Insights
CNA scorecard
How well each CVE Numbering Authority fills the records it publishes, scored against a published set of rules: Describe, Scope, Assess, Act, 25 points each. Only what the assigner wrote itself counts; severity and weaknesses added later by an ADP are shown as a dependency, not as the assigner's work.
206
Ranked CNAs
171
Under the threshold
180 days
Rolling window
12
Grade A
| # | CNA | Grade | Score | Records | Badge |
|---|---|---|---|---|---|
| 1 | Secur0 Secur0
Spain · INCIBE
|
A | 98.7 | 46 |
|
| 2 | Temporal Temporal Technologies Inc.
USA · mitre
|
A | 97.0 | 14 |
|
| 3 | EEF Erlang Ecosystem Foundation
USA · mitre
|
A | 96.78 | 350 |
|
| 4 | palo_alto Palo Alto Networks, Inc.
USA · mitre
|
A | 95.27 | 95 |
|
| 5 | isc Internet Systems Consortium (ISC)
USA · mitre
|
A | 95.0 | 33 |
|
| 6 | AMZN Amazon
USA · mitre
|
A | 94.25 | 157 |
|
| 7 | Moxa Moxa Inc.
Taiwan · icscert
|
A | 93.8 | 14 |
|
| 8 | Qt Qt Group
Finland · mitre
|
A | 92.5 | 28 |
|
| 9 | NETGEAR NETGEAR
USA · mitre
|
A | 92.02 | 40 |
|
| 10 | Checkmk Checkmk GmbH
Germany · mitre
|
A | 91.54 | 23 |
|
| 11 | WatchGuard WatchGuard Technologies, Inc.
USA · mitre
|
A | 91.28 | 92 |
|
| 12 | CIRCL Computer Incident Response Center Luxembourg (CIRCL)
Luxembourg · ENISA
|
A | 90.32 | 249 |
|
| 13 | Sonatype Sonatype Inc.
USA · mitre
|
B | 89.91 | 35 |
|
| 14 | autodesk Autodesk
USA · mitre
|
B | 89.81 | 32 |
|
| 15 | CERT-In Indian Computer Emergency Response Team (CERT-In)
India · mitre
|
B | 89.57 | 23 |
|
| 16 | Fluid_Attacks Fluid Attacks
Colombia · mitre
|
B | 89.19 | 58 |
|
| 17 | WSO2 WSO2 LLC
USA · mitre
|
B | 89.17 | 68 |
|
| 18 | Checkmarx Checkmarx
Israel · mitre
|
B | 87.9 | 23 |
|
| 19 | ibm IBM Corporation
USA · mitre
|
B | 87.88 | 1,630 |
|
| 20 | Docker Docker Inc.
USA · mitre
|
B | 87.87 | 42 |
|
| 21 | TPLink TP-Link Systems Inc.
USA · mitre
|
B | 87.44 | 110 |
|
| 22 | Arista Arista Networks, Inc.
USA · mitre
|
B | 87.28 | 90 |
|
| 23 | Hackrate Hackrate Kft.
Hungary · icscert
|
B | 86.7 | 10 |
|
| 24 | harborist Harborist
USA · redhat
|
B | 86.35 | 22 |
|
| 25 | DSF Django Software Foundation
USA · mitre
|
B | 86.25 | 24 |
|
| 26 | qnap QNAP Systems, Inc.
Taiwan · mitre
|
B | 85.61 | 63 |
|
| 27 | INCIBE Spanish National Cybersecurity Institute, S.A. (INCIBE)
Spain · mitre
|
B | 84.92 | 152 |
|
| 28 | Kong Kong Inc.
USA · mitre
|
B | 84.89 | 17 |
|
| 29 | ASUSTOR ASUSTOR, Inc.
Taiwan · mitre
|
B | 84.8 | 10 |
|
| 30 | ConcreteCMS Concrete CMS
USA · mitre
|
B | 84.36 | 111 |
|
| 31 | VulnCheck VulnCheck
USA · mitre
|
B | 84.16 | 7,605 |
|
| 32 | juniper Juniper Networks, Inc.
USA · mitre
|
B | 84.15 | 193 |
|
| 33 | GitHub_P GitHub, Inc. (Products Only)
USA · mitre
|
B | 84.05 | 22 |
|
| 34 | Silabs Silicon Labs
USA · mitre
|
B | 84.01 | 42 |
|
| 35 | NI National Instruments
USA · mitre
|
B | 83.99 | 28 |
|
| 36 | F5 F5, Inc.
USA · mitre
|
B | 83.89 | 87 |
|
| 37 | lenovo Lenovo Group Ltd.
USA · mitre
|
B | 83.78 | 43 |
|
| 38 | bcorg Legion of the Bouncy Castle Inc.
Australia · mitre
|
B | 83.74 | 73 |
|
| 39 | VulDB VulDB
Switzerland · mitre
|
B | 83.21 | 3,784 |
|
| 40 | SolarWinds SolarWinds
USA · mitre
|
B | 82.97 | 30 |
|
| 41 | SEC-VLab SEC Consult Vulnerability Lab
Austria · mitre
|
B | 82.56 | 23 |
|
| 42 | TYPO3 TYPO3 Association
Switzerland · mitre
|
B | 82.35 | 74 |
|
| 43 | GV GeoVision Inc.
