Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.
All vendors
Microsoft 11,445
Apple 7,654
Google Chrome 1,659
Drupal 1,626
Mozilla 1,421
Jenkins 1,414
GitLab 344
Roundcube 180
Frappe 179
FreeRDP 163
Red Hat 150
Apache 97
Open-webui 79
ImageMagick 61
Sgl-project 51
Eclipse Foundation 50
Getgrav 43
Totolink 33
Curl 26
Hexpm 26
OpenSSL 26
Advantech 25
Moodle 24
Zoom 23
Jishenghua 23
Surrealdb 22
Zitadel 22
Progress Software Corporation 21
Splunk 20
LogicalDOC 20
SourceCodester 19
Linux 18
Webkul 18
Edgelesssys 16
@sveltejs 16
Craftcms 15
Erlang 14
Typo3 14
ZcashFoundation 14
Gnome 13
Eosphoros-ai 12
Ginlix-ai 12
Netcore 12
Opencats 12
Progress 11
Linksys 11
GeoVision Inc. 10
Traefik 10
VideoWhisper.com 10
Agno-agi 10
SolarWinds 10
Kiloview 9
ZKTeco 9
Otrs 9
Letta-ai 9
DrayTek 9
Dromara 9
Guchengwuyue 8
Brainstorm Force 8
Moxi624 8
Zen Cart 8
Erzhongxmu 8
Froxlor 8
GitoxideLabs 8
Gedelumbung 8
Erik Debye 8
Fast-uri 8
Unclecode 8
Uselotus 7
TP-Link Systems Inc. 7
Aspose 7
Macrozheng 7
Sahlberg 7
Diem-project 7
Itsourcecode 7
Admidio 6
Krupalshah 6
Semcms 6
1Panel-dev 6
Eptura 6
TrueBooker 6
GDATASoftwareAG 6
MISP 6
Fireware OS 6
Google 6
TDuckCloud 6
nh4tvd 6
Vraj404 5
H3C 5
HMS Networks 5
Thelia 5
Rdesktop 5
Arraytics 5
Meetecho 5
CGM 5
Librenms 5
Yungengxin 4
Dav-ee 4
Jovancoding 4
Project-MONAI 4
Emersion 4
Hotel Booking 4
Opensource-socialnetwork 4
Ministry of Justice General Directorate of Information Technology 4
Eleveo 4
Pbuchbinder 4
ElementsReady Addons for Elementor 4
Cure53 4
Otter Blocks 4
Siyuan-note 4
WatchGuard Fireware OS 4
Tencent 4
VideoLAN 4
Easy Property Listings 4
Satya-vinay 4
Deepseek-ai 4
Oretnom23 4
FacturaScripts 4
Yangzongzhuan 3
NationalSecurityAgency 3
ACF Extended 3
SQLite 3
Westboy 3
Cloudflare 3
DeepPavlov 3
LiteSpeed Cache 3
WuKongOpenSource 3
Parse-community 3
Lavalite 3
Magepeople inc. 3
Camunda 3
aaPanel 3
E4jvikwp 3
Krayin 3
Codepeople 3
VertiGIS Ltd. 3
WP ManageNinja LLC 3
Netis 3
Sunkaifei 3
Xnau webdesign 3
Studio-Saelix 3
Houtini-ai 3
Subhajitkhan 3
BlackBeltTechnology 3
ASUS 3
Stirling-Tools 2
Elunez 2
Dell 2
Neo4j 2
Python Software Foundation 2
Gz-yami 2
Twisted 2
Y 2
GPAC 2
GNU 2
MikroTik 1
Grafana 1
The Wikimedia Foundation Mediaw 1
AWS 1
Stormshield 1
Zephyrproject 1
GestSup 0
Gnutls 0
E2fsprogs 0
Open-reception 0
C4illin 0
Trusted Domain Project 0
Part-DB 0
MongoDB 0
Okta 0
Pypa 0
A2aproject 0
Hewlett Packard Enterprise 0
Unisoc 0
OpenStack 0
Argoproj 0
Openldap 0
Dassault Systèmes 0
WSO2 0
Libxml2 0
Samsung 0
