Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 500 credit lines in published advisories.

All vendors Microsoft 11,445 Apple 7,503 Google Chrome 1,659 Drupal 1,606 Mozilla 1,421 Jenkins 1,414 GitLab 321 Roundcube 180 Frappe 179 FreeRDP 163 Red Hat 148 Apache 97 Open-webui 79 ImageMagick 61 Sgl-project 51 Eclipse Foundation 50 Getgrav 43 Totolink 33 Curl 26 Hexpm 26 OpenSSL 26 Advantech 25 Moodle 24 Zoom 23 Jishenghua 23 Surrealdb 22 Zitadel 22 Progress Software Corporation 21 Splunk 20 LogicalDOC 20 SourceCodester 19 Webkul 18 Linux 17 Edgelesssys 16 @sveltejs 16 Erlang 14 Typo3 14 ZcashFoundation 14 Gnome 13 Eosphoros-ai 12 Craftcms 12 Netcore 12 Opencats 12 Progress 11 Linksys 11 Traefik 10 VideoWhisper.com 10 Agno-agi 10 SolarWinds 10 Kiloview 9 ZKTeco 9 Otrs 9 Letta-ai 9 DrayTek 9 Dromara 9 Guchengwuyue 8 Brainstorm Force 8 Moxi624 8 Zen Cart 8 Erzhongxmu 8 Froxlor 8 GitoxideLabs 8 Erik Debye 8 Fast-uri 8 Unclecode 8 Uselotus 7 TP-Link Systems Inc. 7 Aspose 7 Macrozheng 7 Sahlberg 7 Diem-project 7 Itsourcecode 7 Krupalshah 6 Admidio 6 Semcms 6 1Panel-dev 6 TrueBooker 6 MISP 6 Eptura 6 Google 6 Fireware OS 6 TDuckCloud 6 nh4tvd 6 Vraj404 5 GeoVision Inc. 5 H3C 5 Thelia 5 HMS Networks 5 Rdesktop 5 Arraytics 5 Meetecho 5 CGM 5 Librenms 5 Yungengxin 4 Dav-ee 4 Project-MONAI 4 Emersion 4 Hotel Booking 4 Jovancoding 4 Ministry of Justice General Directorate of Information Technology 4 Eleveo 4 Pbuchbinder 4 Opensource-socialnetwork 4 Otter Blocks 4 ElementsReady Addons for Elementor 4 Cure53 4 Siyuan-note 4 WatchGuard Fireware OS 4 Tencent 4 VideoLAN 4 Gedelumbung 4 Easy Property Listings 4 Oretnom23 4 FacturaScripts 4 Satya-vinay 4 Deepseek-ai 4 Yangzongzhuan 3 NationalSecurityAgency 3 ACF Extended 3 SQLite 3 Cloudflare 3 DeepPavlov 3 LiteSpeed Cache 3 WuKongOpenSource 3 Parse-community 3 Westboy 3 Camunda 3 aaPanel 3 Lavalite 3 Magepeople inc. 3 GDATASoftwareAG 3 Krayin 3 Codepeople 3 VertiGIS Ltd. 3 E4jvikwp 3 Netis 3 Sunkaifei 3 Xnau webdesign 3 WP ManageNinja LLC 3 Subhajitkhan 3 BlackBeltTechnology 3 ASUS 3 Studio-Saelix 3 Houtini-ai 3 Stirling-Tools 2 Elunez 2 Dell 2 Neo4j 2 Python Software Foundation 2 Y 2 Gz-yami 2 GNU 2 GPAC 2 MikroTik 1 Grafana 1 The Wikimedia Foundation Mediaw 1 Stormshield 1 AWS 1 E2fsprogs 0 C4illin 0 Trusted Domain Project 0 Part-DB 0 MongoDB 0 Okta 0 Pypa 0 GestSup 0 Gnutls 0 OpenStack 0 Argoproj 0 Openldap 0 Dassault Systèmes 0 A2aproject 0 