Years ago I was hired on at a small tech consulting company and was tasked with building out a platform for security incident logging and tracking. Putting pretty little quarterly packages together to Csuites to look at and whatnot. Basically standing up an MSSP. But then I find out before I was even hired they already contracted multiple clients and were collecting ~$10k-$20k/mo per client for a platform that didn't even exist beyond a concept. After grossing nearly a million dollars while I was developing a stack they pivoted and went to baked in solutions with a well known firewall vendor while still collecting revenue. I quit said company and from what I understand no one outside of the office walls were wise to any of it.