Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.

All vendors Microsoft 11,445 Apple 7,503 Google Chrome 1,659 Drupal 1,606 Mozilla 1,421 Jenkins 1,414 GitLab 321 Roundcube 180 Frappe 179 FreeRDP 163 Red Hat 148 Apache 97 Open-webui 79 ImageMagick 61 Sgl-project 51 Eclipse Foundation 50 Getgrav 43 Totolink 33 Curl 26 Hexpm 26 OpenSSL 26 Advantech 25 Moodle 24 Zoom 23 Jishenghua 23 Surrealdb 22 Zitadel 22 Progress Software Corporation 21 Splunk 20 LogicalDOC 20 SourceCodester 19 Webkul 18 Linux 17 Edgelesssys 16 @sveltejs 16 Erlang 14 Typo3 14 ZcashFoundation 14 Gnome 13 Eosphoros-ai 12 Craftcms 12 Netcore 12 Opencats 12 Progress 11 Linksys 11 Traefik 10 VideoWhisper.com 10 Agno-agi 10 SolarWinds 10 Kiloview 9 ZKTeco 9 Otrs 9 Letta-ai 9 DrayTek 9 Dromara 9 Guchengwuyue 8 Brainstorm Force 8 Moxi624 8 Zen Cart 8 Erzhongxmu 8 Froxlor 8 GitoxideLabs 8 Erik Debye 8 Fast-uri 8 Unclecode 8 Uselotus 7 TP-Link Systems Inc. 7 Aspose 7 Macrozheng 7 Sahlberg 7 Diem-project 7 Itsourcecode 7 Krupalshah 6 Admidio 6 Semcms 6 1Panel-dev 6 TrueBooker 6 MISP 6 Eptura 6 Google 6 Fireware OS 6 TDuckCloud 6 nh4tvd 6 Vraj404 5 GeoVision Inc. 5 H3C 5 Thelia 5 HMS Networks 5 Rdesktop 5 Arraytics 5 Meetecho 5 CGM 5 Librenms 5 Yungengxin 4 Dav-ee 4 Project-MONAI 4 Emersion 4 Hotel Booking 4 Jovancoding 4 Ministry of Justice General Directorate of Information Technology 4 Eleveo 4 Pbuchbinder 4 Opensource-socialnetwork 4 Otter Blocks 4 ElementsReady Addons for Elementor 4 Cure53 4 Siyuan-note 4 WatchGuard Fireware OS 4 Tencent 4 VideoLAN 4 Gedelumbung 4 Easy Property Listings 4 Oretnom23 4 FacturaScripts 4 Satya-vinay 4 Deepseek-ai 4 Yangzongzhuan 3 NationalSecurityAgency 3 ACF Extended 3 SQLite 3 Cloudflare 3 DeepPavlov 3 LiteSpeed Cache 3 WuKongOpenSource 3 Parse-community 3 Westboy 3 Camunda 3 aaPanel 3 Lavalite 3 Magepeople inc. 3 GDATASoftwareAG 3 Krayin 3 Codepeople 3 VertiGIS Ltd. 3 E4jvikwp 3 Netis 3 Sunkaifei 3 Xnau webdesign 3 WP ManageNinja LLC 3 Subhajitkhan 3 BlackBeltTechnology 3 ASUS 3 Studio-Saelix 3 Houtini-ai 3 Stirling-Tools 2 Elunez 2 Dell 2 Neo4j 2 Python Software Foundation 2 Y 2 Gz-yami 2 GNU 2 GPAC 2 MikroTik 1 Grafana 1 The Wikimedia Foundation Mediaw 1 Stormshield 1 AWS 1 E2fsprogs 0 C4illin 0 Trusted Domain Project 0 Part-DB 0 MongoDB 0 Okta 0 Pypa 0 GestSup 0 Gnutls 0 OpenStack 0 Argoproj 0 Openldap 0 Dassault Systèmes 0 A2aproject 0 Hewlett Packard Enterprise 0 Unisoc 0 Samsung 0 Zephyrproject-rtos 0 Eyeplus 0 WSO2 0 Libxml2 0 David-Crty 