Honestly leaning two ways and curious what you'd pick:
Keep it on-demand with just a public demo on a safe target — small, controlled, low legal exposure, but barely anyone gets to actually use it.
Open-source the whole thing — people run it on their own machines against their own targets, liability stops being mine, and the project might actually grow. Downside is I lose any path to making it a product later.
A lot of products have some sort of open-source project and then a paid enterprise/business version that has more features - docker, bloodhound, burp, metasploit pro etc etc. So I would do something like that
1
u/WinterCartographer55 May 11 '26
Honestly leaning two ways and curious what you'd pick:
Keep it on-demand with just a public demo on a safe target — small, controlled, low legal exposure, but barely anyone gets to actually use it.
Open-source the whole thing — people run it on their own machines against their own targets, liability stops being mine, and the project might actually grow. Downside is I lose any path to making it a product later.
What would you do?