Vendor Scorecards
14,769 CVEs across 306 vendors (each with 5+ CVEs)
| Vendor | Grade | Score | CVEs | Critical Gaps | Patch Rate | Avg Response |
|---|---|---|---|---|---|---|
| aEnrich | D | 34 | 2,637 | 46 | 36% | 149 days |
| WordPress.org | D | 32 | 1,090 | 8 | 44% | 104 days |
| Apache | F | 13 | 1,028 | 20 | 13% | 521 days |
| Unknown | F | 30 | 874 | 2 | 0% | - |
| Microsoft | F | 25 | 644 | 35 | 28% | 1052 days |
| Linux | C | 75 | 629 | 4 | 96% | 34 days |
| GNU Project | F | 7 | 494 | 13 | 2% | 10688 days |
| DynamiApps | D | 45 | 392 | 2 | 47% | 100 days |
| IBM | F | 20 | 322 | 38 | 23% | 1733 days |
| Automattic | C | 67 | 273 | 0 | 47% | 40 days |