Leaderboard
Researcher rankings
Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.
All vendors
Microsoft 11,445
Apple 7,503
Google Chrome 1,659
Drupal 1,606
Mozilla 1,421
Jenkins 1,414
GitLab 321
Roundcube 180
Frappe 179
FreeRDP 163
Red Hat 148
Apache 97
Open-webui 79
ImageMagick 61
Sgl-project 51
Eclipse Foundation 50
Getgrav 43
Totolink 33
Curl 26
Hexpm 26
OpenSSL 26
Advantech 25
Moodle 24
Zoom 23
Jishenghua 23
Surrealdb 22
Zitadel 22
Progress Software Corporation 21
Splunk 20
LogicalDOC 20
SourceCodester 19
Webkul 18
Linux 17
Edgelesssys 16
@sveltejs 16
Erlang 14
Typo3 14
ZcashFoundation 14
Gnome 13
Eosphoros-ai 12
Craftcms 12
Netcore 12
Opencats 12
Progress 11
Linksys 11
Traefik 10
VideoWhisper.com 10
Agno-agi 10
SolarWinds 10
Kiloview 9
ZKTeco 9
Otrs 9
Letta-ai 9
DrayTek 9
Dromara 9
Guchengwuyue 8
Brainstorm Force 8
Moxi624 8
Zen Cart 8
Erzhongxmu 8
Froxlor 8
GitoxideLabs 8
Erik Debye 8
Fast-uri 8
Unclecode 8
Uselotus 7
TP-Link Systems Inc. 7
Aspose 7
Macrozheng 7
Sahlberg 7
Diem-project 7
Itsourcecode 7
Krupalshah 6
Admidio 6
Semcms 6
1Panel-dev 6
TrueBooker 6
MISP 6
Eptura 6
Google 6
Fireware OS 6
TDuckCloud 6
nh4tvd 6
Vraj404 5
GeoVision Inc. 5
H3C 5
Thelia 5
HMS Networks 5
Rdesktop 5
Arraytics 5
Meetecho 5
CGM 5
Librenms 5
Yungengxin 4
Dav-ee 4
Project-MONAI 4
Emersion 4
Hotel Booking 4
Jovancoding 4
Ministry of Justice General Directorate of Information Technology 4
Eleveo 4
Pbuchbinder 4
Opensource-socialnetwork 4
Otter Blocks 4
ElementsReady Addons for Elementor 4
Cure53 4
Siyuan-note 4
WatchGuard Fireware OS 4
Tencent 4
VideoLAN 4
Gedelumbung 4
Easy Property Listings 4
Oretnom23 4
FacturaScripts 4
Satya-vinay 4
Deepseek-ai 4
Yangzongzhuan 3
NationalSecurityAgency 3
ACF Extended 3
SQLite 3
Cloudflare 3
DeepPavlov 3
LiteSpeed Cache 3
WuKongOpenSource 3
Parse-community 3
Westboy 3
Camunda 3
aaPanel 3
Lavalite 3
Magepeople inc. 3
GDATASoftwareAG 3
Krayin 3
Codepeople 3
VertiGIS Ltd. 3
E4jvikwp 3
Netis 3
Sunkaifei 3
Xnau webdesign 3
WP ManageNinja LLC 3
Subhajitkhan 3
BlackBeltTechnology 3
ASUS 3
Studio-Saelix 3
Houtini-ai 3
Stirling-Tools 2
Elunez 2
Dell 2
Neo4j 2
Python Software Foundation 2
Y 2
Gz-yami 2
GNU 2
GPAC 2
MikroTik 1
Grafana 1
The Wikimedia Foundation Mediaw 1
Stormshield 1
AWS 1
E2fsprogs 0
C4illin 0
Trusted Domain Project 0
Part-DB 0
MongoDB 0
Okta 0
Pypa 0
GestSup 0
Gnutls 0
OpenStack 0
Argoproj 0
Openldap 0
Dassault Systèmes 0
A2aproject 0
