Fund communities around products like Security Onion. Champion portioning at least a part of budget allocated for support to the direct support of active open source contributors.

That’s the only way to break the consultancy chain - stop paying the wolves to guard the henhouse.