Taiwan · mitre
|
B | 82.06 | 71 |
|
| 44 | redhat Red Hat, Inc.
USA · mitre
|
B | 82.04 | 1,131 |
|
| 45 | canonical Canonical Ltd.
UK · mitre
|
B | 81.97 | 60 |
|
| 46 | HeroDevs HeroDevs
USA · mitre
|
B | 81.94 | 18 |
|
| 47 | microsoft Microsoft Corporation
USA · mitre
|
B | 81.72 | 3,838 |
|
| 48 | php PHP Group
USA · mitre
|
B | 81.68 | 17 |
|
| 49 | NLnet_Labs NLnet Labs
Netherlands · mitre
|
B | 81.58 | 76 |
|
| 50 | RTI Real-Time Innovations, Inc.
USA · mitre
|
B | 81.37 | 19 |
|
| 51 | CERT-PL CERT.PL
Poland · ENISA
|
B | 81.16 | 254 |
|
| 52 | Nozomi Nozomi Networks Inc.
USA · mitre
|
B | 81.0 | 60 |
|
| 53 | securin Securin
USA · mitre
|
B | 80.45 | 66 |
|
| 54 | Mandiant Mandiant Inc.
USA · Google
|
B | 80.4 | 19 |
|
| 55 | TeamViewer TeamViewer Germany GmbH
Germany · mitre
|
B | 80.36 | 19 |
|
| 56 | suse SUSE
USA · mitre
|
B | 80.25 | 122 |
|
| 57 | twcert TWCERT/CC
Taiwan · mitre
|
B | 80.19 | 96 |
|
| 58 | Hitachi Hitachi, Ltd.
Japan · jpcert
|
B | 79.86 | 37 |
|
| 59 | Mattermost Mattermost, Inc.
USA · mitre
|
B | 79.72 | 130 |
|
| 60 | wolfSSL wolfSSL Inc.
USA · icscert
|
B | 79.71 | 51 |
|
| 61 | glibc GNU C Library
USA · redhat
|
B | 79.56 | 14 |
|
| 62 | PSF Python Software Foundation
USA · mitre
|
B | 79.5 | 28 |
|
| 63 | Deltaww Delta Electronics, Inc.
Taiwan · icscert
|
B | 79.35 | 20 |
|
| 64 | ENISA EU Agency for Cybersecurity (ENISA)
Greece · mitre
|
B | 79.33 | 53 |
|
| 65 | Zabbix Zabbix
Latvia · mitre
|
B | 79.29 | 17 |
|
| 66 | NCSC.ch Switzerland National Cyber Security Centre (NCSC)
Switzerland · mitre
|
B | 79.22 | 81 |
|
| 67 | ProgressSoftware Progress Software Corporation
USA · mitre
|
B | 78.61 | 171 |
|
| 68 | openssl OpenSSL Software Foundation
USA · mitre
|
B | 78.0 | 43 |
|
| 69 | Google Google LLC
USA · mitre
|
B | 77.39 | 40 |
|
| 70 | zephyr Zephyr Project
USA · mitre
|
B | 77.38 | 213 |
|
| 71 | Fortra Fortra, LLC
USA · mitre
|
B | 77.26 | 13 |
|
| 72 | GoogleCloud Google Cloud
USA · Google
|
B | 77.16 | 31 |
|
| 73 | apache Apache Software Foundation
USA · mitre
|
B | 76.08 | 1,169 |
|
| 74 | CyberDanube CyberDanube
Austria · icscert
|
B | 76.0 | 20 |
|
| 75 | OpenText OpenText (formerly Micro Focus)
USA · mitre
|
B | 75.95 | 13 |
|
| 76 | rapid7 Rapid7, Inc.
USA · mitre
|
B | 75.88 | 79 |
|
| 77 | cisa-cg Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government
USA · CISA
|
B | 75.69 | 130 |
|
| 78 | DIVD Dutch Institute for Vulnerability Disclosure (DIVD)
Netherlands · ENISA
|
B | 75.69 | 18 |
|
| 79 | CERTVDE CERT@VDE
Germany · icscert
|
B | 75.56 | 150 |
|
| 80 | JFrog JFrog
Israel · mitre
|
B | 75.51 | 66 |
|
| 81 | brocade Brocade Communications Systems LLC, a Broadcom Company
USA · mitre
|
B | 75.46 | 70 |
|
| 82 | Patchstack Patchstack
Estonia · mitre
|
B | 75.38 | 3,411 |
|
| 83 | GEN Gen Digital Inc.
USA · mitre
|
B | 75.21 | 24 |
|
| 84 | icscert Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
USA · CISA
|
B | 75.14 | 344 |
|
| 85 | GitLab GitLab Inc.
USA · mitre
|
B | 75.08 | 304 |
|
| 86 | Acer Acer Inc.
Taiwan · mitre
|
B | 75.08 | 48 |
|
| 87 | OTRS EasyVista-OTRS GmbH
Germany · mitre
|
B | 75.0 | 17 |
|
| 88 | rt-labs RT-Labs AB
Sweden · ENISA
|
B | 75.0 | 11 |
|
| 89 | NCSC NATO Cyber Security Centre
Belgium · ENISA
|
B | 75.0 | 10 |
|
| 90 | Document_Fdn. Document Foundation, The
Germany · redhat
|
C | 74.76 | 21 |
|
| 91 | ZUSO_ART ZUSO Advanced Research Team (ZUSO ART)
Taiwan · mitre
|
C | 74.73 | 11 |
|
| 92 | Kaspersky Kaspersky
Russia · mitre
|
C | 74.71 | 10 |
|
| 93 | jci Johnson Controls
USA · icscert
|
C | 74.67 | 35 |
|
| 94 | adobe Adobe Systems Incorporated
USA · mitre
|
C | 74.66 | 769 |
|
| 95 | hp HP Inc.