Zephyrproject-rtos 0
Eyeplus 0
Tox-dev 0
David-Crty 0
Ziroom 0
Kernel 0
Vitejs 0
Bytecodealliance 0
IBM 0
Util-linux 0
Vitest-dev 0
Nodejs 0
Linux Kernel 0
Kvcache-ai 0
Python 0
Py-pdf 0
FOSSBilling 0
YS-infoware 0
HAProxy 0
Cacti 0
Aio-libs 0
Oracle Corporation 0
Apostrophecms 0
Fortinet 0
Markdown-it 0
OpenPrinting 0
DevaslanPHP 0
Qt 0
Mljar 0
Https://github.com/curl/curl 0
Python-pillow 0
Intranda 0
openGauss-server 0
NewType Infortech 0
Authlib 0
Siemens 0
The-40-Thieves 0
OpenVPN 0
Systemd 0
#201
Csaba Fitzl (@theevilbit) of Iru
23 credits
6 CVEs May 2026 → Sep 2026
20 CVE 3 recognition
23
credits
#202
Josh Maine of Calif.io
23 credits
4 CVEs Jul 2026 → Sep 2026
23 CVE
23
credits
#203
Sharath Unni
23 credits
12 CVEs May 2026 → Sep 2026
12 CVE 11 other
23
credits
#204
grass with Viettel Cyber Security
23 credits
12 CVEs Aug 2026 → Oct 2026
12 CVE 11 other
23
credits
#205
Drew Webber of the Drupal Security Team
23 credits
11 CVEs Jan 2022 → Nov 2024
6 CVE 17 other
23
credits
#206
Mitigations
23 credits
23 CVEs May 2026 → Oct 2026
23 CVE
23
credits
#207
Simone Bossi and Raffaele Bova at Nozomi Networks
23 credits
23 CVEs Oct 2026 → Oct 2026
23 CVE
23
credits
#208
Kevin Guerroudj
22 credits
22 CVEs Mar 2021 → Jun 2022
22 CVE
22
credits
#209
wh0am1i
22 credits
3 CVEs Jul 2026 → Aug 2026
22 CVE
22
credits
#210
Arni Hardarson (Neonix Security)
22 credits
9 CVEs 2 vendors
Jul 2026 → Oct 2026
20 CVE 2 recognition
22
credits
#211
Shubham Chaskar
22 credits
3 CVEs Aug 2026 → Sep 2026
22 CVE
22
credits
#212
Killer Queen
22 credits
12 CVEs Aug 2026 → Oct 2026
12 CVE 10 other
22
credits
#213
Zhiniang Peng (HUST)
22 credits
22 CVEs Jun 2026 → Sep 2026
22 CVE
22
credits
#214
Myungyong Lee
21 credits
9 CVEs 4 vendors
Sep 2026 → Oct 2026
18 CVE 3 other
21
credits
#215
Luke Francis
21 credits
2 CVEs May 2026 → Aug 2026
15 CVE 6 recognition
21
credits
#216
Huy Nguyen (@34306) of Calif.io
21 credits
4 CVEs Jul 2026 → Sep 2026
21 CVE
21
credits
#217
yvvdwf
21 credits
19 CVEs Jun 2025 → Sep 2026
21 CVE
21
credits
#218
Wang Yu
21 credits
3 CVEs May 2026 → Aug 2026
21 CVE
21
credits
#219
Paulos Yibelo
21 credits
20 CVEs 2 vendors
Sep 2026 → Oct 2026
1 recognition 20 other
21
credits
#220
kayiz with Lien Phat Technology Corporation
21 credits
11 CVEs Jul 2026 → Oct 2026
10 CVE 11 other
21
credits
#221
User:BlankEclair
21 credits
20 CVEs
20 CVE 1 other
21
credits
#222
Dan Reynolds with MSRC Vulnerabilities & Mitigations
21 credits
21 CVEs Aug 2026 → Oct 2026
21
credits
#223
