Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.

All vendors Microsoft 11,445 Apple 7,503 Google Chrome 1,659 Drupal 1,606 Mozilla 1,421 Jenkins 1,414 GitLab 321 Roundcube 180 Frappe 179 FreeRDP 163 Red Hat 148 Apache 97 Open-webui 79 ImageMagick 61 Sgl-project 51 Eclipse Foundation 50 Getgrav 43 Totolink 33 Curl 26 Hexpm 26 OpenSSL 26 Advantech 25 Moodle 24 Zoom 23 Jishenghua 23 Surrealdb 22 Zitadel 22 Progress Software Corporation 21 Splunk 20 LogicalDOC 20 SourceCodester 19 Webkul 18 Linux 17 Edgelesssys 16 @sveltejs 16 Erlang 14 Typo3 14 ZcashFoundation 14 Gnome 13 Eosphoros-ai 12 Craftcms 12 Netcore 12 Opencats 12 Progress 11 Linksys 11 Traefik 10 VideoWhisper.com 10 Agno-agi 10 SolarWinds 10 Kiloview 9 ZKTeco 9 Otrs 9 Letta-ai 9 DrayTek 9 Dromara 9 Guchengwuyue 8 Brainstorm Force 8 Moxi624 8 Zen Cart 8 Erzhongxmu 8 Froxlor 8 GitoxideLabs 8 Erik Debye 8 Fast-uri 8 Unclecode 8 Uselotus 7 TP-Link Systems Inc. 7 Aspose 7 Macrozheng 7 Sahlberg 7 Diem-project 7 Itsourcecode 7 Krupalshah 6 Admidio 6 Semcms 6 1Panel-dev 6 Eptura 6 TrueBooker 6 MISP 6 Fireware OS 6 Google 6 TDuckCloud 6 nh4tvd 6 Vraj404 5 GeoVision Inc. 5 H3C 5 HMS Networks 5 Thelia 5 Rdesktop 5 Arraytics 5 Meetecho 5 CGM 5 Librenms 5 Yungengxin 4 Dav-ee 4 Project-MONAI 4 Emersion 4 Hotel Booking 4 Jovancoding 4 Opensource-socialnetwork 4 Ministry of Justice General Directorate of Information Technology 4 Eleveo 4 Pbuchbinder 4 Cure53 4 Otter Blocks 4 ElementsReady Addons for Elementor 4 WatchGuard Fireware OS 4 Siyuan-note 4 Tencent 4 VideoLAN 4 Gedelumbung 4 Easy Property Listings 4 Deepseek-ai 4 Oretnom23 4 FacturaScripts 4 Satya-vinay 4 Yangzongzhuan 3 NationalSecurityAgency 3 ACF Extended 3 SQLite 3 Westboy 3 Cloudflare 3 DeepPavlov 3 LiteSpeed Cache 3 WuKongOpenSource 3 Parse-community 3 Lavalite 3 Magepeople inc. 3 Camunda 3 aaPanel 3 E4jvikwp 3 GDATASoftwareAG 3 Krayin 3 Codepeople 3 VertiGIS Ltd. 3 Netis 3 Sunkaifei 3 Xnau webdesign 3 WP ManageNinja LLC 3 Houtini-ai 3 Subhajitkhan 3 BlackBeltTechnology 3 ASUS 3 Studio-Saelix 3 Stirling-Tools 2 Elunez 2 Dell 2 Neo4j 2 Python Software Foundation 2 Y 2 Gz-yami 2 GNU 2 GPAC 2 MikroTik 1 Grafana 1 The Wikimedia Foundation Mediaw 1 AWS 1 Stormshield 1 E2fsprogs 0 C4illin 0 Trusted Domain Project 0 Part-DB 0 MongoDB 0 Okta 0 Pypa 0 GestSup 0 Gnutls 0 Unisoc 0 OpenStack 0 Argoproj 0 Openldap 0 Dassault Systèmes 0 A2aproject 0 Hewlett Packard Enterprise 0 WSO2 0 Libxml2 0 Samsung 0 Zephyrproject-rtos 0 Eyeplus 0 David-Crty 0 Tox-dev 0 IBM 0 Util-linux 0 Ziroom 0 Kernel 0 Vitejs 0 Vitest-dev 0 Nodejs 0 Linux Kernel 0 Kvcache-ai 0 Python 0 FOSSBilling 0 YS-infoware 0 HAProxy 0 Cacti 0 Aio-libs 0 Oracle Corporation 0 Apostrophecms 0 Fortinet 0 Markdown-it 0 OpenPrinting 0 DevaslanPHP 0 Qt 0 Mljar 0 Https://github.com/curl/curl 0 Python-pillow 0 Intranda 0 openGauss-server 0 NewType Infortech 0 Authlib 0 Siemens 0 The-40-Thieves 0 OpenVPN 0 Systemd 0 Zephyrproject 0
