Curated directory of Web3 security firms offering opsec, infrastructure, and web2 security services.
- Overview
- Stack
- Running Locally
- List Your Company with AI
- Adding a Company or Tool Manually
- Running Tests
- Project Structure
- Contributors
- License
The Web3 OpSec Directory is an open, community-maintained registry of security firms that serve the Web3 ecosystem - covering smart contract auditing, operational security, infrastructure hardening, and web2 security services. Vetted and maintained by Auditware.
- Frontend - Next.js 15 (Turbopack)
- Backend - Bun + Hono
- Data - JSON files in
data/(dev) / SQLite (prod)
Requirements: Node.js 20+, Bun, PM2
make install-deps
make dev- Frontend: http://localhost:3000
- Backend: http://localhost:3001
The fastest way to get listed is to send listing-prompt.md to your AI of choice - attach the file, share the raw URL, or tell it to read the file directly.
The AI will:
- Ask for your GitHub and Twitter/X handles
- Automatically research your company from those profiles
- Pre-fill as many fields as it can find
- Ask you only for what's missing
- Help you open a pull request
See CONTRIBUTING.md.
cd backend && bun testdata/
companies/ # one JSON file per company
tools/ # one JSON file per tool
*.schema.json # JSON schemas for validation
frontend/ # Next.js app
backend/ # Bun/Hono API
scripts/ # data validation script
forefy |
avigaildanesh |
📢 Contributing to W3OS
W3OS is an open standard developed collaboratively by the Web3 security community. Contributions by anyone are welcome.
- 📖 Read the Contributing Guide for detailed information on how to propose changes, add companies, and improve existing content
- 💬 Join the Telegram Discussion Group to participate in ongoing collaboration and connect with other contributors
Help build the comprehensive operational security standard for Web3 organizations.
MIT