Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.
All vendors
Microsoft 11,445
Apple 7,503
Google Chrome 1,659
Drupal 1,606
Mozilla 1,421
Jenkins 1,414
GitLab 321
Roundcube 180
Frappe 179
FreeRDP 163
Red Hat 148
Apache 97
Open-webui 79
ImageMagick 61
Sgl-project 51
Eclipse Foundation 50
Getgrav 43
Totolink 33
Curl 26
Hexpm 26
OpenSSL 26
Advantech 25
Moodle 24
Zoom 23
Jishenghua 23
Surrealdb 22
Zitadel 22
Progress Software Corporation 21
Splunk 20
LogicalDOC 20
SourceCodester 19
Webkul 18
Linux 17
Edgelesssys 16
@sveltejs 16
Erlang 14
Typo3 14
ZcashFoundation 14
Gnome 13
Eosphoros-ai 12
Craftcms 12
Netcore 12
Opencats 12
Progress 11
Linksys 11
Traefik 10
VideoWhisper.com 10
Agno-agi 10
SolarWinds 10
Kiloview 9
ZKTeco 9
Otrs 9
Letta-ai 9
DrayTek 9
Dromara 9
Guchengwuyue 8
Brainstorm Force 8
Moxi624 8
Zen Cart 8
Erzhongxmu 8
Froxlor 8
GitoxideLabs 8
Erik Debye 8
Fast-uri 8
Unclecode 8
Uselotus 7
TP-Link Systems Inc. 7
Aspose 7
Macrozheng 7
Sahlberg 7
Diem-project 7
Itsourcecode 7
Krupalshah 6
Admidio 6
Semcms 6
1Panel-dev 6
TrueBooker 6
MISP 6
Eptura 6
Google 6
Fireware OS 6
TDuckCloud 6
nh4tvd 6
Vraj404 5
GeoVision Inc. 5
H3C 5
Thelia 5
HMS Networks 5
Rdesktop 5
Arraytics 5
Meetecho 5
CGM 5
Librenms 5
Yungengxin 4
Dav-ee 4
Project-MONAI 4
Emersion 4
Hotel Booking 4
Jovancoding 4
Ministry of Justice General Directorate of Information Technology 4
Eleveo 4
Pbuchbinder 4
Opensource-socialnetwork 4
Otter Blocks 4
ElementsReady Addons for Elementor 4
Cure53 4
Siyuan-note 4
WatchGuard Fireware OS 4
Tencent 4
VideoLAN 4
Gedelumbung 4
Easy Property Listings 4
Oretnom23 4
FacturaScripts 4
Satya-vinay 4
Deepseek-ai 4
Yangzongzhuan 3
NationalSecurityAgency 3
ACF Extended 3
SQLite 3
Cloudflare 3
DeepPavlov 3
LiteSpeed Cache 3
WuKongOpenSource 3
Parse-community 3
Westboy 3
Camunda 3
aaPanel 3
Lavalite 3
Magepeople inc. 3
GDATASoftwareAG 3
Krayin 3
Codepeople 3
VertiGIS Ltd. 3
E4jvikwp 3
Netis 3
Sunkaifei 3
Xnau webdesign 3
WP ManageNinja LLC 3
Subhajitkhan 3
BlackBeltTechnology 3
ASUS 3
Studio-Saelix 3
Houtini-ai 3
Stirling-Tools 2
Elunez 2
Dell 2
Neo4j 2
Python Software Foundation 2
Y 2
Gz-yami 2
GNU 2
GPAC 2
MikroTik 1
Grafana 1
The Wikimedia Foundation Mediaw 1
Stormshield 1
AWS 1
E2fsprogs 0
C4illin 0
Trusted Domain Project 0
Part-DB 0
MongoDB 0
Okta 0
Pypa 0
GestSup 0
Gnutls 0
OpenStack 0
Argoproj 0
Openldap 0
Dassault Systèmes 0
A2aproject 0
Hewlett Packard Enterprise 0
Unisoc 0
Samsung 0
Zephyrproject-rtos 0
Eyeplus 0
