Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Leaderboard

Researcher rankings

Researchers ranked by advisory credits across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Based on 336 credit lines in published advisories.

All vendors Microsoft 11,445 Apple 7,503 Google Chrome 1,659 Drupal 1,606 Mozilla 1,421 Jenkins 1,414 GitLab 321 Roundcube 180 Frappe 179 FreeRDP 163 Red Hat 148 Apache 97 Open-webui 79 ImageMagick 61 Sgl-project 51 Eclipse Foundation 50 Getgrav 43 Totolink 33 Curl 26 Hexpm 26 OpenSSL 26 Advantech 25 Moodle 24 Zoom 23 Jishenghua 23 Surrealdb 22 Zitadel 22 Progress Software Corporation 21 Splunk 20 LogicalDOC 20 SourceCodester 19 Webkul 18 Linux 17 Edgelesssys 16 @sveltejs 16 Erlang 14 Typo3 14 ZcashFoundation 14 Gnome 13 Eosphoros-ai 12 Craftcms 12 Netcore 12 Opencats 12 Progress 11 Linksys 11 Traefik 10 VideoWhisper.com 10 Agno-agi 10 SolarWinds 10 Kiloview 9 ZKTeco 9 Otrs 9 Letta-ai 9 DrayTek 9 Dromara 9 Guchengwuyue 8 Brainstorm Force 8 Moxi624 8 Zen Cart 8 Erzhongxmu 8 Froxlor 8 GitoxideLabs 8 Erik Debye 8 Fast-uri 8 Unclecode 8 Uselotus 7 TP-Link Systems Inc. 7 Aspose 7 Macrozheng 7 Sahlberg 7 Diem-project 7 Itsourcecode 7 Krupalshah 6 Admidio 6 Semcms 6 1Panel-dev 6 Eptura 6 TrueBooker 6 MISP 6 Fireware OS 6 Google 6 TDuckCloud 6 nh4tvd 6 Vraj404 5 GeoVision Inc. 5 H3C 5 HMS Networks 5 Thelia 5 Rdesktop 5 Arraytics 5 Meetecho 5 CGM 5 Librenms 5 Yungengxin 4 Dav-ee 4 Project-MONAI 4 Emersion 4 Hotel Booking 4 Jovancoding 4 Opensource-socialnetwork 4 Ministry of Justice General Directorate of Information Technology 4 Eleveo 4 Pbuchbinder 4 Cure53 4 Otter Blocks 4 ElementsReady Addons for Elementor 4 WatchGuard Fireware OS 4 Siyuan-note 4 Tencent 4 VideoLAN 4 Gedelumbung 4 Easy Property Listings 4 Deepseek-ai 4 Oretnom23 4 FacturaScripts 4 Satya-vinay 4 Yangzongzhuan 3 NationalSecurityAgency 3 ACF Extended 3 SQLite 3 Westboy 3 Cloudflare 3 DeepPavlov 3 LiteSpeed Cache 3 WuKongOpenSource 3 Parse-community 3 Lavalite 3 Magepeople inc. 3 Camunda 3 aaPanel 3 E4jvikwp 3 GDATASoftwareAG 3 Krayin 3 Codepeople 3 VertiGIS Ltd. 3 Netis 3 Sunkaifei 3 Xnau webdesign 3 WP ManageNinja LLC 3 Houtini-ai 3 Subhajitkhan 3 BlackBeltTechnology 3 ASUS 3 Studio-Saelix 3 Stirling-Tools 2 Elunez 2 Dell 2 Neo4j 2 Python Software Foundation 2 Y 2 Gz-yami 2 GNU 2 GPAC 2 MikroTik 1 Grafana 1 The Wikimedia Foundation Mediaw 1 AWS 1 Stormshield 1 E2fsprogs 0 C4illin 0 Trusted Domain Project 0 Part-DB 0 MongoDB 0 Okta 0 Pypa 0 GestSup 0 Gnutls 0 Unisoc 0 OpenStack 0 Argoproj 0 Openldap 0 Dassault Systèmes 0 A2aproject 0 Hewlett Packard Enterprise 0 WSO2 0 Libxml2 0 Samsung 0 Zephyrproject-rtos 0 