<commit_before>---
layout: default
title: Open Source development Model for PT companies
type: draft
---

### Open Source development Model for PT companies

* supported by regular purchases from Government and Companies
* create market for hacking/pentest/code-review services, based on requirement that all code created and used in PT needs to be tested
  * define open recommended price lists for services (€50, €100 per scan)
  * companies with better, faster, more quality services can change more (based on supply and demand)
  * allow creation of 'individual quality' brands (where individual talent is tracked and work delivered shown). This would allow market economics to reward the best (due to scarcity)
  * paid by Gov depending on size of company or volume of sales (this shouldn't be seen as a cost by the Gov, since it is an investment into the company that is providing the services)
    * there should also be a limit (or preference) for the size of the company that is awarded the contract
      * uber model can be used to determine who gets it (namely if the brief and deliverables is standardised)
      * this would promote the creation of small companies to provide these services (for examlpe on every city)
* For example in a pentest service example:
  * all data and artefacts created (including all network traffic generated) to be published on git repos (for storage, versioning and version control)
  * the publishing of this data will allow independent verification of the work performed and delivered by those companies
  * allows the appearance of next-generation companies (with more senior and knowledgeable staff and better services) which can provide better workflows (for example the management of hundreds of scans and the consolidation of reports)

* it is key that we find business models that allow the creation of companies (or individuals) that are based on Open Source software or Creative Commons content
  * at the moment it is very hard to create such companies since there the main revenue (and investment) sources are based on
    a) proprietary software
    b) copyrighted content (with licenses that don't allow sharing)
  * I have many good friends that are working on highly innovative companies which would love to do it under and Open Source model, but have no idea how to do it and generated enough funds to support them and the employees needed.
    * Open source software, unless supported by a massive community, needs as a many employees as a normal software development company. The question is where is the money going to come from?
      * a key part of this problem is that companies and Governments at the moment don't have the practice (and foresight) to pay for the Open Source tools that they use (which is crazy since those entities are now putting key parts of their infrastructure in very poorly maintained, supported and even reviewed; pieces of software)<commit_msg>Update open-source-developement-model.md<commit_after>---
layout: default
title: Open Source development Model for PT companies
type: draft
---

### Open Source development model for Portuguese companies

This model should receive support by means of regular purchases from the Portuguese Government and business. 

The model will create a market for hacking, pentest, and code-review services, based on the requirement that all code created and used in Portugal needs to be tested. 

The model should have defined, open, recommended, price lists for services (e.g. €50 or €100 per scan).
Companies with better, faster, higher quality services will be able to charge more, based on supply and demand.
'Individual quality' brands (where individual talent is tracked and work delivered shown) will be created, that will allow market economics to reward the best.
The Government will pay, depending on size of company or volume of sales. The Government should not see this as a cost, but as an investment in the company that provides the services.

There should be a limit (or preference) for the size of the company that gets any contract.
The Uber model could be used to determine who wins contracts (if the brief and deliverables are standardized).
This would ancourage the creation of small companies to provide these services, especially in cities.

In a pentest service example, all data and artefacts created, including all network traffic generated, will be published on Git repos. This guarantees storage, versioning and version control.

Publishing this data will allow independent verification of the work performed and delivered by those companies
This also encourages the growth of next-generation companies (with more experienced staff and better services) which can provide better workflows (for example the management of hundreds of scans and the consolidation of reports)

It is essential that we find business models that allow the creation of companies (or individuals) based on Open Source software or Creative Commons content. At the moment, the main revenue and investment sources of most companies are based on
    a) proprietary software
    b) copyrighted content (with licenses that do not allow sharing)

I have many good friends who work in highly innovative companies, who would love to work under an Open Source model, but have no idea how to do generate enough funds to support the company and its employees.
Open Source software, unless supported by a large community, needs as many employees as a normal software development company. The question is, where does the money come from?
A key part of this problem is that companies and governments don't have the practice (or foresight) to pay for the Open Source tools they use. This makes no sense, as those entities currently put key parts of their infrastructure in poorly maintained, supported and inadequately reviewed pieces of software.
{'fraction_non_alphanumeric': 0.031911262798634814, 'fraction_numerical': 0.0017064846416382253, 'mean_word_length': 4.576593720266413, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '674153', 'n_tokens_mistral': 1258, 'n_tokens_neox': 1205, 'n_words': 911}