WSO2 0
Libxml2 0
David-Crty 0
Tox-dev 0
IBM 0
Util-linux 0
Ziroom 0
Kernel 0
Vitejs 0
Nodejs 0
Linux Kernel 0
Kvcache-ai 0
Python 0
FOSSBilling 0
YS-infoware 0
Vitest-dev 0
Apostrophecms 0
Fortinet 0
Markdown-it 0
OpenPrinting 0
DevaslanPHP 0
Qt 0
Mljar 0
Https://github.com/curl/curl 0
Python-pillow 0
HAProxy 0
Cacti 0
Aio-libs 0
Oracle Corporation 0
openGauss-server 0
NewType Infortech 0
Authlib 0
Siemens 0
The-40-Thieves 0
OpenVPN 0
Systemd 0
Zephyrproject 0
Intranda 0
#251
Behzad Najjarpour Jabbari (@_G4ru_)
20 credits
2 CVEs Jun 2026 → Sep 2026
16 CVE 4 recognition
20
credits
#252
5up3rh3i
20 credits
5 CVEs Sep 2026 → Oct 2026
20 CVE
20
credits
#253
Fábio Luís @scanpt
20 credits
2 CVEs Jul 2026 → Sep 2026
19 CVE 1 other
20
credits
#254
Samy Medjahed (Ap4sh)
20 credits
19 CVEs Apr 2026 → Sep 2026
19 CVE 1 other
20
credits
#255
Milan Hoppe
20 credits
20 CVEs Oct 2026 → Oct 2026
20
credits
#256
David Strnadel
20 credits
3 CVEs Jul 2026 → Sep 2026
20 CVE
20
credits
#257
GoldenSW
20 credits
20 CVEs Oct 2026 → Oct 2026
20
credits
#258
Brian Carpenter
20 credits
2 CVEs May 2026 → Aug 2026
18 CVE 2 recognition
20
credits
#259
Eliott Laurie (Ethicxz)
19 credits
19 CVEs Apr 2026 → Sep 2026
19 CVE
19
credits
#260
Claudio Bozzato
19 credits
3 CVEs Jul 2026 → Sep 2026
19 CVE
19
credits
#261
Mustafa Calap (@ordinal0, dbg.re)
19 credits
3 CVEs Sep 2026 → Sep 2026
19 CVE
19
credits
#262
Jian Lee (@speedyfriend433)
19 credits
2 CVEs Sep 2026 → Sep 2026
13 CVE 6 recognition
19
credits
#263
yvvdwf
19 credits
19 CVEs Jun 2025 → Sep 2026
19 CVE
19
credits
#264
wxz
19 credits
12 CVEs Jun 2026 → Oct 2026
12 CVE 7 other
19
credits
#265
OOOooooooOOO
19 credits
10 CVEs Jul 2026 → Oct 2026
10 CVE 9 other
19
credits
#266
Jonatan Männchen / EEF
19 credits
11 CVEs 4 vendors
Oct 2026 → Oct 2026
19
credits
#267
Divya Sundar with Microsoft- MSRC V&M
19 credits
19 CVEs Aug 2026 → Oct 2026
19 CVE
19
credits
#268
Rodolphe Brunetti (@eisw0lf) of Lupus Nova
19 credits
4 CVEs Jul 2026 → Sep 2026
19 CVE
19
credits
#269
Long Nguyen, Viettel Cyber Security
19 credits
19 CVEs Oct 2020 → Jan 2023
19 CVE
19
credits
#270
Csaba Fitzl (@theevilbit) of Iru
19 credits
5 CVEs May 2026 → Sep 2026
16 CVE 3 recognition
19
credits
#271
hxr1
19 credits
3 CVEs Jul 2026 → Sep 2026
14 CVE 5 recognition
19
credits
#272
Peter Tang
19 credits
17 CVEs 15 vendors
Oct 2026 → Oct 2026
18 CVE 1 other
19
credits
#273
#274
James Duffy (@0x4A616D657344)
19 credits
2 CVEs Jul 2026 → Sep 2026