Jess (xjm) of the Drupal Security Team
21 credits
11 CVEs Mar 2025 → Oct 2026
21
credits
#224
CC Bomber, Kitri BoB
21 credits
21 CVEs Nov 2022 → Oct 2025
21 CVE
21
credits
#225
Yuki Chen using GLM from z.ai (https://z.ai)
21 credits
12 CVEs Oct 2026 → Oct 2026
12 CVE 9 other
21
credits
#226
Dan Reynolds with MSRC Vulnerabilities
21 credits
21 CVEs Aug 2026 → Oct 2026
21 CVE
21
credits
#227
Valentin Holubec of akailabs
21 credits
21 CVEs Oct 2026 → Oct 2026
21 CVE
21
credits
#228
BochengXiang(@Crispr) with FDU
21 credits
11 CVEs May 2026 → Oct 2026
11 CVE 10 other
21
credits
#229
Geoffrey Robert of akailabs
21 credits
21 CVEs Oct 2026 → Oct 2026
21 CVE
21
credits
#230
npc0vo
21 credits
21 CVEs Jul 2026 → Oct 2026
21 CVE
21
credits
#231
Anonymous working with TrendAI Zero Day Initiative
21 credits
5 CVEs 2 vendors
May 2026 → Aug 2026
20 CVE 1 other
21
credits
#232
Milan Hoppe
20 credits
20 CVEs Oct 2026 → Oct 2026
20
credits
#233
Thomas de Grenier de Latour
20 credits
19 CVEs May 2018 → Feb 2020
19 CVE 1 other
20
credits
#234
Noy Pearl
20 credits
16 CVEs 11 vendors
Oct 2026 → Oct 2026
20 CVE
20
credits
#235
YingMuo (@YingMuo) of DEVCORE Research Team
20 credits
2 CVEs Jul 2026 → Sep 2026
11 CVE 9 recognition
20
credits
#236
Francesco Benvenuto of Cisco Talos
20 credits
4 CVEs 2 vendors
Apr 2026 → Sep 2026
20 CVE
20
credits
#237
Roushan Kumar Singh (roushan59227)
20 credits
10 CVEs Sep 2026 → Sep 2026
20
credits
#238
Alon Leviev with Microsoft (STORM)
20 credits
10 CVEs Jun 2026 → Oct 2026
10 CVE 10 other
20
credits
#239
Ophir Dror
20 credits
16 CVEs 11 vendors
Oct 2026 → Oct 2026
20 CVE
20
credits
#240
Viktor Gazdag NCC Group
20 credits
18 CVEs Sep 2019 → Dec 2019
18 CVE 2 other
20
credits
#241
Fabiano Amorim with Pythian
20 credits
10 CVEs Jul 2026 → Sep 2026
10 CVE 10 other
20
credits
#242
Oli Z
20 credits
20 CVEs Oct 2026 → Oct 2026
20
credits
#243
Clay
20 credits
20 CVEs Oct 2026 → Oct 2026
20
credits
#244
Grant Hume
20 credits
10 CVEs Jul 2026 → Oct 2026
10 CVE 10 other
20
credits
#245
npc0vo with https://diffract-ai.com/
20 credits
20 CVEs Jul 2026 → Oct 2026
20 CVE
20
credits
#246
dizconnect
20 credits
20 CVEs Oct 2026 → Oct 2026
20
credits
#247
Daisuke Hatakeyama
20 credits
3 CVEs 2 vendors
Jul 2026 → Sep 2026
14 CVE 5 recognition 1 other
20
credits
#248
Nicolas Rabrenovic
20 credits
3 CVEs Jul 2026 → Aug 2026
20 CVE
20
credits
#249
Jonathan Alush-Aben
20 credits
2 CVEs Jun 2026 → Aug 2026
20 CVE
20
credits
#250
Sunil Tripathy
20 credits
20 CVEs Oct 2026 → Oct 2026
20
credits