Hewlett Packard Enterprise 0 Unisoc 0 Samsung 0 Zephyrproject-rtos 0 Eyeplus 0 WSO2 0 Libxml2 0 David-Crty 0 Tox-dev 0 IBM 0 Util-linux 0 Ziroom 0 Kernel 0 Vitejs 0 Nodejs 0 Linux Kernel 0 Kvcache-ai 0 Python 0 FOSSBilling 0 YS-infoware 0 Vitest-dev 0 Apostrophecms 0 Fortinet 0 Markdown-it 0 OpenPrinting 0 DevaslanPHP 0 Qt 0 Mljar 0 Https://github.com/curl/curl 0 Python-pillow 0 HAProxy 0 Cacti 0 Aio-libs 0 Oracle Corporation 0 openGauss-server 0 NewType Infortech 0 Authlib 0 Siemens 0 The-40-Thieves 0 OpenVPN 0 Systemd 0 Zephyrproject 0 Intranda 0
500 researchers
#301
재영 정
18 credits 4 CVEs Jul 2026 → Sep 2026
18 CVE
18
credits
#302
Owen McCullough with MSRC V&M
18 credits 17 CVEs Jul 2026 → Oct 2026
17 CVE 1 other
18
credits
#303
Google Project Zero
18 credits 18 CVEs
18 CVE
18
credits
#304
Jeongmin Choi with S2W
18 credits 10 CVEs May 2026 → Oct 2026
10 CVE 8 other
18
credits
#305
Alvaro Muñoz (@pwntester), GitHub Security Lab
17 credits 17 CVEs May 2023 → Aug 2023
17 CVE
17
credits
#306
Rintaro Kawasugi
17 credits 4 CVEs Sep 2026 → Sep 2026
16 CVE 1 other
17
credits
#307
DARKNAVY (@DarkNavyOrg)
17 credits 2 CVEs May 2026 → Sep 2026
15 CVE 2 recognition
17
credits
#308
Robert Mindo
17 credits 3 CVEs May 2026 → Sep 2026
14 CVE 3 recognition
17
credits
#309
Oliver Chang
17 credits 17 CVEs
17 CVE
17
credits
#310
Hwiwon Lee (hwiwonl), SEC-agent team
17 credits 9 CVEs May 2026 → Aug 2026
9 CVE 8 other
17
credits
#311
David Fiser of Trend Micro Nebula working with Trend Micro's Zero Day Initiative
17 credits 17 CVEs Jul 2019 → Oct 2019
17 CVE
17
credits
#312
Thanatos Tian (HKPolyU) & npc0vo with https://diffract-ai.com/
17 credits 17 CVEs Aug 2026 → Oct 2026
17
credits
#313
Suresh Sundaram
17 credits 2 CVEs May 2026 → Sep 2026
8 CVE 9 recognition
17
credits
#314
catch (catch) of the Drupal Security Team
17 credits 9 CVEs Feb 2025 → Oct 2026
17
credits
#315
Merrick Hare
17 credits 2 CVEs Jun 2026 → Sep 2026
17 CVE
17
credits
#316
Younggi Park (grill66), SEC-agent team
17 credits 9 CVEs May 2026 → Aug 2026
9 CVE 8 other
17
credits
#317
lattice
17 credits 2 CVEs Jul 2026 → Sep 2026
13 CVE 4 recognition
17
credits
#318
Johnny Franks (@zeroxjf)
17 credits 4 CVEs May 2026 → Jul 2026
17 CVE
17
credits
#319
Zhiniang Peng
17 credits 17 CVEs Sep 2026 → Oct 2026
17 CVE
17
credits
#320
Josef Korbel (Citadelo)
17 credits 2 CVEs Jun 2026 → Sep 2026
17 CVE
17
credits
#321
James Nord, CloudBees, Inc.