14 CVE 5 recognition
19
credits
#275
Maher Azzouzi
19 credits
3 CVEs May 2026 → Sep 2026
13 CVE 6 recognition
19
credits
#276
N.M.Praveen Nawarathne (@zblockrat)
19 credits
2 CVEs Jul 2026 → Sep 2026
15 CVE 4 recognition
19
credits
#277
Ryohei Ueki (@SYZD Research)
19 credits
3 CVEs Jul 2026 → Sep 2026
14 CVE 5 recognition
19
credits
#278
Alex Bronstein of the Drupal Security Team
19 credits
9 CVEs Jan 2022 → Sep 2023
19
credits
#279
Wang Yu
19 credits
3 CVEs May 2026 → Aug 2026
19 CVE
19
credits
#280
Andrew Ruddick with Microsoft Red Team
18 credits
9 CVEs Sep 2026 → Oct 2026
9 CVE 9 other
18
credits
#281
Peter Ullrich
18 credits
10 CVEs 4 vendors
Jun 2026 → Oct 2026
18 CVE
18
credits
#282
Dave Long (longwave) of the Drupal Security Team
18 credits
10 CVEs Feb 2025 → Oct 2026
2 CVE 16 other
18
credits
#283
Benji Fisher (benjifisher) of the Drupal Security Team
18 credits
10 CVEs Feb 2025 → Oct 2026
18
credits
#284
CJ Vana
18 credits
3 CVEs Sep 2026 → Sep 2026
17 CVE 1 recognition
18
credits
#285
Noy Pearl
18 credits
16 CVEs 11 vendors
Oct 2026 → Oct 2026
18 CVE
18
credits
#286
Finn Westendorf
18 credits
6 CVEs Sep 2026 → Oct 2026
18 CVE
18
credits
#287
ʌ!ɔ⊥ojv
18 credits
9 CVEs Jun 2026 → Oct 2026
9 CVE 9 other
18
credits
#288
pwnky
18 credits
9 CVEs Jul 2026 → Oct 2026
9 CVE 9 other
18
credits
#289
Pasquale Scola
18 credits
2 CVEs Jul 2026 → Sep 2026
18 CVE
18
credits
#290
Thanatos Tian
18 credits
17 CVEs Jun 2026 → Sep 2026
16 CVE 2 other
18
credits
#291
Ophir Dror
18 credits
16 CVEs 11 vendors
Oct 2026 → Oct 2026
18 CVE
18
credits
#292
Michael Sromin
18 credits
16 CVEs 11 vendors
Oct 2026 → Oct 2026
18 CVE
18
credits
#293
Howard McGreehan with MSRC V&M
18 credits
17 CVEs May 2026 → Oct 2026
17 CVE 1 other
18
credits
#294
Utkarsh Pal
18 credits
2 CVEs Jun 2026 → Sep 2026
12 CVE 6 recognition
18
credits
#295
Liam Morland (liam morland)
18 credits
9 CVEs Jul 2026 → Sep 2026
18
credits
#296
Calif.io in collaboration with Claude and Anthropic Research
18 credits
6 CVEs 2 vendors
May 2026 → Sep 2026
18 CVE
18
credits
#297
Drinor Selmanaj (Sentry)
18 credits
2 CVEs Jun 2026 → Sep 2026
17 CVE 1 other
18
credits
#298
Eddy Tsalolikhin
18 credits
2 CVEs Jul 2026 → Sep 2026
14 CVE 4 recognition
18
credits
#299
Romuald Moisan, Aix Marseille University
18 credits
18 CVEs Mar 2025 → Jun 2026
18 CVE
18
credits
#300
Ashmit Sharma
18 credits
3 CVEs 2 vendors
May 2026 → Sep 2026
11 CVE 6 recognition 1 other
18
credits