How much of this security related stuff is open source? Models, training data, evaluation benchmarks?