Hewlett Packard Enterprise 0
Unisoc 0
Samsung 0
Zephyrproject-rtos 0
Eyeplus 0
WSO2 0
Libxml2 0
David-Crty 0
Tox-dev 0
IBM 0
Util-linux 0
Ziroom 0
Kernel 0
Vitejs 0
Nodejs 0
Linux Kernel 0
Kvcache-ai 0
Python 0
FOSSBilling 0
YS-infoware 0
Vitest-dev 0
Apostrophecms 0
Fortinet 0
Markdown-it 0
OpenPrinting 0
DevaslanPHP 0
Qt 0
Mljar 0
Https://github.com/curl/curl 0
Python-pillow 0
HAProxy 0
Cacti 0
Aio-libs 0
Oracle Corporation 0
openGauss-server 0
NewType Infortech 0
Authlib 0
Siemens 0
The-40-Thieves 0
OpenVPN 0
Systemd 0
Zephyrproject 0
Intranda 0
#301
재영 정
18 credits
4 CVEs Jul 2026 → Sep 2026
18 CVE
18
credits
#302
Owen McCullough with MSRC V&M
18 credits
17 CVEs Jul 2026 → Oct 2026
17 CVE 1 other
18
credits
#303
Google Project Zero
18 credits
18 CVEs
18 CVE
18
credits
#304
Jeongmin Choi with S2W
18 credits
10 CVEs May 2026 → Oct 2026
10 CVE 8 other
18
credits
#305
Alvaro Muñoz (@pwntester), GitHub Security Lab
17 credits
17 CVEs May 2023 → Aug 2023
17 CVE
17
credits
#306
Rintaro Kawasugi
17 credits
4 CVEs Sep 2026 → Sep 2026
16 CVE 1 other
17
credits
#307
DARKNAVY (@DarkNavyOrg)
17 credits
2 CVEs May 2026 → Sep 2026
15 CVE 2 recognition
17
credits
#308
Robert Mindo
17 credits
3 CVEs May 2026 → Sep 2026
14 CVE 3 recognition
17
credits
#309
Oliver Chang
17 credits
17 CVEs
17 CVE
17
credits
#310
Hwiwon Lee (hwiwonl), SEC-agent team
17 credits
9 CVEs May 2026 → Aug 2026
9 CVE 8 other
17
credits
#311
David Fiser of Trend Micro Nebula working with Trend Micro's Zero Day Initiative
17 credits
17 CVEs Jul 2019 → Oct 2019
17 CVE
17
credits
#312
Thanatos Tian (HKPolyU) & npc0vo with https://diffract-ai.com/
17 credits
17 CVEs Aug 2026 → Oct 2026
17
credits
#313
Suresh Sundaram
17 credits
2 CVEs May 2026 → Sep 2026
8 CVE 9 recognition
17
credits
#314
catch (catch) of the Drupal Security Team
17 credits
9 CVEs Feb 2025 → Oct 2026
17
credits
#315
Merrick Hare
17 credits
2 CVEs Jun 2026 → Sep 2026
17 CVE
17
credits
#316
Younggi Park (grill66), SEC-agent team
17 credits
9 CVEs May 2026 → Aug 2026
9 CVE 8 other
17
credits
#317
lattice
17 credits
2 CVEs Jul 2026 → Sep 2026
13 CVE 4 recognition
17
credits
#318
Johnny Franks (@zeroxjf)
17 credits
4 CVEs May 2026 → Jul 2026
17 CVE
17
credits
#319
Zhiniang Peng
17 credits
17 CVEs Sep 2026 → Oct 2026
17 CVE
17
credits
#320
Josef Korbel (Citadelo)
17 credits
2 CVEs Jun 2026 → Sep 2026
17 CVE
17
credits
#321
James Nord, CloudBees, Inc.
