Leaderboard
Researcher rankings
Who has the most advisory credits — across Apple, Microsoft, Jenkins, Drupal, and every other vendor whose security releases we index. Derived from 500 credit lines on published advisories.
All vendors
Apple 6,109
Microsoft 4,417
Jenkins 1,110
Google Chrome 969
Mozilla 660
Drupal 484
GitLab 250
Zoom 13
Moodle 10
#1
Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.
199 credits
33 CVEs May 2026 → Sep 2026
183 CVE 16 recognition
199
credits
#2
Billy Jheng Bing Jhong
197 credits
32 CVEs May 2026 → Sep 2026
181 CVE 16 recognition
197
credits
#3
Peter Malone
192 credits
43 CVEs May 2026 → Sep 2026
183 CVE 9 recognition
192
credits
#4
stratan (@5tratan)
125 credits
17 CVEs Jul 2026 → Sep 2026
118 CVE 7 recognition
125
credits
#5
OpenAI Codex Security - Amy Burnett
67 credits
12 CVEs Jun 2026 → Sep 2026
61 CVE 6 recognition
67
credits
#6
Tristan Madani (@TristanInSec) from Talence Security
66 credits
12 CVEs May 2026 → Sep 2026
61 CVE 5 recognition
66
credits
#7
Dun
52 credits
9 CVEs May 2026 → Sep 2026
46 CVE 6 recognition
52
credits
#8
Andreas Jaegersberger
50 credits
14 CVEs May 2026 → Sep 2026
45 CVE 5 recognition
50
credits
#9
Nathaniel Oh (@calysteon)
50 credits
13 CVEs May 2026 → Sep 2026
48 CVE 1 recognition 1 other
50
credits
#10
Ro Achterberg of Nosebeard Labs
47 credits
13 CVEs May 2026 → Sep 2026
42 CVE 5 recognition
47
credits
#11
Tommy DeVoss from Braze Security Team (@thedawgyg)
47 credits
7 CVEs Jun 2026 → Sep 2026
40 CVE 7 recognition
47
credits
#12
Richard Zana
44 credits
9 CVEs May 2026 → Sep 2026
41 CVE 3 recognition
44
credits
#13
dr3dd
43 credits
8 CVEs May 2026 → Aug 2026
38 CVE 5 recognition
43
credits
#14
Rahul Raj
39 credits
5 CVEs Jul 2026 → Sep 2026
37 CVE 2 recognition
39
credits
#15
Franco Belman at Blackwing Intelligence
38 credits
6 CVEs Jul 2026 → Sep 2026
33 CVE 5 recognition
38
credits
#16
XGPT of ThreatBook
35 credits
7 CVEs May 2026 → Sep 2026
32 CVE 3 recognition
35
credits
#17
Ye Zhang (@VAR10CK) of Baidu Security
35 credits
5 CVEs Jun 2026 → Sep 2026
30 CVE 5 recognition
35
credits
#18
Feng Xue
35 credits
7 CVEs May 2026 → Sep 2026
32 CVE 3 recognition
35
credits
#19
Stanislav Jelezoglo
35 credits
8 CVEs Jul 2026 → Sep 2026
35 CVE
35
credits
#20
Surya Narayan Kushwaha
35 credits
7 CVEs Jul 2026 → Sep 2026
28 CVE 7 recognition
35
credits
#21
Stuart Wallace
34 credits
8 CVEs Jul 2026 → Sep 2026
32 CVE 2 recognition
34
credits
#22
Hyunwoo Kim (@v4bel)
33 credits
8 CVEs Jun 2026 → Sep 2026
33 CVE
33
credits
#23
Ashish Kunwar
32 credits
6 CVEs May 2026 → Sep 2026
24 CVE 7 recognition 1 other
32
credits
#24
Ruslan Dautov
30 credits
6 CVEs May 2026 → Sep 2026
28 CVE 2 recognition
30
credits
#25
이재영
30 credits
8 CVEs Jul 2026 → Sep 2026
30 CVE
30
credits
#26
John Lussier
29 credits
3 CVEs Jun 2026 → Sep 2026
18 CVE 11 recognition
29
credits
#27
Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research
29 credits
8 CVEs Jul 2026 → Sep 2026
28 CVE 1 recognition
29
credits
#28
Sindre Sorhus
29 credits
9 CVEs Jul 2026 → Sep 2026
29 CVE
29
credits
#29
Vitaly Simonovich
28 credits
3 CVEs May 2026 → Sep 2026
15 CVE 13 recognition
28
credits
#30
Dhiyanesh Selvaraj (@redroot97)
27 credits
5 CVEs May 2026 → Sep 2026
25 CVE 2 recognition
27
credits
#31
Song nuri
27 credits
4 CVEs Jun 2026 → Sep 2026
22 CVE 5 recognition
27
credits
#32
Hiroki Imai (LAC Co., Ltd.)
27 credits
4 CVEs Jul 2026 → Sep 2026
24 CVE 3 recognition
27
credits
#33
Meta Red Team X - Nik Tsytsarkin
27 credits
5 CVEs Aug 2026 → Sep 2026
23 CVE 4 recognition
27
credits
#34
Gia Bui (@yabeow) from Calif.io
26 credits
5 CVEs May 2026 → Aug 2026
26 CVE
26
credits
#35
Chris Bailey - Short Circuit
25 credits
5 CVEs Sep 2026 → Sep 2026
20 CVE 5 recognition
25
credits
#36
Ryan Hileman via Xint Code (xint.io)
25 credits
5 CVEs May 2026 → Sep 2026
22 CVE 3 recognition
25
credits
#37
Niels Hofmans
24 credits
6 CVEs May 2026 → Sep 2026
20 CVE 4 recognition
24
credits
#38
Kwak Kiyong
24 credits
3 CVEs Jun 2026 → Aug 2026
19 CVE 5 recognition
24
credits
#39
Lyutoon
24 credits
3 CVEs Jun 2026 → Sep 2026
19 CVE 5 recognition
24
credits
#40
Narendra Singh (@_3P1C)
23 credits
6 CVEs Jun 2026 → Sep 2026
23 CVE
23
credits
#41
Henock Habte
23 credits
1 CVE Jun 2026 → Sep 2026
7 CVE 16 recognition
23
credits
#42
Anthropic
23 credits
3 CVEs May 2026 → Sep 2026
16 CVE 7 recognition
23
credits
#43
Milad Nasr
23 credits
3 CVEs May 2026 → Sep 2026
16 CVE 7 recognition
23
credits
#44
Nicholas Carlini with Claude
23 credits
3 CVEs May 2026 → Sep 2026
16 CVE 7 recognition
23
credits
#45
Roman Zabicki
23 credits
4 CVEs Sep 2026 → Sep 2026
18 CVE 5 recognition
23
credits
#46
Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
22 credits
5 CVEs May 2026 → Aug 2026
22 CVE
22
credits
#47
Dave G.
22 credits
10 CVEs May 2026 → Sep 2026
22 CVE
22
credits
#48
Gurpreet Shergill
22 credits
2 CVEs Jun 2026 → Aug 2026
13 CVE 9 recognition
22
credits
#49
Cem Onat Karagun
22 credits
3 CVEs May 2026 → Sep 2026
12 CVE 10 recognition
22
credits
#50
Asaf Cohen
22 credits
6 CVEs May 2026 → Sep 2026
15 CVE 7 recognition
22
credits