0 Tox-dev 0 IBM 0 Util-linux 0 Ziroom 0 Kernel 0 Vitejs 0 Nodejs 0 Linux Kernel 0 Kvcache-ai 0 Python 0 FOSSBilling 0 YS-infoware 0 Vitest-dev 0 Apostrophecms 0 Fortinet 0 Markdown-it 0 OpenPrinting 0 DevaslanPHP 0 Qt 0 Mljar 0 Https://github.com/curl/curl 0 Python-pillow 0 HAProxy 0 Cacti 0 Aio-libs 0 Oracle Corporation 0 openGauss-server 0 NewType Infortech 0 Authlib 0 Siemens 0 The-40-Thieves 0 OpenVPN 0 Systemd 0 Zephyrproject 0 Intranda 0
500 researchers
#251
Behzad Najjarpour Jabbari (@_G4ru_)
20 credits 2 CVEs Jun 2026 → Sep 2026
16 CVE 4 recognition
20
credits
#252
5up3rh3i
20 credits 5 CVEs Sep 2026 → Oct 2026
20 CVE
20
credits
#253
Fábio Luís @scanpt
20 credits 2 CVEs Jul 2026 → Sep 2026
19 CVE 1 other
20
credits
#254
Samy Medjahed (Ap4sh)
20 credits 19 CVEs Apr 2026 → Sep 2026
19 CVE 1 other
20
credits
#255
Milan Hoppe
20 credits 20 CVEs Oct 2026 → Oct 2026
20
credits
#256
David Strnadel
20 credits 3 CVEs Jul 2026 → Sep 2026
20 CVE
20
credits
#257
GoldenSW
20 credits 20 CVEs Oct 2026 → Oct 2026
20
credits
#258
Brian Carpenter
20 credits 2 CVEs May 2026 → Aug 2026
18 CVE 2 recognition
20
credits
#259
Eliott Laurie (Ethicxz)
19 credits 19 CVEs Apr 2026 → Sep 2026
19 CVE
19
credits
#260
Claudio Bozzato
19 credits 3 CVEs Jul 2026 → Sep 2026
19 CVE
19
credits
#261
Mustafa Calap (@ordinal0, dbg.re)
19 credits 3 CVEs Sep 2026 → Sep 2026
19 CVE
19
credits
#262
Jian Lee (@speedyfriend433)
19 credits 2 CVEs Sep 2026 → Sep 2026
13 CVE 6 recognition
19
credits
#263
yvvdwf
19 credits 19 CVEs Jun 2025 → Sep 2026
19 CVE
19
credits
#264
wxz
19 credits 12 CVEs Jun 2026 → Oct 2026
12 CVE 7 other
19
credits
#265
OOOooooooOOO
19 credits 10 CVEs Jul 2026 → Oct 2026
10 CVE 9 other
19
credits
#266
Jonatan Männchen / EEF
19 credits 11 CVEs 4 vendors Oct 2026 → Oct 2026
19
credits
#267
Divya Sundar with Microsoft- MSRC V&M
19 credits 19 CVEs Aug 2026 → Oct 2026
19 CVE
19
credits
#268
Rodolphe Brunetti (@eisw0lf) of Lupus Nova
19 credits 4 CVEs Jul 2026 → Sep 2026
19 CVE
19
credits
#269
Long Nguyen, Viettel Cyber Security
19 credits 19 CVEs Oct 2020 → Jan 2023
19 CVE
19
credits
#270
Csaba Fitzl (@theevilbit) of Iru
19 credits 5 CVEs May 2026 → Sep 2026
16 CVE 3 recognition
19
credits
#271
hxr1
19 credits 3 CVEs Jul 2026 → Sep 2026
14 CVE 5 recognition
19
credits
#272
Peter Tang
19 credits 17 CVEs 15 vendors Oct 2026 → Oct 2026
18 CVE 1 other
19
credits
#273
19 credits 5 CVEs 2 vendors Jul 2026 → Oct 2026
18 CVE 1 recognition
#274
James Duffy (@0x4A616D657344)
