Vendor Scorecards

Security response metrics for 197 vendors with 5+ CVEs.

Vendor	Grade	Score	CVEs	Patch Rate	Avg Response
aEnrich	F	50	1,568(42 gaps)	4.0%	-
Apache	F	45	949(21 gaps)	0.2%	-
Unknown	F	65	874(2 gaps)	0.0%	-
WordPress.org	F	51	616(9 gaps)	1.3%	-
GNU Project	F	51	483(12 gaps)	0.2%	-
Microsoft	F	22	443(39 gaps)	2.9%	335 days
Linux	B	70	311(5 gaps)	82.6%	-
IBM	F	52	302(38 gaps)	6.3%	-
Not specified	F	60	258(3 gaps)	0.0%	-
unknown	F	70	227(1 gaps)	0.0%	-
OpenSSL Project	F	65	215(2 gaps)	0.0%	-
Red Hat	F	51	158(15 gaps)	0.6%	-
Automattic	F	72	157(1 gaps)	4.5%	-
DynamiApps	F	50	134(5 gaps)	0.0%	-
Adobe	F	75	108	0.0%	-
Apple	F	66	107(2 gaps)	0.0%	-
Sun Microsystems	F	56	82(21 gaps)	22.0%	-
Linux Foundation	C	77	72(3 gaps)	66.7%	-
PHP Group	F	65	70(2 gaps)	0.0%	-
PHPMailer Project	F	50	69(7 gaps)	0.0%	-
OpenSSL	F	60	65(3 gaps)	0.0%	-
Cisco	D	22	64(7 gaps)	4.7%	160 days
Oracle	F	55	63(4 gaps)	0.0%	-
HP	F	52	61(5 gaps)	4.9%	-
Liferay	F	76	60	0.0%	-
None specified	F	75	55	0.0%	-
Google	F	72	50(1 gaps)	4.0%	-
Tenda	F	75	49	0.0%	-
Automattic (WordPress)	F	70	45(1 gaps)	0.0%	-
code-projects	F	75	45	0.0%	-
Campcodes	F	75	43	0.0%	-
Free Pascal Team	F	75	43	0.0%	-
Not specified in advisory	F	60	43(3 gaps)	0.0%	-
FreeRTOS Foundation	F	75	42	0.0%	-
Intel	F	76	42	2.4%	-
QNAP	F	75	42	0.0%	-
Not specified in the advisory	F	50	40(10 gaps)	0.0%	-
OpenSSH	F	78	40	10.0%	-
Fortinet	B	88	39(2 gaps)	89.7%	-
Free Pascal	F	60	38(3 gaps)	0.0%	-
SourceCodester	F	75	38	0.0%	-
MediaTek	F	75	37	0.0%	-
itsourcecode	F	75	37	0.0%	-
FreeBSD	F	57	35(4 gaps)	2.9%	-
D-Link	F	70	33(1 gaps)	0.0%	-
Debian Project	F	51	33(5 gaps)	3.0%	-
Huawei	F	75	33	0.0%	-
NVIDIA	F	75	33	0.0%	-
Free Pascal Compiler Team	F	70	31(1 gaps)	0.0%	-
SGI	F	52	30(10 gaps)	6.7%	-