Vendor Scorecards
14,879 CVEs across 310 vendors (each with 5+ CVEs)
| Vendor | Grade | Score | CVEs | Critical Gaps | Patch Rate | Avg Response |
|---|---|---|---|---|---|---|
| DB Electronica Telecomunicazioni S.p.A. | F | 52 | 10 | 0 | 10% | - |
| GNU Compiler Collection (GCC) | F | 40 | 10 | 0 | 0% | - |
| Jenkins Software Foundation | C | 52 | 10 | 0 | 30% | 54 days |
| None (open-source) | A | 69 | 10 | 0 | 40% | 6 days |
| Not specified (unknown vendor) | C | 42 | 10 | 1 | 10% | 53 days |
| OpenWRT Project | F | 35 | 10 | 1 | 0% | - |
| PHP | D | 64 | 10 | 0 | 40% | - |
| Premmerce | F | 46 | 10 | 0 | 10% | - |
| Rust Foundation | F | 40 | 10 | 0 | 0% | - |
| Samsung Semiconductor Global | F | 46 | 10 | 0 | 10% | - |