USA · mitre
|
C | 74.63 | 35 |
|
| 96 | rami.io | C | 74.62 | 25 |
|
| 97 | TR-CERT TR-CERT (Computer Emergency Response Team of the Republic of Türkiye)
Türkiye · mitre
|
C | 74.52 | 270 |
|
| 98 | Altium Altium
USA · mitre
|
C | 74.38 | 13 |
|
| 99 | Rockwell Rockwell Automation
USA · icscert
|
C | 73.81 | 47 |
|
| 100 | OpenVPN OpenVPN Inc.
USA · mitre
|
C | 73.46 | 29 |
|
| 101 | Perforce Perforce
USA · mitre
|
C | 73.37 | 18 |
|
| 102 | AHA Austin Hackers Anonymous
USA · mitre
|
C | 73.27 | 11 |
|
| 103 | Joomla Joomla! Project
USA · mitre
|
C | 72.72 | 368 |
|
| 104 | Zohocorp Zohocorp
India · mitre
|
C | 72.69 | 54 |
|
| 105 | zdi Zero Day Initiative
Japan · mitre
|
C | 72.2 | 166 |
|
| 106 | ASUS ASUSTeK Computer Incorporation
Taiwan · icscert
|
C | 72.06 | 48 |
|
| 107 | fortinet Fortinet, Inc.
USA · mitre
|
C | 71.87 | 47 |
|
| 108 | HDFG The HDF Group
USA · redhat
|
C | 71.67 | 18 |
|
| 109 | GitHub_M GitHub, Inc.
USA · mitre
|
C | 71.54 | 7,907 |
|
| 110 | runZero runZero, Inc.
USA · icscert
|
C | 71.52 | 26 |
|
| 111 | tenable Tenable Network Security, Inc.
USA · mitre
|
C | 71.28 | 52 |
|
| 112 | GRAFANA Grafana Labs
USA · mitre
|
C | 71.23 | 56 |
|
| 113 | PostgreSQL PostgreSQL
Canada · redhat
|
C | 70.94 | 114 |
|
| 114 | airbus Airbus
Netherlands · mitre
|
C | 70.45 | 15 |
|
| 115 | mongodb MongoDB, Inc.
USA · mitre
|
C | 70.18 | 234 |
|
| 116 | HashiCorp HashiCorp Inc.
USA · mitre
|
C | 70.0 | 45 |
|
| 117 | Okta Okta
USA · mitre
|
C | 70.0 | 31 |
|
| 118 | HiddenLayer HiddenLayer, Inc.
USA · mitre
|
C | 70.0 | 16 |
|
| 119 | ERIC Ericsson
Sweden · mitre
|
C | 69.92 | 15 |
|
| 120 | Foxit Foxit Software Incorporated
USA · mitre
|
C | 69.71 | 68 |
|
| 121 | TuranSec Turan Security
Uzbekistan · mitre
|
C | 69.7 | 189 |
|
| 122 | dell Dell
USA · mitre
|
C | 69.67 | 520 |
|
| 123 | wikimedia-foundation The Wikimedia Foundation
USA · mitre
|
C | 69.61 | 70 |
|
| 124 | Zyxel Zyxel Corporation
Taiwan · mitre
|
C | 69.53 | 11 |
|
| 125 | oracle Oracle
USA · mitre
|
C | 69.3 | 3,977 |
|
| 126 | INCD Israel National Cyber Directorate (INCD)
Israel · mitre
|
C | 69.29 | 17 |
|
| 127 | fedora Fedora Project
USA · redhat
|
C | 69.25 | 44 |
|
| 128 | ZTE ZTE Corporation
China · mitre
|
C | 69.0 | 30 |
|
| 129 | elastic Elastic
Netherlands · mitre
|
C | 68.98 | 173 |
|
| 130 | Hitachi_Energy Hitachi Energy
Switzerland · icscert
|
C | 68.79 | 15 |
|
| 131 | Supermicro Super Micro Computer, Inc.
USA · mitre
|
C | 68.36 | 11 |
|
| 132 | Zscaler Zscaler, Inc.
USA · mitre
|
C | 67.9 | 10 |
|
| 133 | ABB Asea Brown Boveri Ltd. (ABB)
Switzerland · icscert
|
C | 67.88 | 17 |
|
| 134 | Acronis Acronis International GmbH
Switzerland · mitre
|
C | 67.63 | 18 |
|
| 135 | synology Synology Inc.
Taiwan · mitre
|
C | 67.28 | 46 |
|
| 136 | redhat-cnalr | C | 67.22 | 10 |
|
| 137 | Canva Canva
Australia · mitre
|
C | 66.8 | 15 |
|
| 138 | cisco Cisco Systems, Inc.
USA · mitre
|
C | 66.21 | 434 |
|
| 139 | checkpoint Check Point Software Ltd.