500 researchers
#151
Milad Nasr
29 credits 3 CVEs May 2026 → Sep 2026
22 CVE 7 recognition
29
credits
#152
joaxcar
29 credits 29 CVEs Jun 2025 → Oct 2026
29 CVE
29
credits
#153
Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
29 credits 5 CVEs May 2026 → Aug 2026
29 CVE
29
credits
#154
Dongjun Kim (smlijun), UIUC
28 credits 17 CVEs Aug 2026 → Oct 2026
17 CVE 11 other
28
credits
#155
stratan (@5tratan) of Almamater Technologies
28 credits 3 CVEs Jun 2026 → Aug 2026
28 CVE
28
credits
#156
Yanhaoxi
28 credits 14 CVEs 2 vendors Oct 2026 → Oct 2026
28 CVE
28
credits
#157
Gurpreet Shergill
28 credits 2 CVEs Jun 2026 → Aug 2026
19 CVE 9 recognition
28
credits
#158
Aaron Grattafiori - NVIDIA AI Red Team
28 credits 5 CVEs Jun 2026 → Sep 2026
26 CVE 2 recognition
28
credits
#159
Angelboy (@scwuaptx) with DEVCORE
28 credits 16 CVEs May 2026 → Aug 2026
16 CVE 12 other
28
credits
#160
Yun Cong
28 credits 14 CVEs Jun 2026 → Oct 2026
14 CVE 14 other
28
credits
#161
lighthousekeeper1212
28 credits 28 CVEs 16 vendors Oct 2026 → Oct 2026
28 CVE
28
credits
#162
Asaf Cohen
28 credits 6 CVEs May 2026 → Sep 2026
21 CVE 7 recognition
28
credits
#163
Hwiwon Lee (hwiwonl), UIUC
28 credits 18 CVEs Jul 2026 → Oct 2026
18 CVE 10 other
28
credits
#164
Matthew Franklin
28 credits 14 CVEs Sep 2026 → Oct 2026
14 CVE 14 other
28
credits
#165
Roman Zabicki
27 credits 4 CVEs Sep 2026 → Sep 2026
22 CVE 5 recognition
27
credits
#166
Azure Yang with Kunlun Lab
27 credits 14 CVEs May 2026 → Oct 2026
14 CVE 13 other
27
credits
#167
Claude Security
27 credits 27 CVEs Oct 2026 → Oct 2026
27 CVE
27
credits
#168
Linzishan, Anemone and Zhiniang Peng with HUST
27 credits 27 CVEs Aug 2026 → Oct 2026
27
credits
#169
z1r0
26 credits 13 CVEs Jun 2026 → Sep 2026
13 CVE 13 other
26
credits
#170
Mickey Jin (@patch1t)
26 credits 8 CVEs Jul 2026 → Sep 2026
26 CVE
26
credits
#171
Zachariah Mithani
26 credits 26 CVEs 26 vendors Oct 2026 → Oct 2026
26 CVE
26
credits
#172
Asaf Cohen with XBreach.ai
26 credits 13 CVEs Jul 2026 → Oct 2026
13 CVE 13 other
26
credits
#173
Frédéric Perriot of the Apple Media Products RedTeam
26 credits 26 CVEs
26 CVE
26
credits
#174
User:SomeRandomDeveloper
26 credits 26 CVEs
26 CVE
26
credits
#175
Mathis Mansière
26 credits 3 CVEs Jul 2026 → Aug 2026
22 CVE 4 recognition
26
credits
#176
Vladislav Shevchenko (Positive Technologies)
26 credits 3 CVEs Jun 2026 → Sep 2026
21 CVE 5 recognition
26
credits
#177
Ilya Andr (andrd3v)
26 credits 6 CVEs May 2026 → Sep 2026
24 CVE 2 recognition
26
credits
#178
Cem Onat Karagun
25 credits 3 CVEs May 2026 → Sep 2026
15 CVE 10 recognition
25
credits
#179
Henrique Pereira with Microsoft
25 credits 13 CVEs Jun 2026 → Oct 2026
13 CVE 12 other
25
credits
#180
Jesse Glick, CloudBees, Inc.