19 credits 2 CVEs Jul 2026 → Sep 2026
14 CVE 5 recognition
19
credits
#275
Maher Azzouzi
19 credits 3 CVEs May 2026 → Sep 2026
13 CVE 6 recognition
19
credits
#276
N.M.Praveen Nawarathne (@zblockrat)
19 credits 2 CVEs Jul 2026 → Sep 2026
15 CVE 4 recognition
19
credits
#277
Ryohei Ueki (@SYZD Research)
19 credits 3 CVEs Jul 2026 → Sep 2026
14 CVE 5 recognition
19
credits
#278
Alex Bronstein of the Drupal Security Team
19 credits 9 CVEs Jan 2022 → Sep 2023
19
credits
#279
Wang Yu
19 credits 3 CVEs May 2026 → Aug 2026
19 CVE
19
credits
#280
Andrew Ruddick with Microsoft Red Team
18 credits 9 CVEs Sep 2026 → Oct 2026
9 CVE 9 other
18
credits
#281
Peter Ullrich
18 credits 10 CVEs 4 vendors Jun 2026 → Oct 2026
18 CVE
18
credits
#282
Dave Long (longwave) of the Drupal Security Team
18 credits 10 CVEs Feb 2025 → Oct 2026
2 CVE 16 other
18
credits
#283
Benji Fisher (benjifisher) of the Drupal Security Team
18 credits 10 CVEs Feb 2025 → Oct 2026
18
credits
#284
CJ Vana
18 credits 3 CVEs Sep 2026 → Sep 2026
17 CVE 1 recognition
18
credits
#285
Noy Pearl
18 credits 16 CVEs 11 vendors Oct 2026 → Oct 2026
18 CVE
18
credits
#286
Finn Westendorf
18 credits 6 CVEs Sep 2026 → Oct 2026
18 CVE
18
credits
#287
ʌ!ɔ⊥ojv
18 credits 9 CVEs Jun 2026 → Oct 2026
9 CVE 9 other
18
credits
#288
pwnky
18 credits 9 CVEs Jul 2026 → Oct 2026
9 CVE 9 other
18
credits
#289
Pasquale Scola
18 credits 2 CVEs Jul 2026 → Sep 2026
18 CVE
18
credits
#290
Thanatos Tian
18 credits 17 CVEs Jun 2026 → Sep 2026
16 CVE 2 other
18
credits
#291
Ophir Dror
18 credits 16 CVEs 11 vendors Oct 2026 → Oct 2026
18 CVE
18
credits
#292
Michael Sromin
18 credits 16 CVEs 11 vendors Oct 2026 → Oct 2026
18 CVE
18
credits
#293
Howard McGreehan with MSRC V&M
18 credits 17 CVEs May 2026 → Oct 2026
17 CVE 1 other
18
credits
#294
Utkarsh Pal
18 credits 2 CVEs Jun 2026 → Sep 2026
12 CVE 6 recognition
18
credits
#295
Liam Morland (liam morland)
18 credits 9 CVEs Jul 2026 → Sep 2026
18
credits
#296
Calif.io in collaboration with Claude and Anthropic Research
18 credits 6 CVEs 2 vendors May 2026 → Sep 2026
18 CVE
18
credits
#297
Drinor Selmanaj (Sentry)
18 credits 2 CVEs Jun 2026 → Sep 2026
17 CVE 1 other
18
credits
#298
Eddy Tsalolikhin
18 credits 2 CVEs Jul 2026 → Sep 2026
14 CVE 4 recognition
18
credits
#299
Romuald Moisan, Aix Marseille University
18 credits 18 CVEs Mar 2025 → Jun 2026
18 CVE
18
credits
#300
Ashmit Sharma
18 credits 3 CVEs 2 vendors May 2026 → Sep 2026
11 CVE 6 recognition 1 other
18
credits