Israel · mitre
|
C | 65.68 | 17 |
|
| 140 | Citrix Citrix Systems, Inc.
USA · mitre
|
C | 65.6 | 10 |
|
| 141 | eclipse Eclipse Foundation
Belgium · mitre
|
C | 65.5 | 204 |
|
| 142 | snowflake | C | 65.45 | 22 |
|
| 143 | openjs OpenJS Foundation
USA · redhat
|
C | 65.14 | 127 |
|
| 144 | sap SAP SE
Germany · mitre
|
C | 65.14 | 103 |
|
| 145 | Esri Environmental Systems Research Institute, Inc.
USA · mitre
|
C | 65.09 | 29 |
|
| 146 | Wordfence Wordfence
USA · mitre
|
C | 65.0 | 2,480 |
|
| 147 | siemens Siemens
Germany · icscert
|
C | 65.0 | 82 |
|
| 148 | @huntr_ai Protect AI (formerly huntr.dev)
USA · mitre
|
C | 65.0 | 38 |
|
| 149 | schneider Schneider Electric
France · mitre
|
C | 64.95 | 20 |
|
| 150 | nvidia NVIDIA Corporation
USA · mitre
|
C | 64.76 | 336 |
|
| 151 | HCL HCL Software
India · mitre
|
C | 64.46 | 196 |
|
| 152 | vmware VMware by Broadcom
USA · mitre
|
C | 64.26 | 226 |
|
| 153 | jpcert JPCERT/CC
Japan · mitre
|
C | 63.87 | 191 |
|
| 154 | 3ds | C | 63.33 | 18 |
|
| 155 | samsung.tv_appliance Samsung TV & Appliance
South Korea · mitre
|
C | 63.3 | 47 |
|
| 156 | AMD Advanced Micro Devices Inc.
USA · mitre
|
C | 62.92 | 79 |
|
| 157 | ivanti Ivanti
USA · mitre
|
C | 62.64 | 28 |
|
| 158 | NetScaler NetScaler
USA · mitre
|
C | 62.53 | 18 |
|
| 159 | OX Open-Xchange
Germany · mitre
|
C | 62.21 | 47 |
|
| 160 | CSA Cyber Security Agency of Singapore
Singapore · mitre
|
C | 62.15 | 58 |
|
| 161 | SN ServiceNow
USA · mitre
|
C | 61.54 | 13 |
|
| 162 | qualcomm Qualcomm, Inc.
USA · mitre
|
C | 61.47 | 79 |
|
| 163 | CPANSec CPAN Security Group
Canada · redhat
|
C | 61.3 | 361 |
|
| 164 | atlassian Atlassian
Australia · mitre
|
C | 61.2 | 10 |
|
| 165 | Commvault Commvault Systems Inc.
USA · mitre
|
C | 60.88 | 24 |
|
| 166 | OpenHarmony OpenHarmony
China · mitre
|
C | 60.8 | 10 |
|
| 167 | Octopus Octopus Deploy
Australia · mitre
|
C | 60.69 | 16 |
|
| 168 | Gitea Gitea Limited
China · mitre
|
C | 60.61 | 185 |
|
| 169 | snyk Snyk
UK · mitre
|
C | 60.33 | 15 |
|
| 170 | Zoom Zoom Communications, Inc.
USA · mitre
|
C | 60.28 | 18 |
|
| 171 | intel Intel Corporation
USA · mitre
|
C | 60.0 | 71 |
|
| 172 | talos Talos
USA · mitre
|
C | 60.0 | 46 |
|
| 173 | Mautic Mautic
USA · mitre
|
C | 60.0 | 16 |
|
| 174 | freebsd FreeBSD
USA · mitre
|
D | 59.8 | 61 |
|
| 175 | Tanium Tanium Inc.
USA · mitre
|
D | 59.76 | 87 |
|
| 176 | hackerone HackerOne
USA · mitre
|
D | 59.42 | 212 |
|
| 177 | Absolute Absolute Software
USA · mitre
|
D | 59.0 | 24 |
|
| 178 | Ubiquiti Ubiquiti, Inc.
USA · mitre
|
D | 58.57 | 42 |
|
| 179 | LY-Corporation LY Corporation
Japan · jpcert
|
D | 57.31 | 16 |
|
| 180 | JetBrains JetBrains s.r.o.
Czech Republic · mitre
|
D | 57.05 | 245 |
|
| 181 | huawei Huawei Technologies
China · mitre
|
D | 57.0 | 77 |
|
| 182 | trendmicro Trend Micro, Inc.
Japan · mitre
|
D | 57.0 | 16 |
|
| 183 | hpe Hewlett Packard Enterprise (HPE)
USA · mitre
|
D | 56.49 | 383 |
|
| 184 | XEN Xen Project
UK · mitre
|
D | 55.54 | 48 |
|
| 185 | imaginationtech Imagination Technologies
UK · mitre
|
D | 54.92 | 36 |
|
| 186 | Unisoc Unisoc (Shanghai) Technologies Co., Ltd.
China · mitre
|
D | 54.61 | 14 |
|
| 187 | Samsung_Mobile Samsung Mobile
South Korea · mitre
|
D | 54.55 | 126 |
|
| 188 | sonicwall SonicWall, Inc.
