Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 188 credit lines in published advisories.
All vendors
Microsoft 11,405
Apple 7,503
Google Chrome 1,659
Drupal 1,585
Mozilla 1,421
Jenkins 1,414
GitLab 321
Roundcube 180
Frappe 179
Red Hat 121
FreeRDP 119
Apache 97
Open-webui 79
ImageMagick 61
Sgl-project 50
Getgrav 43
Totolink 33
Eclipse Foundation 32
Curl 26
Hexpm 26
Advantech 25
Moodle 24
Zoom 23
Jishenghua 23
Surrealdb 22
Zitadel 22
Progress Software Corporation 21
Splunk 20
LogicalDOC 20
SourceCodester 19
Webkul 18
Edgelesssys 16
@sveltejs 16
Typo3 14
ZcashFoundation 14
Gnome 12
Eosphoros-ai 12
Craftcms 12
Netcore 12
Opencats 12
Progress 11
Linksys 11
OpenSSL 11
Traefik 10
VideoWhisper.com 10
Agno-agi 10
SolarWinds 10
Otrs 9
Letta-ai 9
DrayTek 9
Dromara 9
Guchengwuyue 8
Brainstorm Force 8
Erlang 8
Moxi624 8
Zen Cart 8
Froxlor 8
GitoxideLabs 8
Erik Debye 8
Fast-uri 8
Uselotus 7
ZKTeco 7
Aspose 7
Diem-project 7
Itsourcecode 7
Krupalshah 6
Admidio 6
Semcms 6
1Panel-dev 6
Erzhongxmu 6
TrueBooker 6
MISP 6
Eptura 6
Macrozheng 6
TDuckCloud 6
nh4tvd 6
Unclecode 6
Vraj404 5
GeoVision Inc. 5
H3C 5
Thelia 5
HMS Networks 5
Rdesktop 5
Arraytics 5
Meetecho 5
Librenms 5
Yungengxin 4
Dav-ee 4
Project-MONAI 4
Emersion 4
Hotel Booking 4
Jovancoding 4
Ministry of Justice General Directorate of Information Technology 4
Eleveo 4
Pbuchbinder 4
Opensource-socialnetwork 4
ElementsReady Addons for Elementor 4
Cure53 4
Siyuan-note 4
WatchGuard Fireware OS 4
Google 4
Tencent 4
VideoLAN 4
Easy Property Listings 4
Oretnom23 4
FacturaScripts 4
Satya-vinay 4
Yangzongzhuan 3
ACF Extended 3
Cloudflare 3
DeepPavlov 3
WuKongOpenSource 3
Westboy 3
TP-Link Systems Inc. 3
Camunda 3
aaPanel 3
Lavalite 3
Krayin 3
Netis 3
Sunkaifei 3
WP ManageNinja LLC 3
Fireware OS 3
Subhajitkhan 3
BlackBeltTechnology 3
Studio-Saelix 3
Houtini-ai 3
Deepseek-ai 3
Elunez 2
Parse-community 2
Neo4j 2
Gz-yami 2
GPAC 2
MikroTik 1
Grafana 1
Dell 1
The Wikimedia Foundation Mediaw 1
Stormshield 1
Y 1
E2fsprogs 0
C4illin 0
Trusted Domain Project 0
MongoDB 0
Pypa 0
GestSup 0
Argoproj 0
SQLite 0
Dassault Systèmes 0
A2aproject 0
Hewlett Packard Enterprise 0
Unisoc 0
Samsung 0
Zephyrproject-rtos 0
Eyeplus 0
WSO2 0
Libxml2 0
David-Crty 0
Linux 0
Tox-dev 0
IBM 0
Util-linux 0
Ziroom 0
Kernel 0
Vitejs 0
Linux Kernel 0
Kvcache-ai 0
Python 0
FOSSBilling 0
YS-infoware 0
Vitest-dev 0
Apostrophecms 0
Fortinet 0
ASUS 0
Markdown-it 0
OpenPrinting 0
DevaslanPHP 0
Qt 0
Mljar 0
Https://github.com/curl/curl 0
Python-pillow 0
HAProxy 0
Aio-libs 0
Oracle Corporation 0
openGauss-server 0
NewType Infortech 0
Siemens 0
OpenVPN 0
Systemd 0
Zephyrproject 0
#151
Khalil Zhani
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#152
asnine
1 credits
1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#153
un3xploitable
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#154
Microsoft Edge
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#155
CompSec Lab at Seoul National
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#156
Youngjin Ju
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#157
Francesco Topol (k4tedu)
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#158
Raghav Maheshwari
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#159
@mfx
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#160
sm1ee
1 credits
1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#161
Sven Dysthe (@svn-dys)
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#162
ksw9722
1 credits
1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#163
Avadhut Mahamuni
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#164
wang1r
1 credits
1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#165
Mozilla
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#166
David Sievers (@loknop)
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#167
Imperial College London
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#168
0xAlessandro
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#169
Systems Lab on 2026-03-08 [$500][40058710] Low CVE-2026-87653: UI misrepresentation in FullScreen. Reported by Lijo A.T on 2022-02-07 [N/A][349994197] Low CVE-2026-87634: Use after free in WebPackaging. Reported by Googl
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#170
lhfff
1 credits
1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#171
Billy Jheng Bing Jhong
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#172
Wihdatu Nuuro Ahmadi
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#173
Muhammad Alifa Ramdhan of STAR Labs SG Pte. Ltd.
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#174
Đặng Thế Tuyến
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#175
Zhenpeng (Leo) Lin
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#176
Pan Zhenpeng of STAR Labs SG Pte. LTd.
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#177
Google on 2026-09-03 [TBD][557320614] Critical CVE-2026-91721: Use after free in Internals. Reported by xinyang on 2026-09-04 [TBD][558456602] Critical CVE-2026-91749: Use after free in Workers. Reported by WinD39 - Huyn
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#178
Sebastian Dowell
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#179
James Burton (Offensive Security @ Meta)
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#180
alex.laboirie
1 credits
1 CVE Sep 2026 → Sep 2026
1 CVE
1
credits
#181
Tech Division (@taiphung) - Mobifone Digital Payment
1 credits
1 CVE Jul 2026 → Jul 2026
1 CVE
1
credits
#182
Brendan Dolan-Gavitt
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#183
Wooseok Sung
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#184
Narenda Singh (@_3P1C)
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#185
Fabian Wahle (Hap Security)
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#186
Project Fortify
1 credits
1 CVE Oct 2026 → Oct 2026
1 CVE
1
credits
#187
Seunghyun Lee (@0x10n) of QED Audit (qedaudit.io)
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits
#188
Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-07-15[N/A][534867485] High CVE-2026-19557: Use after free in TabStrip. Reported by Google on 2026-07-14[N/A][536676756] High CVE-2026-19558
1 credits
1 CVE Aug 2026 → Aug 2026
1 CVE
1
credits