Businesses using OpenBSD lack specialized security expertise for thorough hardening.
Provide consulting service to audit configurations and patch historical vulnerabilities.
Charge per-system or per-audit engagements with ongoing monitoring options.
Start with basic configuration checklist before offering custom kernel work.
Risk: Very niche market with long sales cycles.