USA · mitre
|
D | 54.27 | 34 |
|
| 189 | Linux kernel.org
USA · mitre
|
D | 53.09 | 6,653 |
|
| 190 | drupal Drupal.org
USA · mitre
|
D | 52.81 | 281 |
|
| 191 | Arm Arm Limited
UK · mitre
|
D | 51.5 | 14 |
|
| 192 | curl curl
Sweden · redhat
|
D | 46.47 | 59 |
|
| 193 | MediaTek MediaTek, Inc.
Taiwan · mitre
|
D | 45.0 | 151 |
|
| 194 | DEVOLUTIONS Devolutions Inc.
Canada · mitre
|
E | 44.33 | 71 |
|
| 195 | jenkins Jenkins Project
USA · mitre
|
E | 44.31 | 140 |
|
| 196 | WPScan WPScan
France · mitre
|
E | 44.07 | 2,092 |
|
| 197 | Chrome Chrome
USA · Google
|
E | 42.83 | 3,507 |
|
| 198 | certcc CERT/CC
USA · mitre
|
E | 42.12 | 167 |
|
| 199 | Go Go Project
USA · Google
|
E | 41.77 | 64 |
|
| 200 | samsungsemiconductor Samsung Semiconductor
South Korea · mitre
|
E | 41.4 | 35 |
|
| 201 | Nokia Nokia
Finland · mitre
|
E | 39.7 | 10 |
|
| 202 | google_android Android (associated with Google Inc. or Open Handset Alliance)
USA · Google
|
E | 38.93 | 336 |
|
| 203 | Google_Devices Google Devices
USA · Google
|
E | 37.74 | 144 |
|
| 204 | mozilla Mozilla Corporation
USA · mitre
|
E | 37.71 | 674 |
|
| 205 | apple Apple Inc.
USA · mitre
|
E | 36.79 | 900 |
|
| 206 | mitre MITRE Corporation
USA
|
E | 28.73 | 2,193 |
|
Under the threshold (171)
Fewer than 10 publications in the window. The score is indicative and these are not ranked: three perfect records are not evidence of a practice.
| HackRTU HackRTU
Spain · INCIBE
|
100.0 | 4 records |
| POSIT Posit, PBC
USA · mitre
|
96.8 | 2 records |
| Nutanix Nutanix
USA · mitre
|
96.8 | 1 record |
| OCD Orange Cyberdefense
France · ENISA
|
96.0 | 2 records |
| tqtc | 95.8 | 5 records |
| NetDEF Network Device Education Foundation
USA · ENISA
|
95.0 | 1 record |
| THA-PSIRT Thales Group
France · mitre
|
92.69 | 7 records |
| Velneo Velneo
Spain · INCIBE
|
92.0 | 2 records |
| arcinfo ARC Informatique
France · icscert
|
91.8 | 2 records |
| FTI Fsas Technologies
Germany · mitre
|
91.8 | 2 records |
| ca CA Technologies - A Broadcom Company
USA · mitre
|
91.8 | 1 record |
| hw | 91.4 | 2 records |
| Neo4j Neo4j
Sweden · mitre
|
90.88 | 5 records |
| rust The Rust Project
USA · redhat
|
90.5 | 2 records |
| MON-CSIRT Monash University - Cyber Security Incident Response Team
Australia · mitre
|
89.8 | 8 records |
| AxxonSoft AxxonSoft Limited
Ireland · mitre
|
89.8 | 5 records |
| Cribl Cribl, Inc.
USA · icscert
|
89.8 | 2 records |
| milestonesys Milestone Systems A/S
Denmark · mitre
|
89.8 | 1 record |
| Roche Roche Diagnostics
Switzerland · icscert
|
89.8 | 1 record |
| sirius Sirius Computer, Inc.
USA · mitre
|
89.8 | 1 record |
| StrongDM StrongDM
USA · mitre
|
89.8 | 1 record |
| Vestel Vestel Electronics Industry & Trade Co.
Türkiye · mitre
|
89.8 | 1 record |
| illumos The illumos project
USA · redhat
|
89.11 | 9 records |
| Tigera Tigera, Inc.
USA · mitre
|
89.0 | 6 records |
| OMICRON OMICRON electronics
Austria · icscert
|
88.47 | 3 records |
| esaqa esaqa GmbH
Germany · ENISA
|
88.0 | 5 records |
| Echo Echo Software Ltd.
Israel · mitre
|
88.0 | 2 records |
| Danfoss Danfoss
Denmark · icscert
|
88.0 | 1 record |
| WrenSecurity Wren Security
Czech Republic · mitre
|
88.0 | 1 record |
| Grayback Grayback Security
Spain · INCIBE
|
87.25 | 4 records |
| AlgoSec AlgoSec
Israel · mitre
|
87.0 | 1 record |
| Bull Bull SAS
France · ENISA
|
86.8 | 1 record |
| postiz Postiz
USA · mitre
|
86.75 | 8 records |
| Canon_EMEA Canon EMEA
UK · mitre
|
86.72 | 5 records |
| Microchip Microchip Technology
USA · mitre
|
86.17 | 6 records |
| libreswan Libreswan Project
No country affiliation · mitre
|
85.75 | 8 records |
| chainguard Chainguard, Inc.
