Vendor Scorecards
14,850 CVEs across 310 vendors (each with 5+ CVEs)
| Vendor | Grade | Score | CVEs | Critical Gaps | Patch Rate | Avg Response |
|---|---|---|---|---|---|---|
| Free Pascal | F | 25 | 38 | 3 | 0% | - |
| Debian Project | F | 15 | 36 | 5 | 17% | 4831 days |
| HPE | F | 60 | 36 | 1 | 17% | - |
| FreeBSD | F | 11 | 35 | 4 | 6% | 10747 days |
| GitLab | C | 95 | 34 | 0 | 94% | 40 days |
| Linksys | F | 49 | 34 | 0 | 15% | - |
| Mozilla Foundation | D | 72 | 34 | 1 | 74% | 109 days |
| The Linux Project | A | 97 | 33 | 0 | 94% | - |
| Android Open Source Project (AOSP) | A | 92 | 32 | 1 | 94% | - |
| Samsung Electronics Co., Ltd. | C | 68 | 32 | 0 | 50% | 48 days |