25 credits 24 CVEs Mar 2018 → May 2025
24 CVE 1 other
25
credits
#181
GraVity0
25 credits 13 CVEs Jul 2026 → Oct 2026
13 CVE 12 other
25
credits
#182
Arni Hardarson
25 credits 4 CVEs May 2026 → Aug 2026
25 CVE
25
credits
#183
Henock Habte
25 credits 1 CVE Jun 2026 → Sep 2026
9 CVE 16 recognition
25
credits
#184
dyingman1 (https://github.com/dyingman1, redpoc Offensive Security Team)
25 credits 24 CVEs Apr 2026 → Sep 2026
24 CVE 1 other
25
credits
#185
Nan Wang (@eternalsakura13)
25 credits 3 CVEs Jun 2026 → Aug 2026
25 CVE
25
credits
#186
Josef Korbel
24 credits 3 CVEs Jun 2026 → Sep 2026
24 CVE
24
credits
#187
Omar Cerrito
24 credits 6 CVEs May 2026 → Sep 2026
22 CVE 2 recognition
24
credits
#188
impost0r (ret2plt)
24 credits 4 CVEs May 2026 → Aug 2026
24 CVE
24
credits
#189
tamdao
24 credits 3 CVEs Jul 2026 → Sep 2026
16 CVE 8 recognition
24
credits
#190
OGINOME Tomohito
24 credits 7 CVEs 2 vendors Jul 2026 → Oct 2026
24 CVE
24
credits
#191
Andrea Chiera, CloudBees, Inc.
24 credits 24 CVEs Jul 2023 → Mar 2024
24 CVE
24
credits
#192
Faisal Tameesh
24 credits 24 CVEs
24 CVE
24
credits
#193
Bhaswanth Chigurupati
24 credits 3 CVEs 2 vendors Aug 2026 → Sep 2026
18 CVE 5 recognition 1 other
24
credits
#194
Aswin Kumar Gokulakannan
24 credits 6 CVEs May 2026 → Sep 2026
24 CVE
24
credits
#195
grass with Viettel Cyber Security
23 credits 12 CVEs Aug 2026 → Oct 2026
12 CVE 11 other
23
credits
#196
Simone Bossi and Raffaele Bova at Nozomi Networks
23 credits 23 CVEs Oct 2026 → Oct 2026
23 CVE
23
credits
#197
Daniel Febrero
23 credits 3 CVEs Jul 2026 → Sep 2026
23 CVE
23
credits
#198
章鱼哥@aipy (aipyaipy.com)
23 credits 5 CVEs Jul 2026 → Sep 2026
20 CVE 3 recognition
23
credits
#199
a92847865
23 credits 23 CVEs Oct 2025 → Jun 2026
23 CVE
23
credits
#200
Drew Webber of the Drupal Security Team
23 credits 11 CVEs Jan 2022 → Nov 2024
6 CVE 17 other
23
credits