IBM and Red Hat launch Lightwell AI-driven open source security platform

IBM and Red Hat have introduced Lightwell, a new AI‑powered platform that automates vulnerability remediation for open‑source software. The service includes Lightwell Network, offering a catalog of more than 6,500 digitally signed and certified dependencies for Java, Python and other ecosystems, and Lightwell Clearinghouse Premier, a limited‑availability trusted intermediary for coordinated patch embargoes and threat‑sharing. The launch follows a $5 billion commitment to open‑source security and leverages a global team of over 20,000 engineers and generative AI models to backport fixes directly to the versions of software that enterprises run in production.

Deloitte is joining the initiative to extend Lightwell’s capabilities across regulated software‑supply chains. The collaboration will provide continuous visibility of first‑party, open‑source and third‑party code, contextual prioritisation of threats, machine‑speed remediation, and ecosystem‑wide compliance reporting. Together, the three firms aim to protect critical systems from rapidly emerging AI‑generated exploits without forcing disruptive upgrades, delivering certified patches that can be integrated directly into existing workflows.