USA · icscert
|
85.33 | 6 records |
| Mitsubishi Mitsubishi Electric Corporation
Japan · jpcert
|
84.8 | 8 records |
| NX Network Optix
USA · mitre
|
84.8 | 2 records |
| flock Flock
USA · icscert
|
84.8 | 1 record |
| ASRG Automotive Security Research Group (ASRG)
USA · icscert
|
84.38 | 8 records |
| SCHUTZWERK SCHUTZWERK GmbH
Germany · mitre
|
84.33 | 3 records |
| Softing Softing
Germany · mitre
|
84.0 | 1 record |
| FERMAX Fermax Technologies SLU
Spain · INCIBE
|
83.55 | 4 records |
| STAR_Labs STAR Labs SG Pte. Ltd.
Singapore · mitre
|
83.0 | 1 record |
| SRA Security Risk Advisors (SRA)
USA · icscert
|
82.74 | 7 records |
| Tcpdump Tcpdump Group
Canada · mitre
|
82.57 | 7 records |
| PTC PTC Inc.
USA · icscert
|
82.55 | 4 records |
| PRJBLK Project Black
Australia · mitre
|
82.4 | 6 records |
| BlackDuck Black Duck Software, Inc.
USA · mitre
|
82.3 | 4 records |
| M-Files M-Files Corporation
Finland · mitre
|
82.3 | 4 records |
| Payara Payara
UK · mitre
|
82.3 | 2 records |
| Delinea Delinea, Inc.
USA · mitre
|
82.03 | 8 records |
| Logitech Logitech
Switzerland · mitre
|
82.0 | 1 record |
| Semtech Semtech Corporation
Canada · mitre
|
82.0 | 1 record |
| wibu WIBU-SYSTEMS AG
Germany · ENISA
|
81.8 | 8 records |
| flexera Flexera Software LLC
USA · mitre
|
81.77 | 6 records |
| Netskope Netskope
USA · mitre
|
81.57 | 6 records |
| OpenNMS The OpenNMS Group
USA · mitre
|
81.14 | 7 records |
| Altera Altera
USA · mitre
|
80.88 | 8 records |
| Vaadin Vaadin Ltd.
Finland · mitre
|
80.0 | 7 records |
| hsi Haverford Systems, Inc.
USA · icscert
|
80.0 | 1 record |
| Nintendo Nintendo Co., Ltd.
Japan · jpcert
|
80.0 | 1 record |
| securepoint Securepoint GmbH
Germany · mitre
|
80.0 | 1 record |
| ExtremeNetworks Extreme Networks, Inc.
USA · mitre
|
79.87 | 3 records |
| ThinkstAppliedResearch Thinkst Applied Research
South Africa · mitre
|
79.8 | 7 records |
| linqi linqi GmbH
Germany · mitre
|
79.8 | 4 records |
| SICK_AG SICK AG
Germany · mitre
|
79.8 | 3 records |
| kubernetes Kubernetes
USA · mitre
|
79.56 | 5 records |
| PingIdentity Ping Identity Corporation
USA · mitre
|
79.4 | 5 records |
| dotCMS dotCMS LLC
USA · mitre
|
79.0 | 2 records |
| Toreon Toreon
Belgium · mitre
|
79.0 | 2 records |
| PandoraFMS Pandora FMS
Spain · INCIBE
|
78.88 | 8 records |
| krcert KrCERT/CC
South Korea · mitre
|
78.5 | 6 records |
| forcepoint Forcepoint
USA · mitre
|
78.0 | 3 records |
| NCSC-FI National Cyber Security Centre Finland (NCSC-FI)
Finland · ENISA
|
77.95 | 4 records |
| Centreon Centreon
France · mitre
|
77.55 | 4 records |
| tlt_net Teltonika Networks
Lithuania · icscert
|
77.5 | 5 records |
| CrowdStrike CrowdStrike Holdings, Inc.
USA · mitre
|
77.0 | 1 record |
| LGE LG Electronics
South Korea · mitre
|
77.0 | 1 record |
| N-able N-able
USA · mitre
|
76.9 | 6 records |
| seal Seal Security
USA · mitre
|
76.86 | 7 records |
| Bitdefender Bitdefender
Romania · mitre
|
76.25 | 8 records |
| Digi Digi International Inc.
USA · icscert
|
76.15 | 4 records |
| Cato Cato Networks
Israel · mitre
|
75.95 | 4 records |
| symantec Symantec - A Division of Broadcom
USA · mitre
|
75.17 | 6 records |
| BT BeyondTrust Inc.
USA · mitre
|
75.0 | 7 records |
| KNIME KNIME AG
Switzerland · mitre
|
75.0 | 7 records |
| Caliptra Caliptra Project
USA · mitre
|
75.0 | 5 records |
| watchdog WatchDogDevelopment.com, LLC
USA · mitre
|
75.0 | 3 records |
| EA Electronic Arts, Inc.
USA · mitre
|
75.0 | 1 record |
| ELAN ELAN Microelectronics Corp.
Taiwan · mitre
|
75.0 | 1 record |
| Forescout Forescout Technologies
USA · mitre
|
75.0 | 1 record |
| Proton Proton AG
Switzerland · mitre
|
75.0 | 1 record |
| yandex Yandex N.V.
Russia · mitre
|
75.0 | 1 record |
| alibaba Alibaba, Inc.