Eyeplus 0 David-Crty 0 Tox-dev 0 IBM 0 Util-linux 0 Ziroom 0 Kernel 0 Vitejs 0 Vitest-dev 0 Nodejs 0 Linux Kernel 0 Kvcache-ai 0 Python 0 FOSSBilling 0 YS-infoware 0 HAProxy 0 Cacti 0 Aio-libs 0 Oracle Corporation 0 Apostrophecms 0 Fortinet 0 Markdown-it 0 OpenPrinting 0 DevaslanPHP 0 Qt 0 Mljar 0 Https://github.com/curl/curl 0 Python-pillow 0 Intranda 0 openGauss-server 0 NewType Infortech 0 Authlib 0 Siemens 0 The-40-Thieves 0 OpenVPN 0 Systemd 0 Zephyrproject 0
336 researchers · Drupal
#1
Marcus Johansson (marcus_johansson)
89 credits 38 CVEs Aug 2026 → Oct 2026
85 CVE 4 other
89
credits
#2
Lee Rowlands (larowlan) of the Drupal Security Team
63 credits 32 CVEs Mar 2025 → Oct 2026
6 CVE 57 other
63
credits
#3
Drew Webber (mcdruid) of the Drupal Security Team
58 credits 31 CVEs Feb 2025 → Oct 2026
36 CVE 22 other
58
credits
#4
Jacob Rockowitz (jrockowitz)
42 credits 21 CVEs Jul 2026 → Sep 2026
42
credits
#5
Lee Rowlands of the Drupal Security Team
41 credits 21 CVEs Feb 2022 → Nov 2024
41
credits
#6
Pierre Rudloff (prudloff) of the Drupal Security Team
34 credits 18 CVEs Jul 2026 → Oct 2026
31 CVE 3 other
34
credits
#7
Sudhanshu Dhage (sudhanshu0542)
33 credits 14 CVEs Aug 2026 → Oct 2026
15 CVE 18 other
33
credits
#8
xjm of the Drupal Security Team
32 credits 17 CVEs Nov 2021 → Oct 2024
32
credits
#9
Drew Webber of the Drupal Security Team
23 credits 11 CVEs Jan 2022 → Nov 2024
6 CVE 17 other
23
credits
#10
Jess (xjm) of the Drupal Security Team
21 credits 11 CVEs Mar 2025 → Oct 2026
21
credits
#11
Roushan Kumar Singh (roushan59227)
20 credits 10 CVEs Sep 2026 → Sep 2026
20
credits
#12
Alex Bronstein of the Drupal Security Team
19 credits 9 CVEs Jan 2022 → Sep 2023
19
credits
#13
Benji Fisher (benjifisher) of the Drupal Security Team
18 credits 10 CVEs Feb 2025 → Oct 2026
18
credits
#14
Liam Morland (liam morland)
18 credits 9 CVEs Jul 2026 → Sep 2026
18
credits
#15
Dave Long (longwave) of the Drupal Security Team
18 credits 10 CVEs Feb 2025 → Oct 2026
2 CVE 16 other
18
credits
#16
catch (catch) of the Drupal Security Team
17 credits 9 CVEs Feb 2025 → Oct 2026
17
credits
#17
Juraj Nemec (poker10) of the Drupal Security Team
16 credits 8 CVEs Feb 2025 → Oct 2026
16
credits
#18
Sven Decabooter (svendecabooter)
16 credits 7 CVEs Feb 2025 → Oct 2026
10 CVE 6 other
16
credits
#19
Dave Long, provisional member of the Drupal Security Team
15 credits 8 CVEs Feb 2022 → Sep 2022
15
credits
#20
Brian Willows (hsjbrianwillows)
15 credits 5 CVEs Sep 2026 → Oct 2026
15 CVE
15
credits
#21
Wim Leers
14 credits 8 CVEs Nov 2021 → Nov 2024
14
credits
#22
Dan Chadwick (danchadwick)
12 credits 6 CVEs Jul 2026 → Sep 2026
