Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 188 credit lines in published advisories.

All vendors Microsoft 11,405 Apple 7,503 Google Chrome 1,659 Drupal 1,585 Mozilla 1,421 Jenkins 1,414 GitLab 321 Roundcube 180 Frappe 179 Red Hat 121 FreeRDP 119 Apache 97 Open-webui 79 ImageMagick 61 Sgl-project 50 Getgrav 43 Totolink 33 Eclipse Foundation 32 Curl 26 Hexpm 26 Advantech 25 Moodle 24 Zoom 23 Jishenghua 23 Surrealdb 22 Zitadel 22 Progress Software Corporation 21 Splunk 20 LogicalDOC 20 SourceCodester 19 Webkul 18 Edgelesssys 16 @sveltejs 16 Typo3 14 ZcashFoundation 14 Gnome 12 Eosphoros-ai 12 Craftcms 12 Netcore 12 Opencats 12 Progress 11 Linksys 11 OpenSSL 11 Traefik 10 VideoWhisper.com 10 Agno-agi 10 SolarWinds 10 Otrs 9 Letta-ai 9 DrayTek 9 Dromara 9 Guchengwuyue 8 Brainstorm Force 8 Erlang 8 Moxi624 8 Zen Cart 8 Froxlor 8 GitoxideLabs 8 Erik Debye 8 Fast-uri 8 Uselotus 7 ZKTeco 7 Aspose 7 Diem-project 7 Itsourcecode 7 Krupalshah 6 Admidio 6 Semcms 6 1Panel-dev 6 Erzhongxmu 6 TrueBooker 6 MISP 6 Eptura 6 Macrozheng 6 TDuckCloud 6 nh4tvd 6 Unclecode 6 Vraj404 5 GeoVision Inc. 5 H3C 5 Thelia 5 HMS Networks 5 Rdesktop 5 Arraytics 5 Meetecho 5 Librenms 5 Yungengxin 4 Dav-ee 4 Project-MONAI 4 Emersion 4 Hotel Booking 4 Jovancoding 4 Ministry of Justice General Directorate of Information Technology 4 Eleveo 4 Pbuchbinder 4 Opensource-socialnetwork 4 ElementsReady Addons for Elementor 4 Cure53 4 Siyuan-note 4 WatchGuard Fireware OS 4 Google 4 Tencent 4 VideoLAN 4 Easy Property Listings 4 Oretnom23 4 FacturaScripts 4 Satya-vinay 4 Yangzongzhuan 3 ACF Extended 3 Cloudflare 3 DeepPavlov 3 WuKongOpenSource 3 Westboy 3 TP-Link Systems Inc. 3 Camunda 3 aaPanel 3 Lavalite 3 Krayin 3 Netis 3 Sunkaifei 3 WP ManageNinja LLC 3 Fireware OS 3 Subhajitkhan 3 BlackBeltTechnology 3 Studio-Saelix 3 Houtini-ai 3 Deepseek-ai 3 Elunez 2 Parse-community 2 Neo4j 2 Gz-yami 2 GPAC 2 MikroTik 1 Grafana 1 Dell 1 The Wikimedia Foundation Mediaw 1 Stormshield 1 Y 1 E2fsprogs 0 C4illin 0 Trusted Domain Project 0 MongoDB 0 Pypa 0 GestSup 0 Argoproj 0 SQLite 0 Dassault Systèmes 0 A2aproject 0 Hewlett Packard Enterprise 0 Unisoc 0 Samsung 0 Zephyrproject-rtos 0 Eyeplus 0 WSO2 0 Libxml2 0 David-Crty 0 Linux 0 Tox-dev 0 IBM 0 Util-linux 0 Ziroom 0 Kernel 0 Vitejs 0 Linux Kernel 0 Kvcache-ai 0 Python 0 FOSSBilling 0 YS-infoware 0 Vitest-dev 0 Apostrophecms 0 Fortinet 0 ASUS 0 Markdown-it 0 OpenPrinting 0 DevaslanPHP 0 Qt 0 Mljar 0 Https://github.com/curl/curl 0 Python-pillow 0 HAProxy 0 Aio-libs 0 Oracle Corporation 0 openGauss-server 0 NewType Infortech 0 Siemens 0 OpenVPN 0 Systemd 0 Zephyrproject 0
188 researchers · Google Chrome
#151
Khalil Zhani
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#152
asnine
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#153
un3xploitable
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#154
Microsoft Edge
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#155
CompSec Lab at Seoul National
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#156
Youngjin Ju
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#157
Francesco Topol (k4tedu)
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#158
Raghav Maheshwari
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#159
@mfx
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#160
sm1ee
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#161
Sven Dysthe (@svn-dys)
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#162
ksw9722
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#163
Avadhut Mahamuni
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#164
wang1r
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#165
Mozilla
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#166
David Sievers (@loknop)
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#167
Imperial College London
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#168
0xAlessandro
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#169
Systems Lab on 2026-03-08 [$500][40058710] Low CVE-2026-87653: UI misrepresentation in FullScreen. Reported by Lijo A.T on 2022-02-07 [N/A][349994197] Low CVE-2026-87634: Use after free in WebPackaging. Reported by Googl
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#170
lhfff
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#171
Billy Jheng Bing Jhong
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#172
Wihdatu Nuuro Ahmadi
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#173
Muhammad Alifa Ramdhan of STAR Labs SG Pte. Ltd.
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#174
Đặng Thế Tuyến
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#175
Zhenpeng (Leo) Lin
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#176
Pan Zhenpeng of STAR Labs SG Pte. LTd.
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#177
Google on 2026-09-03 [TBD][557320614] Critical CVE-2026-91721: Use after free in Internals. Reported by xinyang on 2026-09-04 [TBD][558456602] Critical CVE-2026-91749: Use after free in Workers. Reported by WinD39 - Huyn
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#178
Sebastian Dowell
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#179
James Burton (Offensive Security @ Meta)
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#180
alex.laboirie
1 credits 1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#181
Tech Division (@taiphung) - Mobifone Digital Payment
1 credits 1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#182
Brendan Dolan-Gavitt
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#183
Wooseok Sung
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#184
Narenda Singh (@_3P1C)
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#185
Fabian Wahle (Hap Security)
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#186
Project Fortify
1 credits 1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#187
Seunghyun Lee (@0x10n) of QED Audit (qedaudit.io)
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#188
Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-07-15[N/A][534867485] High CVE-2026-19557: Use after free in TabStrip. Reported by Google on 2026-07-14[N/A][536676756] High CVE-2026-19558
1 credits 1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
« Prev 1 2 3 4