Specifically for the microservices demo app, we have used the open source Sock Shop app (from Weaveworks). This app is then integrated with security controls which are very specific to the needs of our developers and not open source in all cases.