Counterpoint: GSA products sales aren't so bad, and sometimes services are incidental to product sales. If I were a lock maker, I'd sure want to be Kaba-Mas o

Counterpoint: GSA products sales aren't so bad, and sometimes services are incidental to product sales. If I were a lock maker, I'd sure want to be Kaba-Mas or S&G with a decent amount of government sales. If you have to provide some services, it's not horrible -- it's a $200-400k/yr living for a few consultants if you're in the right space, and generates nice revenue for the company, without taking over the focus. If you're an independent contractor and end up subcontracting to a product company, you can make really good money filling this role. If you don't have to do the "get the product sold" phase, and are purely subcontracted to the the implementation/support, it's actually not bad, and not very different from enterprise clients in general. There is the problem of single-client-all-revenue, and some slightly odd work rules, but enterprise often has that. I share your moral concerns about vuln research/etc. for the government, but I have no problem with defensive tech for them, or for non-security tech.