IBM and Red Hat Commit $5 Billion to Project Lightwell for Open Source Security

IBM and Red Hat announced in a press release a $5 billion initiative called Project Lightwell aimed at securing open source software through a new AI based model. The project will establish a trusted enterprise clearinghouse to coordinate vulnerability detection and patch validation at scale.

Project Lightwell brings together more than 20,000 engineers working with advanced AI systems to identify and address vulnerabilities across open source ecosystems. The clearinghouse will act as a security coordination layer, validating and testing fixes across large volumes of open source code. Enterprises will be able to subscribe to these services to receive validated patches integrated directly into their software supply chains.

IBM and Red Hat are collaborating with early adopters including major financial institutions such as Bank of America, Citi, JPMorganChase, Mastercard, and Visa. Insights from these deployments will guide how vulnerabilities are identified, validated, and remediated across enterprise environments.

The companies stated that Project Lightwell builds on their existing open source expertise across technologies such as Linux, Java, Kubernetes, and Ansible. The initiative extends their engineering model beyond their own products to include independent libraries, AI frameworks, and data streaming platforms. The program supports coordinated upstream disclosures to strengthen the broader open source community while improving enterprise level security.