Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.
All vendors
Microsoft 11,445
Apple 7,503
Google Chrome 1,659
Drupal 1,606
Mozilla 1,421
Jenkins 1,414
GitLab 321
Roundcube 180
Frappe 179
FreeRDP 163
Red Hat 148
Apache 97
Open-webui 79
ImageMagick 61
Sgl-project 51
Eclipse Foundation 50
Getgrav 43
Totolink 33
Curl 26
Hexpm 26
OpenSSL 26
Advantech 25
Moodle 24
Zoom 23
Jishenghua 23
Surrealdb 22
Zitadel 22
Progress Software Corporation 21
Splunk 20
LogicalDOC 20
SourceCodester 19
Webkul 18
Linux 17
Edgelesssys 16
@sveltejs 16
Erlang 14
Typo3 14
ZcashFoundation 14
Gnome 13
Eosphoros-ai 12
Craftcms 12
Netcore 12
Opencats 12
Progress 11
Linksys 11
Traefik 10
VideoWhisper.com 10
Agno-agi 10
SolarWinds 10
Kiloview 9
ZKTeco 9
Otrs 9
Letta-ai 9
DrayTek 9
Dromara 9
Guchengwuyue 8
Brainstorm Force 8
Moxi624 8
Zen Cart 8
Erzhongxmu 8
Froxlor 8
GitoxideLabs 8
Erik Debye 8
Fast-uri 8
Unclecode 8
Uselotus 7
TP-Link Systems Inc. 7
Aspose 7
Macrozheng 7
Sahlberg 7
Diem-project 7
Itsourcecode 7
Krupalshah 6
Admidio 6
Semcms 6
1Panel-dev 6
Eptura 6
TrueBooker 6
MISP 6
Fireware OS 6
Google 6
TDuckCloud 6
nh4tvd 6
Vraj404 5
GeoVision Inc. 5
H3C 5
HMS Networks 5
Thelia 5
Rdesktop 5
Arraytics 5
Meetecho 5
CGM 5
Librenms 5
Yungengxin 4
Dav-ee 4
Project-MONAI 4
Emersion 4
Hotel Booking 4
Jovancoding 4
Opensource-socialnetwork 4
Ministry of Justice General Directorate of Information Technology 4
Eleveo 4
Pbuchbinder 4
Cure53 4
Otter Blocks 4
ElementsReady Addons for Elementor 4
WatchGuard Fireware OS 4
Siyuan-note 4
Tencent 4
VideoLAN 4
Gedelumbung 4
Easy Property Listings 4
Deepseek-ai 4
Oretnom23 4
FacturaScripts 4
Satya-vinay 4
Yangzongzhuan 3
NationalSecurityAgency 3
ACF Extended 3
SQLite 3
Westboy 3
Cloudflare 3
DeepPavlov 3
LiteSpeed Cache 3
WuKongOpenSource 3
Parse-community 3
Lavalite 3
Magepeople inc. 3
Camunda 3
aaPanel 3
E4jvikwp 3
GDATASoftwareAG 3
Krayin 3
Codepeople 3
VertiGIS Ltd. 3
Netis 3
Sunkaifei 3
Xnau webdesign 3
WP ManageNinja LLC 3
Houtini-ai 3
Subhajitkhan 3
BlackBeltTechnology 3
ASUS 3
Studio-Saelix 3
Stirling-Tools 2
Elunez 2
Dell 2
Neo4j 2
Python Software Foundation 2
Y 2
Gz-yami 2
GNU 2
GPAC 2
MikroTik 1
Grafana 1
The Wikimedia Foundation Mediaw 1
AWS 1
Stormshield 1
E2fsprogs 0
C4illin 0
Trusted Domain Project 0
Part-DB 0
MongoDB 0
Okta 0
Pypa 0
GestSup 0
Gnutls 0
Unisoc 0
OpenStack 0
Argoproj 0
Openldap 0
Dassault Systèmes 0
A2aproject 0
Hewlett Packard Enterprise 0
WSO2 0
Libxml2 0
Samsung 0
Zephyrproject-rtos 0
Eyeplus 0
David-Crty 0
Tox-dev 0
IBM 0
Util-linux 0
Ziroom 0
Kernel 0
Vitejs 0
Vitest-dev 0
Nodejs 0
Linux Kernel 0
Kvcache-ai 0
Python 0
FOSSBilling 0
YS-infoware 0
HAProxy 0
Cacti 0
Aio-libs 0
Oracle Corporation 0
Apostrophecms 0
Fortinet 0
Markdown-it 0
OpenPrinting 0
DevaslanPHP 0
Qt 0
Mljar 0
Https://github.com/curl/curl 0
Python-pillow 0
Intranda 0
