There are companies such as Piston Cloud and Nebula that offer commercialized versions of OSS stacks that have built in more security capabilities and support for audit/compliance into these stacks???and CSPs like AWS are maturing and realizing that security, monitoring, and compliance are important as they build more capability into their solutions.