Independent

Rankings you cannot buy.

A podium of 50, not a census of 56. 50 firms have GitHub stats (52 accounts mapped). Featured does not move a row. GitHub refresh is a 15-minute queue — new listings jump the line. Country, city, and certification stack on every board.

ISO 2700147 ISO 90019 ISO 277014 SOC 239 PCI DSS4 FedRAMP13 CMMC3 HITRUST4 Cyber Essentials4 Cyber Essentials Plus2 CREST3 CSA STAR3 OSCP6 GPEN5 OSWE1 GXPN1 GCIH2 CISSP7 CISA2 CISM2 CCSP3 CREST CRT2 CREST CCT2

Public repositoriesTop 3 of 3

Public GitHub repositories on the company’s org. A proxy for how much engineering they publish, not for product quality.

01NCC Group github.com/nccgroup282
02Bishop Fox github.com/BishopFox100
03Orange Cyberdefense github.com/Orange-Cyberdefense38

Open issuesTop 3 of 3

Open issues across those public repos (GitHub counts some pull requests here). Volume, not virtue.

01NCC Group github.com/nccgroup967
02Bishop Fox github.com/BishopFox428
03Orange Cyberdefense github.com/Orange-Cyberdefense190

StarsTop 3 of 3

Sum of stargazers on public repos in the org. Popularity of code, not of the company.

01NCC Group github.com/nccgroup47,806
02Bishop Fox github.com/BishopFox38,647
03Orange Cyberdefense github.com/Orange-Cyberdefense17,369