17 credits
16 CVEs May 2018 → Dec 2025
16 CVE 1 other
17
credits
#322
vietnq
17 credits
9 CVEs Aug 2026 → Oct 2026
9 CVE 8 other
17
credits
#323
Jongseong Kim (nevul37), SEC-agent team
17 credits
9 CVEs May 2026 → Aug 2026
9 CVE 8 other
17
credits
#324
Souta Sugiyama
17 credits
1 CVE Jun 2026 → Sep 2026
7 CVE 10 recognition
17
credits
#325
Younggi Park (grill66) with UIUC
16 credits
7 CVEs 2 vendors
May 2026 → Oct 2026
12 CVE 4 other
16
credits
#326
Юлия Мерцалова
16 credits
3 CVEs Jun 2026 → Sep 2026
16 CVE
16
credits
#327
wgg with https://diffract-ai.com/
16 credits
16 CVEs Sep 2026 → Oct 2026
16 CVE
16
credits
#328
Sven Decabooter (svendecabooter)
16 credits
7 CVEs Feb 2025 → Oct 2026
10 CVE 6 other
16
credits
#329
vmpr0be
16 credits
8 CVEs Jul 2026 → Oct 2026
8 CVE 8 other
16
credits
#330
Juraj Nemec (poker10) of the Drupal Security Team
16 credits
8 CVEs Feb 2025 → Oct 2026
16
credits
#331
Owen McCullough with MSRC V&M
16 credits
16 CVEs Jul 2026 → Oct 2026
16
credits
#332
Ezrak1e
16 credits
9 CVEs Sep 2026 → Oct 2026
9 CVE 7 other
16
credits
#333
Haein Lee
16 credits
8 CVEs Jun 2026 → Jul 2026
8 CVE 8 other
16
credits
#334
AlpetGexha
16 credits
9 CVEs 3 vendors
Oct 2026 → Oct 2026
16 CVE
16
credits
#335
Divya Sundar with Microsoft- MSRC V&M
16 credits
16 CVEs Aug 2026 → Oct 2026
16
credits
#336
Artur Stetsko
16 credits
8 CVEs Jul 2026 → Oct 2026
8 CVE 8 other
16
credits
#337
Cantina
16 credits
3 CVEs May 2026 → Aug 2026
16 CVE
16
credits
#338
Lewis Lee
16 credits
9 CVEs Jul 2026 → Sep 2026
9 CVE 7 other
16
credits
#339
go7f0
16 credits
16 CVEs Feb 2026 → Oct 2026
16 CVE
16
credits
#340
Marcos Oviedo with Deep Extract Harness
16 credits
8 CVEs Jul 2026 → Oct 2026
8 CVE 8 other
16
credits
#341
Michal Kosiorek
16 credits
2 CVEs Jul 2026 → Aug 2026
16 CVE
16
credits
#342
Kevin Gosse
16 credits
8 CVEs Jul 2026 → Oct 2026
8 CVE 8 other
16
credits
#343
DavidKorczynski
16 credits
9 CVEs Oct 2026 → Oct 2026
16 CVE
16
credits
#344
Kn1ght
16 credits
8 CVEs Jul 2026 → Oct 2026
8 CVE 8 other
16
credits
#345
bccc95a61a3cc79d7b2c4423c808f744
15 credits
9 CVEs Sep 2026 → Oct 2026
9 CVE 6 other
15
credits
#346
Varik Matevosyan
15 credits
1 CVE Sep 2026 → Sep 2026
8 CVE 7 recognition
15
credits
#347
Asjid Kalam (@odinshell)
15 credits
2 CVEs Jul 2026 → Aug 2026
15 CVE
15
credits
#348
Using GLM From Z.AI
15 credits
2 CVEs Jun 2026 → Aug 2026
15 CVE
15
credits
#349
Kun Peeks (@SwayZGl1tZyyy)
15 credits
4 CVEs May 2026 → Sep 2026
12 CVE 3 recognition
15
credits
#350
Dave Long, provisional member of the Drupal Security Team
15 credits
8 CVEs Feb 2022 → Sep 2022
15
credits