This is part marketing, part doing God's work.

We're offering up to $5 million in depthfirst credits for critical open source projects to discover, validate, and remediate vulnerabilities before they can be exploited

Disclosure: I'm one of the founders