IBM and Red Hat launch Lightwell platform to automate open‑source security remediation

IBM and Red Hat have introduced Lightwell, a $5 billion initiative that uses AI and more than 20,000 engineers to automate vulnerability remediation across open‑source software. The service is offered through two components: Lightwell Network, a catalog now generally available with over 6,500 digitally signed, remediated dependencies and complete SBOMs; and Lightwell Clearinghouse Premier, a limited‑availability clearinghouse that coordinates secure patch embargoes, initially for the financial‑services sector.

The platform backs patches directly into the exact production versions organizations run, avoiding disruptive upgrades. Partners such as JFrog, AWS, AMD, GitLab, Microsoft and ServiceNow supply artifacts, while IT service firms including Deloitte, Accenture, Infosys and Kyndryl help with roll‑out.

“Lightwell represents a fundamental structural shift in how we secure all enterprise software,” said Matt Hicks, Red Hat CEO. The initiative aims to counter AI‑accelerated threats by delivering rapid, trustworthy fixes and plans to expand beyond finance into healthcare, government and telecom.