China · mitre
|
74.9 | 2 records |
| The_Missing_Link The Missing Link Australia (TML)
Australia · mitre
|
74.3 | 6 records |
| hitvan | 73.86 | 7 records |
| YesWeHack YesWeHack
France · ENISA
|
73.33 | 3 records |
| TCS-CERT TCS-CERT (Thales Cyber Solutions Customer’s CERT)
Belgium · THA-PSIRT
|
73.0 | 3 records |
| ESET ESET, spol. s r.o.
Slovak Republic · ENISA
|
72.75 | 8 records |
| Canon Canon Inc.
Japan · jpcert
|
72.55 | 8 records |
| Pega Pegasystems Inc.
USA · mitre
|
72.5 | 6 records |
| blackberry BlackBerry
Canada · mitre
|
72.26 | 7 records |
| cirosec cirosec GmbH
Germany · mitre
|
72.0 | 1 record |
| ClickHouse ClickHouse, Inc.
USA · mitre
|
72.0 | 1 record |
| IQSIGHT IQSIGHT B.V.
Netherlands · ENISA
|
71.8 | 1 record |
| Honeywell Honeywell International Inc.
USA · icscert
|
71.07 | 7 records |
| Sophos Sophos Limited
UK · mitre
|
71.0 | 2 records |
| ConnectWise ConnectWise LLC
USA · mitre
|
70.67 | 3 records |
| PaperCut PaperCut Software Pty Ltd
Australia · mitre
|
70.56 | 9 records |
| BLSOPS Black Lantern Security
USA · mitre
|
70.0 | 8 records |
| AMI AMI
USA · icscert
|
70.0 | 6 records |
| openGauss openGauss Community
China · mitre
|
70.0 | 5 records |
| BombadilSystems Bombadil Systems LLC
USA · mitre
|
70.0 | 4 records |
| bizerba Bizerba SE & Co. KG
Germany · mitre
|
70.0 | 3 records |
| upKeeper upKeeper Solutions
Sweden · mitre
|
70.0 | 2 records |
| Akrites Akrites SIRT
USA · mitre
|
70.0 | 1 record |
| Pentraze Pentraze Cybersecurity
Dominican Republic · mitre
|
70.0 | 1 record |
| SoftIron SoftIron
USA · mitre
|
70.0 | 1 record |
| TianoCore TianoCore.org
USA · mitre
|
70.0 | 1 record |
| Eaton Eaton
Ireland · mitre
|
69.8 | 6 records |
| OPPO OPPO Mobile Telecommunication Corp., Ltd.
China · mitre
|
69.5 | 2 records |
| BCNY The Browser Company of New York
USA · mitre
|
69.25 | 4 records |
| FSI Financial Security Institute (FSI)
South Korea · mitre
|
69.2 | 5 records |
| bosch Robert Bosch GmbH
Germany · icscert
|
69.05 | 8 records |
| sba-research SBA Research gGmbH
Austria · mitre
|
69.0 | 8 records |
| Anthropic Anthropic, PBC
USA · mitre
|
68.96 | 5 records |
| dahua Dahua Technologies
China · mitre
|
68.75 | 4 records |
| Jaspersoft Jaspersoft
USA · mitre
|
68.5 | 2 records |
| Trellix Trellix
USA · mitre
|
68.0 | 6 records |
| Everpure Everpure, Inc.
USA · mitre
|
68.0 | 3 records |
| NCSC-NL National Cyber Security Centre Netherlands (NCSC-NL)
Netherlands · ENISA
|
68.0 | 1 record |
| WindRiver Wind River Systems Inc.
USA · icscert
|
67.9 | 5 records |
| Vivo Vivo Mobile Communication Co., Ltd.
China · mitre
|
67.6 | 5 records |
| Secomea Secomea A/S
Denmark · icscert
|
67.5 | 2 records |
| netapp NetApp, Inc.
USA · mitre
|
67.28 | 8 records |
| GandC Glyph & Cog, LLC
USA · redhat
|
67.0 | 2 records |
| HYPR HYPR Corp
USA · mitre
|
67.0 | 2 records |
| ASR ASR Microelectronics Co., Ltd.
China · icscert
|
67.0 | 1 record |
| EDB EnterpriseDB Corporation
USA · mitre
|
66.67 | 9 records |
| SailPoint SailPoint Technologies
USA · mitre
|
66.0 | 2 records |
| cloudflare Cloudflare, Inc.
USA · mitre
|
65.6 | 8 records |
| Securifera Securifera, Inc.
USA · mitre
|
65.0 | 7 records |
| Seagate Seagate Technology
USA · mitre
|
65.0 | 3 records |
| Airoha Airoha Technology Corp.
Taiwan · mitre
|
65.0 | 1 record |
| FB Fujifilm Business Innovation Corp.
Japan · jpcert
|
65.0 | 1 record |
| YokogawaGroup Yokogawa Group
Japan · jpcert
|
65.0 | 1 record |
| TXOne TXOne Networks, Inc.
Taiwan · icscert
|
64.8 | 1 record |
| 9front 9front Systems
USA · mitre
|
64.3 | 2 records |
| Genetec Genetec Inc.
Canada · mitre
|
64.17 | 6 records |
| Insyde Insyde Software
USA · mitre
|
64.12 | 8 records |
| NEC NEC Corporation
Japan · jpcert
|
63.5 | 4 records |
| SK-CERT National Cyber Security Centre SK-CERT
Slovak Republic · ENISA
|
63.5 | 2 records |
| pretix pretix GmbH
Germany · mitre
|
63.13 | 3 records |
| Panasonic_Holdings_Corporation Panasonic Holdings Corporation
Japan · jpcert
|
62.0 | 1 record |
| Gallagher Gallagher Group Ltd.
