Depending on the FOSS you use, yes. Eg, https://tidelift.com/ .

Is it more convenient to find commercial/proprietary vendors instead?

Or to use warranty-less software and pay for your own staff to track changes and be ready to maintain the software yourself?