17 credits 16 CVEs May 2018 → Dec 2025
16 CVE 1 other
17
credits
#322
vietnq
17 credits 9 CVEs Aug 2026 → Oct 2026
9 CVE 8 other
17
credits
#323
Jongseong Kim (nevul37), SEC-agent team
17 credits 9 CVEs May 2026 → Aug 2026
9 CVE 8 other
17
credits
#324
Souta Sugiyama
17 credits 1 CVE Jun 2026 → Sep 2026
7 CVE 10 recognition
17
credits
#325
Younggi Park (grill66) with UIUC
16 credits 7 CVEs 2 vendors May 2026 → Oct 2026
12 CVE 4 other
16
credits
#326
Юлия Мерцалова
16 credits 3 CVEs Jun 2026 → Sep 2026
16 CVE
16
credits
#327
wgg with https://diffract-ai.com/
16 credits 16 CVEs Sep 2026 → Oct 2026
16 CVE
16
credits
#328
Sven Decabooter (svendecabooter)
16 credits 7 CVEs Feb 2025 → Oct 2026
10 CVE 6 other
16
credits
#329
vmpr0be
16 credits 8 CVEs Jul 2026 → Oct 2026
8 CVE 8 other
16
credits
#330
Juraj Nemec (poker10) of the Drupal Security Team
16 credits 8 CVEs Feb 2025 → Oct 2026
16
credits
#331
Owen McCullough with MSRC V&M
16 credits 16 CVEs Jul 2026 → Oct 2026
16
credits
#332
Ezrak1e
16 credits 9 CVEs Sep 2026 → Oct 2026
9 CVE 7 other
16
credits
#333
Haein Lee
16 credits 8 CVEs Jun 2026 → Jul 2026
8 CVE 8 other
16
credits
#334
AlpetGexha
16 credits 9 CVEs 3 vendors Oct 2026 → Oct 2026
16 CVE
16
credits
#335
Divya Sundar with Microsoft- MSRC V&M
16 credits 16 CVEs Aug 2026 → Oct 2026
16
credits
#336
Artur Stetsko
16 credits 8 CVEs Jul 2026 → Oct 2026
8 CVE 8 other
16
credits
#337
Cantina
16 credits 3 CVEs May 2026 → Aug 2026
16 CVE
16
credits
#338
Lewis Lee
16 credits 9 CVEs Jul 2026 → Sep 2026
9 CVE 7 other
16
credits
#339
go7f0
16 credits 16 CVEs Feb 2026 → Oct 2026
16 CVE
16
credits
#340
Marcos Oviedo with Deep Extract Harness
16 credits 8 CVEs Jul 2026 → Oct 2026
8 CVE 8 other
16
credits
#341
Michal Kosiorek
16 credits 2 CVEs Jul 2026 → Aug 2026
16 CVE
16
credits
#342
Kevin Gosse
16 credits 8 CVEs Jul 2026 → Oct 2026
8 CVE 8 other
16
credits
#343
DavidKorczynski
16 credits 9 CVEs Oct 2026 → Oct 2026
16 CVE
16
credits
#344
Kn1ght
16 credits 8 CVEs Jul 2026 → Oct 2026
8 CVE 8 other
16
credits
#345
bccc95a61a3cc79d7b2c4423c808f744
15 credits 9 CVEs Sep 2026 → Oct 2026
9 CVE 6 other
15
credits
#346
Varik Matevosyan
15 credits 1 CVE Sep 2026 → Sep 2026
8 CVE 7 recognition
15
credits
#347
Asjid Kalam (@odinshell)
15 credits 2 CVEs Jul 2026 → Aug 2026
15 CVE
15
credits
#348
Using GLM From Z.AI
15 credits 2 CVEs Jun 2026 → Aug 2026
15 CVE
15
credits
#349
Kun Peeks (@SwayZGl1tZyyy)
15 credits 4 CVEs May 2026 → Sep 2026
12 CVE 3 recognition
15
credits
#350
Dave Long, provisional member of the Drupal Security Team
15 credits 8 CVEs Feb 2022 → Sep 2022
15
credits