New Zealand · icscert
|
60.0 | 4 records |
| Spotfire Spotfire
USA · mitre
|
60.0 | 1 record |
| systemd The systemd project
Germany · redhat
|
59.67 | 3 records |
| Bugcrowd Bugcrowd Inc.
USA · mitre
|
59.06 | 8 records |
| Axis Axis Communications AB
Sweden · mitre
|
58.5 | 7 records |
| Ciena Ciena Corporation
USA · mitre
|
57.45 | 4 records |
| Omnissa Omnissa, LLC
USA · mitre
|
57.0 | 2 records |
| Infoblox Infoblox Inc.
USA · mitre
|
57.0 | 1 record |
| tibco TIBCO Software Inc.
USA · mitre
|
57.0 | 1 record |
| OAI OpenAI
USA · mitre
|
53.57 | 7 records |
| TECNOMobile TECNO Mobile Limited
China · mitre
|
53.5 | 2 records |
| naver Naver Corporation
South Korea · mitre
|
51.8 | 2 records |
| hikvision Hangzhou Hikvision Digital Technology Co., Ltd.
China · mitre
|
49.44 | 9 records |
| Meta Meta Platforms, Inc.
USA · mitre
|
45.83 | 9 records |
| debian Debian GNU/Linux
USA · mitre
|
35.0 | 2 records |
The ranked CNAs graded A over the window: a mean score of 90 or more across their publications.
A
98.7 · 46 records
A
97.0 · 14 records
A
96.78 · 350 records
A
95.27 · 95 records
A
95.0 · 33 records
A
94.25 · 157 records
A
93.8 · 14 records
A
92.5 · 28 records
A
92.02 · 40 records
A
91.54 · 23 records
A
91.28 · 92 records
A
90.32 · 249 records
Named practices with an objective threshold, over the window, among the ranked CNAs. A listing names what to change; the bottom of a ranking does not.
No severity statement on any record of the window
15
- Chrome 100% / 3507
- apple 100% / 900
- mozilla 100% / 674
- CPANSec 100% / 361
- MediaTek 100% / 151
- jenkins 100% / 140
- DEVOLUTIONS 100% / 71
- Go 100% / 64
- freebsd 100% / 61
- curl 100% / 59
- imaginationtech 100% / 36
- samsungsemiconductor 100% / 35
- sonicwall 100% / 34
- Arm 100% / 14
- Nokia 100% / 10
Severity supplied by an ADP for more than half the records
24
- mozilla 100% / 674
- MediaTek 100% / 151
- jenkins 100% / 140
- DEVOLUTIONS 100% / 71
- Go 100% / 64
- freebsd 100% / 61
- curl 100% / 59
- openssl 100% / 43
- imaginationtech 100% / 36
- sonicwall 100% / 34
- Arm 100% / 14
- Nokia 100% / 10
- apple 100% / 900
- Google_Devices 99% / 144
- Chrome 99% / 3507
- drupal 98% / 281
- certcc 96% / 167
- google_android 95% / 336
- CPANSec 91% / 361
- Gitea 90% / 185
- WPScan 89% / 2092
- XEN 77% / 48
- mitre 72% / 2193
- apache 65% / 1169
Descriptions under 100 characters on more than 30% of the records
6
- Tanium 94% / 87
- OpenHarmony 80% / 10
- Deltaww 60% / 20
- samsungsemiconductor 54% / 35
- Patchstack 53% / 3411
- qualcomm 35% / 79
The rules
Each record earns a credit in 0..1 per rule; the record's score is the weighted sum, the assigner's is the mean.
Describe: can a reader tell what the vulnerability is? (25 points)
- Description (10): An English description that is not a placeholder: full credit from 200 characters, 0.7 from 80, 0.4 from 40, none below.
- Title (5): A title.
- Cwe (10): A weakness as a CWE identifier in problemTypes; a free-text problem type without one earns a quarter.
Scope: can a reader tell whether they are affected? (25 points)
- Affected (10): An affected entry naming both a vendor and a product; one side missing or 'n/a' earns half.
- Versions (8): An affected entry stating versions, as a version or a bound; a defaultStatus alone earns half.
- Cpe (7): A CPE on an affected entry, or a cpeApplicability block.
Assess: can a reader tell how bad it is? (25 points)
- Severity (15): A severity statement in the CNA container: a CVSS v3 or v4 vector, an SSVC decision, or a vendor rating as an 'other' metric. A CVSS v2 vector alone earns half.
- Modern severity (5): A CVSS v4 vector or an SSVC decision.
- Impacts (5): An impacts entry (a CAPEC identifier or an impact description).
Act: can a reader tell what to do about it? (25 points)
- References (7): At least one reference.
- Reference tags (5): At least one reference carrying tags.
- Remediation (8): A reference tagged 'patch'; one tagged 'vendor-advisory', 'mitigation' or 'release-notes' earns 0.6.
- Solutions (5): A solution or a workaround.
Grades: A from 90, B from 75, C from 60, D from 45, E from 0. Timeliness is displayed on each assigner's page and never scored: a long reservation-to-publication delay is a disclosure embargo as often as a backlog. The full text, with the methodology history, is in the documentation.