IBM and Red Hat launch $5 B Project Lightwell to secure open‑source software supply chains

IBM and its Red Hat subsidiary announced Project Lightwell, a $5 billion initiative that combines frontier AI capabilities with a global team of more than 20,000 engineers. The program will create a trusted enterprise clearinghouse that coordinates the discovery, validation, testing and back‑porting of security patches for open‑source code used by businesses. Services will be sold through commercial subscriptions, allowing enterprises to integrate vetted fixes directly into their software supply chains.

Early deployments involve a group of leading financial institutions, including Bank of America, Citi, Goldman Sachs, JPMorgan Chase, Mastercard, Morgan Stanley, Royal Bank of Canada, State Street, Visa and Wells Fargo. IBM CEO Arvind Krishna said, “Open source is the backbone of today’s digital economy and the foundation of modern AI… Project Lightwell is about strengthening trust in the systems that power business, government and society.” The effort aims to protect the open‑source components that underpin the majority of Fortune 500 enterprises against the accelerating threat of AI‑driven vulnerability discovery.