openGauss-server 0
NewType Infortech 0
Authlib 0
Siemens 0
The-40-Thieves 0
OpenVPN 0
Systemd 0
Zephyrproject 0
#151
Milad Nasr
29 credits
3 CVEs May 2026 → Sep 2026
22 CVE 7 recognition
29
credits
#152
joaxcar
29 credits
29 CVEs Jun 2025 → Oct 2026
29 CVE
29
credits
#153
Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
29 credits
5 CVEs May 2026 → Aug 2026
29 CVE
29
credits
#154
Dongjun Kim (smlijun), UIUC
28 credits
17 CVEs Aug 2026 → Oct 2026
17 CVE 11 other
28
credits
#155
stratan (@5tratan) of Almamater Technologies
28 credits
3 CVEs Jun 2026 → Aug 2026
28 CVE
28
credits
#156
Yanhaoxi
28 credits
14 CVEs 2 vendors
Oct 2026 → Oct 2026
28 CVE
28
credits
#157
Gurpreet Shergill
28 credits
2 CVEs Jun 2026 → Aug 2026
19 CVE 9 recognition
28
credits
#158
Aaron Grattafiori - NVIDIA AI Red Team
28 credits
5 CVEs Jun 2026 → Sep 2026
26 CVE 2 recognition
28
credits
#159
Angelboy (@scwuaptx) with DEVCORE
28 credits
16 CVEs May 2026 → Aug 2026
16 CVE 12 other
28
credits
#160
Yun Cong
28 credits
14 CVEs Jun 2026 → Oct 2026
14 CVE 14 other
28
credits
#161
lighthousekeeper1212
28 credits
28 CVEs 16 vendors
Oct 2026 → Oct 2026
28 CVE
28
credits
#162
Asaf Cohen
28 credits
6 CVEs May 2026 → Sep 2026
21 CVE 7 recognition
28
credits
#163
Hwiwon Lee (hwiwonl), UIUC
28 credits
18 CVEs Jul 2026 → Oct 2026
18 CVE 10 other
28
credits
#164
Matthew Franklin
28 credits
14 CVEs Sep 2026 → Oct 2026
14 CVE 14 other
28
credits
#165
Roman Zabicki
27 credits
4 CVEs Sep 2026 → Sep 2026
22 CVE 5 recognition
27
credits
#166
Azure Yang with Kunlun Lab
27 credits
14 CVEs May 2026 → Oct 2026
14 CVE 13 other
27
credits
#167
Claude Security
27 credits
27 CVEs Oct 2026 → Oct 2026
27 CVE
27
credits
#168
Linzishan, Anemone and Zhiniang Peng with HUST
27 credits
27 CVEs Aug 2026 → Oct 2026
27
credits
#169
z1r0
26 credits
13 CVEs Jun 2026 → Sep 2026
13 CVE 13 other
26
credits
#170
Mickey Jin (@patch1t)
26 credits
8 CVEs Jul 2026 → Sep 2026
26 CVE
26
credits
#171
Zachariah Mithani
26 credits
26 CVEs 26 vendors
Oct 2026 → Oct 2026
26 CVE
26
credits
#172
Asaf Cohen with XBreach.ai
26 credits
13 CVEs Jul 2026 → Oct 2026
13 CVE 13 other
26
credits
#173
Frédéric Perriot of the Apple Media Products RedTeam
26 credits
26 CVEs
26 CVE
26
credits
#174
User:SomeRandomDeveloper
26 credits
26 CVEs
26 CVE
26
credits
#175
Mathis Mansière
26 credits
3 CVEs Jul 2026 → Aug 2026
22 CVE 4 recognition
26
credits
#176
Vladislav Shevchenko (Positive Technologies)
26 credits
3 CVEs Jun 2026 → Sep 2026
21 CVE 5 recognition
26
credits
#177
Ilya Andr (andrd3v)
26 credits
6 CVEs May 2026 → Sep 2026
24 CVE 2 recognition
26
credits
#178
Cem Onat Karagun
25 credits
3 CVEs May 2026 → Sep 2026
15 CVE 10 recognition
25
credits
#179
Henrique Pereira with Microsoft
25 credits
13 CVEs Jun 2026 → Oct 2026
13 CVE 12 other
25
credits
#180
Jesse Glick, CloudBees, Inc.
