Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.

All vendors Microsoft 11,445 Apple 7,654 Google Chrome 1,659 Drupal 1,626 Mozilla 1,421 Jenkins 1,414 GitLab 344 Roundcube 180 Frappe 179 FreeRDP 163 Red Hat 150 Apache 97 Open-webui 79 ImageMagick 61 Sgl-project 51 Eclipse Foundation 50 Getgrav 43 Totolink 33 Curl 26 Hexpm 26 OpenSSL 26 Advantech 25 Moodle 24 Zoom 23 Jishenghua 23 Surrealdb 22 Zitadel 22 Progress Software Corporation 21 Splunk 20 LogicalDOC 20 SourceCodester 19 Linux 18 Webkul 18 Edgelesssys 16 @sveltejs 16 Craftcms 15 Erlang 14 Typo3 14 ZcashFoundation 14 Gnome 13 Eosphoros-ai 12 Ginlix-ai 12 Netcore 12 Opencats 12 Progress 11 Linksys 11 GeoVision Inc. 10 Traefik 10 VideoWhisper.com 10 Agno-agi 10 SolarWinds 10 Kiloview 9 ZKTeco 9 Otrs 9 Letta-ai 9 DrayTek 9 Dromara 9 Guchengwuyue 8 Brainstorm Force 8 Moxi624 8 Zen Cart 8 Erzhongxmu 8 Froxlor 8 GitoxideLabs 8 Gedelumbung 8 Erik Debye 8 Fast-uri 8 Unclecode 8 Uselotus 7 TP-Link Systems Inc. 7 Aspose 7 Macrozheng 7 Sahlberg 7 Diem-project 7 Itsourcecode 7 Admidio 6 Krupalshah 6 Semcms 6 1Panel-dev 6 Eptura 6 TrueBooker 6 GDATASoftwareAG 6 MISP 6 Fireware OS 6 Google 6 TDuckCloud 6 nh4tvd 6 Vraj404 5 H3C 5 HMS Networks 5 Thelia 5 Rdesktop 5 Arraytics 5 Meetecho 5 CGM 5 Librenms 5 Yungengxin 4 Dav-ee 4 Jovancoding 4 Project-MONAI 4 Emersion 4 Hotel Booking 4 Opensource-socialnetwork 4 Ministry of Justice General Directorate of Information Technology 4 Eleveo 4 Pbuchbinder 4 ElementsReady Addons for Elementor 4 Cure53 4 Otter Blocks 4 Siyuan-note 4 WatchGuard Fireware OS 4 Tencent 4 VideoLAN 4 Easy Property Listings 4 Satya-vinay 4 Deepseek-ai 4 Oretnom23 4 FacturaScripts 4 Yangzongzhuan 3 NationalSecurityAgency 3 ACF Extended 3 SQLite 3 Westboy 3 Cloudflare 3 DeepPavlov 3 LiteSpeed Cache 3 WuKongOpenSource 3 Parse-community 3 Lavalite 3 Magepeople inc. 3 Camunda 3 aaPanel 3 E4jvikwp 3 Krayin 3 Codepeople 3 VertiGIS Ltd. 3 WP ManageNinja LLC 3 Netis 3 Sunkaifei 3 Xnau webdesign 3 Studio-Saelix 3 Houtini-ai 3 Subhajitkhan 3 BlackBeltTechnology 3 ASUS 3 Stirling-Tools 2 Elunez 2 Dell 2 Neo4j 2 Python Software Foundation 2 Gz-yami 2 Twisted 2 Y 2 GPAC 2 GNU 2 MikroTik 1 Grafana 1 The Wikimedia Foundation Mediaw 1 AWS 1 Stormshield 1 Zephyrproject 1 GestSup 0 Gnutls 0 E2fsprogs 0 Open-reception 0 C4illin 0 Trusted Domain Project 0 Part-DB 0 MongoDB 0 Okta 0 Pypa 0 A2aproject 0 Hewlett Packard Enterprise 0 Unisoc 0 OpenStack 0 Argoproj 0 Openldap 0 Dassault Systèmes 0 WSO2 0 Libxml2 0 Samsung 0 Zephyrproject-rtos 