The tor project is a great example of how open source software (OSS) projects can work with sponsors. Trying to find more information on Qualys and PSW Groups sponsorship of openssl is a nightmare compared to tor project sponsors.[^1][^2] Without the tor project's emphasis on transparency and professionalism I doubt they could post numbers like this:

  Since meeting the revenue milestones of $1,253,241 in 2009,
  $1,574,119 in 2010 and $1,681,101 in 2011, Tor has reached new
  heights in 2012 with over $2 million in revenue (unaudited).[^3]

My comment should not be read as a criticism of OpenSSL, it should be interpreted as cause for optimism. The tor project has demonstrated that OSS projects can get sponsored to solve complicated security problems that are difficult to explain to the general public.

[^1]: List of sponsors/projects: https://trac.torproject.org/projects/tor/wiki/org/sponsors

[^2]: Example monthly report for SponsorF's project: https://lists.torproject.org/pipermail/tor-reports/2014-Marc...

[^3]: Tor Project Annual Report 2012, pg 8, https://www.torproject.org/about/findoc/2012-TorProject-Annu...