Backed by new funding commitments from major technology players, open source security efforts are moving beyond threat identification toward practical solutions for defenders.