0 Eyeplus 0 Tox-dev 0 David-Crty 0 Ziroom 0 Kernel 0 Vitejs 0 Bytecodealliance 0 IBM 0 Util-linux 0 Vitest-dev 0 Nodejs 0 Linux Kernel 0 Kvcache-ai 0 Python 0 Py-pdf 0 FOSSBilling 0 YS-infoware 0 HAProxy 0 Cacti 0 Aio-libs 0 Oracle Corporation 0 Apostrophecms 0 Fortinet 0 Markdown-it 0 OpenPrinting 0 DevaslanPHP 0 Qt 0 Mljar 0 Https://github.com/curl/curl 0 Python-pillow 0 Intranda 0 openGauss-server 0 NewType Infortech 0 Authlib 0 Siemens 0 The-40-Thieves 0 OpenVPN 0 Systemd 0
500 researchers
#201
Csaba Fitzl (@theevilbit) of Iru
23 credits 6 CVEs May 2026 → Sep 2026
20 CVE 3 recognition
23
credits
#202
Josh Maine of Calif.io
23 credits 4 CVEs Jul 2026 → Sep 2026
23 CVE
23
credits
#203
Sharath Unni
23 credits 12 CVEs May 2026 → Sep 2026
12 CVE 11 other
23
credits
#204
grass with Viettel Cyber Security
23 credits 12 CVEs Aug 2026 → Oct 2026
12 CVE 11 other
23
credits
#205
Drew Webber of the Drupal Security Team
23 credits 11 CVEs Jan 2022 → Nov 2024
6 CVE 17 other
23
credits
#206
Mitigations
23 credits 23 CVEs May 2026 → Oct 2026
23 CVE
23
credits
#207
Simone Bossi and Raffaele Bova at Nozomi Networks
23 credits 23 CVEs Oct 2026 → Oct 2026
23 CVE
23
credits
#208
Kevin Guerroudj
22 credits 22 CVEs Mar 2021 → Jun 2022
22 CVE
22
credits
#209
wh0am1i
22 credits 3 CVEs Jul 2026 → Aug 2026
22 CVE
22
credits
#210
Arni Hardarson (Neonix Security)
22 credits 9 CVEs 2 vendors Jul 2026 → Oct 2026
20 CVE 2 recognition
22
credits
#211
Shubham Chaskar
22 credits 3 CVEs Aug 2026 → Sep 2026
22 CVE
22
credits
#212
Killer Queen
22 credits 12 CVEs Aug 2026 → Oct 2026
12 CVE 10 other
22
credits
#213
Zhiniang Peng (HUST)
22 credits 22 CVEs Jun 2026 → Sep 2026
22 CVE
22
credits
#214
Myungyong Lee
21 credits 9 CVEs 4 vendors Sep 2026 → Oct 2026
18 CVE 3 other
21
credits
#215
Luke Francis
21 credits 2 CVEs May 2026 → Aug 2026
15 CVE 6 recognition
21
credits
#216
Huy Nguyen (@34306) of Calif.io
21 credits 4 CVEs Jul 2026 → Sep 2026
21 CVE
21
credits
#217
yvvdwf
21 credits 19 CVEs Jun 2025 → Sep 2026
21 CVE
21
credits
#218
Wang Yu
21 credits 3 CVEs May 2026 → Aug 2026
21 CVE
21
credits
#219
Paulos Yibelo
21 credits 20 CVEs 2 vendors Sep 2026 → Oct 2026
1 recognition 20 other
21
credits
#220
kayiz with Lien Phat Technology Corporation
21 credits 11 CVEs Jul 2026 → Oct 2026
10 CVE 11 other
21
credits
#221
User:BlankEclair
21 credits 20 CVEs
20 CVE 1 other
21
credits
#222
Dan Reynolds with MSRC Vulnerabilities & Mitigations
21 credits 21 CVEs Aug 2026 → Oct 2026
21
credits
#223