12
credits
#23
Joshua Sedler (grevil)
12 credits 6 CVEs Jul 2026 → Oct 2026
2 CVE 10 other
12
credits
#24
Alex Pott of the Drupal Security Team
11 credits 7 CVEs Mar 2022 → Nov 2024
11
credits
#25
Michael Maturi (michaelmaturi)
11 credits 5 CVEs May 2026 → Oct 2026
11 CVE
11
credits
#26
Pierre Rudloff (prudloff)
10 credits 10 CVEs Oct 2026 → Oct 2026
10 CVE
10
credits
#27
Benji Fisher, provisional member of the Drupal Security Team
10 credits 6 CVEs Apr 2022 → Sep 2022
10
credits
#28
Neil Drumm (drumm) of the Drupal Security Team
10 credits 5 CVEs Nov 2025 → Apr 2026
10
credits
#29
Greg Knaddison of the Drupal Security Team
10 credits 4 CVEs Nov 2021 → Nov 2024
10
credits
#30
Ra Mänd (ram4nd), provisional member of the Drupal Security Team
10 credits 5 CVEs Nov 2025 → Apr 2026
10
credits
#31
Greg Knaddison (greggles) of the Drupal Security Team
10 credits 5 CVEs Nov 2025 → Sep 2026
10
credits
#32
Artem Dmitriiev (a.dmitriiev)
10 credits 6 CVEs Sep 2026 → Oct 2026
2 CVE 8 other
10
credits
#33
Heine of the Drupal Security Team
9 credits 5 CVEs Jun 2022 → Apr 2023
3 CVE 6 other
9
credits
#34
Tin Nguyen Huu (s4m0y3d)
9 credits 3 CVEs Sep 2026 → Oct 2026
9 CVE
9
credits
#35
Damien McKenna of the Drupal Security Team
9 credits 5 CVEs Mar 2022 → Apr 2023
2 CVE 7 other
9
credits
#36
Benji Fisher of the Drupal Security Team
9 credits 5 CVEs Jan 2023 → Nov 2024
9
credits
#37
cilefen of the Drupal Security Team
8 credits 5 CVEs May 2022 → Nov 2024
8
credits
#38
Fabian Franz
8 credits 4 CVEs Feb 2022 → Nov 2024
8
credits
#39
Dave Long of the Drupal Security Team
8 credits 3 CVEs Jan 2023 → Nov 2024
8
credits
#40
Conrad Lara (cmlara)
8 credits 4 CVEs Aug 2026 → Oct 2026
8 CVE
8
credits
#41
Brian Osborne (bkosborne)
8 credits 4 CVEs Aug 2026 → Sep 2026
2 CVE 6 other
8
credits
#42
Jen Lampton, provisional member of the Drupal Security Team
8 credits 4 CVEs Feb 2022 → Apr 2023
8
credits
#43
Mingsong (mingsong), provisional member of the Drupal Security Team
8 credits 5 CVEs Nov 2025 → Oct 2026
8
credits
#44
James Gilliland (neclimdul) of the Drupal Security Team
8 credits 4 CVEs Nov 2025 → Oct 2026
8
credits
#45
Julian Pustkuchen (anybody)
8 credits 4 CVEs Jul 2026 → Oct 2026
8
credits
#46
Adam Bramley (acbramley)
7 credits 3 CVEs Aug 2026 → Oct 2026
3 CVE 4 other
7
credits
#47
Hemant Gupta (guptahemant)
7 credits 3 CVEs Sep 2026 → Oct 2026
7 CVE
7
credits
#48
Joseph Olstad (joseph.olstad)
7 credits 4 CVEs Aug 2026 → Oct 2026
7
credits
#49
Juraj Nemec of the Drupal Security Team
7 credits 4 CVEs Jan 2024 → Nov 2024
7
credits
#50
Shawn Duncan (fathershawn)
6 credits 3 CVEs Jul 2026 → Oct 2026
6
credits
1 2 3 4 Next »