25 credits
24 CVEs Mar 2018 → May 2025
24 CVE 1 other
25
credits
#181
GraVity0
25 credits
13 CVEs Jul 2026 → Oct 2026
13 CVE 12 other
25
credits
#182
Arni Hardarson
25 credits
4 CVEs May 2026 → Aug 2026
25 CVE
25
credits
#183
Henock Habte
25 credits
1 CVE Jun 2026 → Sep 2026
9 CVE 16 recognition
25
credits
#184
dyingman1 (https://github.com/dyingman1, redpoc Offensive Security Team)
25 credits
24 CVEs Apr 2026 → Sep 2026
24 CVE 1 other
25
credits
#185
Nan Wang (@eternalsakura13)
25 credits
3 CVEs Jun 2026 → Aug 2026
25 CVE
25
credits
#186
Josef Korbel
24 credits
3 CVEs Jun 2026 → Sep 2026
24 CVE
24
credits
#187
Omar Cerrito
24 credits
6 CVEs May 2026 → Sep 2026
22 CVE 2 recognition
24
credits
#188
impost0r (ret2plt)
24 credits
4 CVEs May 2026 → Aug 2026
24 CVE
24
credits
#189
tamdao
24 credits
3 CVEs Jul 2026 → Sep 2026
16 CVE 8 recognition
24
credits
#190
OGINOME Tomohito
24 credits
7 CVEs 2 vendors
Jul 2026 → Oct 2026
24 CVE
24
credits
#191
Andrea Chiera, CloudBees, Inc.
24 credits
24 CVEs Jul 2023 → Mar 2024
24 CVE
24
credits
#192
Faisal Tameesh
24 credits
24 CVEs
24 CVE
24
credits
#193
Bhaswanth Chigurupati
24 credits
3 CVEs 2 vendors
Aug 2026 → Sep 2026
18 CVE 5 recognition 1 other
24
credits
#194
Aswin Kumar Gokulakannan
24 credits
6 CVEs May 2026 → Sep 2026
24 CVE
24
credits
#195
grass with Viettel Cyber Security
23 credits
12 CVEs Aug 2026 → Oct 2026
12 CVE 11 other
23
credits
#196
Simone Bossi and Raffaele Bova at Nozomi Networks
23 credits
23 CVEs Oct 2026 → Oct 2026
23 CVE
23
credits
#197
Daniel Febrero
23 credits
3 CVEs Jul 2026 → Sep 2026
23 CVE
23
credits
#198
章鱼哥@aipy (aipyaipy.com)
23 credits
5 CVEs Jul 2026 → Sep 2026
20 CVE 3 recognition
23
credits
#199
a92847865
23 credits
23 CVEs Oct 2025 → Jun 2026
23 CVE
23
credits
#200
Drew Webber of the Drupal Security Team
23 credits
11 CVEs Jan 2022 → Nov 2024
6 CVE 17 other
23
credits