Jess (xjm) of the Drupal Security Team
21 credits 11 CVEs Mar 2025 → Oct 2026
21
credits
#224
CC Bomber, Kitri BoB
21 credits 21 CVEs Nov 2022 → Oct 2025
21 CVE
21
credits
#225
Yuki Chen using GLM from z.ai (https://z.ai)
21 credits 12 CVEs Oct 2026 → Oct 2026
12 CVE 9 other
21
credits
#226
Dan Reynolds with MSRC Vulnerabilities
21 credits 21 CVEs Aug 2026 → Oct 2026
21 CVE
21
credits
#227
Valentin Holubec of akailabs
21 credits 21 CVEs Oct 2026 → Oct 2026
21 CVE
21
credits
#228
BochengXiang(@Crispr) with FDU
21 credits 11 CVEs May 2026 → Oct 2026
11 CVE 10 other
21
credits
#229
Geoffrey Robert of akailabs
21 credits 21 CVEs Oct 2026 → Oct 2026
21 CVE
21
credits
#230
npc0vo
21 credits 21 CVEs Jul 2026 → Oct 2026
21 CVE
21
credits
#231
Anonymous working with TrendAI Zero Day Initiative
21 credits 5 CVEs 2 vendors May 2026 → Aug 2026
20 CVE 1 other
21
credits
#232
Milan Hoppe
20 credits 20 CVEs Oct 2026 → Oct 2026
20
credits
#233
Thomas de Grenier de Latour
20 credits 19 CVEs May 2018 → Feb 2020
19 CVE 1 other
20
credits
#234
Noy Pearl
20 credits 16 CVEs 11 vendors Oct 2026 → Oct 2026
20 CVE
20
credits
#235
YingMuo (@YingMuo) of DEVCORE Research Team
20 credits 2 CVEs Jul 2026 → Sep 2026
11 CVE 9 recognition
20
credits
#236
Francesco Benvenuto of Cisco Talos
20 credits 4 CVEs 2 vendors Apr 2026 → Sep 2026
20 CVE
20
credits
#237
Roushan Kumar Singh (roushan59227)
20 credits 10 CVEs Sep 2026 → Sep 2026
20
credits
#238
Alon Leviev with Microsoft (STORM)
20 credits 10 CVEs Jun 2026 → Oct 2026
10 CVE 10 other
20
credits
#239
Ophir Dror
20 credits 16 CVEs 11 vendors Oct 2026 → Oct 2026
20 CVE
20
credits
#240
Viktor Gazdag NCC Group
20 credits 18 CVEs Sep 2019 → Dec 2019
18 CVE 2 other
20
credits
#241
Fabiano Amorim with Pythian
20 credits 10 CVEs Jul 2026 → Sep 2026
10 CVE 10 other
20
credits
#242
Oli Z
20 credits 20 CVEs Oct 2026 → Oct 2026
20
credits
#243
Clay
20 credits 20 CVEs Oct 2026 → Oct 2026
20
credits
#244
Grant Hume
20 credits 10 CVEs Jul 2026 → Oct 2026
10 CVE 10 other
20
credits
#245
npc0vo with https://diffract-ai.com/
20 credits 20 CVEs Jul 2026 → Oct 2026
20 CVE
20
credits
#246
dizconnect
20 credits 20 CVEs Oct 2026 → Oct 2026
20
credits
#247
Daisuke Hatakeyama
20 credits 3 CVEs 2 vendors Jul 2026 → Sep 2026
14 CVE 5 recognition 1 other
20
credits
#248
Nicolas Rabrenovic
20 credits 3 CVEs Jul 2026 → Aug 2026
20 CVE
20
credits
#249
Jonathan Alush-Aben
20 credits 2 CVEs Jun 2026 → Aug 2026
20 CVE
20
credits
#250
Sunil Tripathy
20 credits 20 CVEs Oct 2026 → Oct 2026
20
credits