvcache-ai 0
Python 0
FOSSBilling 0
Mljar 0
Https://github.com/curl/curl 0
Python-pillow 0
HAProxy 0
Aio-libs 0
Oracle Corporation 0
Apostrophecms 0
Fortinet 0
ASUS 0
Markdown-it 0
OpenPrinting 0
DevaslanPHP 0
Qt 0
OpenVPN 0
Systemd 0
Zephyrproject 0
openGauss-server 0
NewType Infortech 0
Siemens 0
#101
This vulnerability has been discovered internally by GitLab team member Peter Arts
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#102
jcarre
1 credits
1 CVE Dec 2025 → Dec 2025
1 CVE
1
credits
#103
no_01
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#104
Thanks [mahoraga007](https://hackerone.com/mahoraga007) for reporting this vulnerability through our HackerOne bug bounty program
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#105
elbo7
1 credits
1 CVE Feb 2026 → Feb 2026
1 CVE
1
credits
#106
kamikaze1337
1 credits
1 CVE Mar 2026 → Mar 2026
1 CVE
1
credits
#107
phli
1 credits
1 CVE Nov 2025 → Nov 2025
1 CVE
1
credits
#108
Thanks [rogerace](https://hackerone.com/rogerace) for reporting this vulnerability through our HackerOne bug bounty program
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#109
u3mur4
1 credits
1 CVE Feb 2026 → Feb 2026
1 CVE
1
credits
#110
lucky_luke
1 credits
1 CVE Mar 2026 → Mar 2026
1 CVE
1
credits
#111
altair00
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#112
Thanks [sim4n6](https://hackerone.com/sim4n6) for reporting this vulnerability through our HackerOne bug bounty program
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#113
harshinsecurity
1 credits
1 CVE Jun 2026 → Jun 2026
1 CVE
1
credits