Vendor compare
Cross-vendor leaderboard for CVE volume, severity, exploited-in-the-wild rate, and LLM-credited discoveries. Click any column header to sort; type in the filter box to narrow by vendor name. Each vendor name links to its full research page.
LLM-discovery adopters — top 20 vendors
Vendors whose CVEs are most frequently credited to LLM-assisted vulnerability discovery (Anthropic Claude, OpenAI, Google Big Sleep, and others). See the full chart at LLM Vuln-Discovery Adoption Index →.
| Vendor | LLM-credited CVEs | Families |
|---|---|---|
| 1,684 | openai 1636, anthropic 48 | |
| Apple | 353 | openai 352, anthropic 1 |
| Microsoft | 262 | openai 258, anthropic 4 |
| Linux Kernel | 172 | openai 169, anthropic 3 |
| Mozilla | 141 | anthropic 141 |
| wolfSSL | 44 | anthropic 44 |
| Bouncycastle | 31 | anthropic 31 |
| OpenSSL | 25 | anthropic 25 |
| Apache | 13 | anthropic 13 |
| Freerdp | 11 | anthropic 11 |
| Symfony | 10 | anthropic 10 |
| Sensiolabs | 9 | anthropic 9 |
| Nuxt | 6 | anthropic 6 |
| Torproject | 6 | anthropic 6 |
| FreeBSD | 3 | anthropic 3 |
| Linux Foundation | 3 | anthropic 3 |
| Envoyproxy | 2 | anthropic 2 |
| Gnupg | 2 | anthropic 2 |
| Gogs | 2 | openai 2 |
| Flowiseai | 1 | anthropic 1 |
| Vendor | 365 d CVEs ▼ | Δ 30d | Avg CVSS | Avg EPSS pct | KEV (365d) | KEV % | LLM-found | Trend (12 mo) |
|---|
Generated 16 October 2026 10:19 UTC . 1028 vendors with ≥25 CVEs in the last 24 months are listed.