Zscaler, Inc., the cybersecurity platform for the AI era, has announced a collaboration with IBM and Red Hat to help organizations protect private applications during the period between vulnerability disclosure and patch deployment. The collaboration combines Zscaler Autonomous Application Shield, delivered through the Zscaler Zero Trust Exchange™ security platform, with Lightwell from IBM and Red Hat to deliver adaptive, application-specific protection with validated software remediation in a single coordinated response.
Quick Intel
-
Zscaler collaborates with IBM and Red Hat to protect private applications.
-
The collaboration combines Zscaler Autonomous Application Shield with Lightwell.
-
Mandiant's M-Trends 2026 report found mean time to exploit has fallen below zero.
-
The collaboration addresses exposure discovery and preemptive protection.
-
Autonomous Application Shield is available through an Early Access Program.
-
Zscaler's Zero Trust Exchange is distributed across 200+ public data centers.
The economics of exploitation have shifted. Capabilities that once required elite skills and weeks of manual effort are now widely available, and attackers are weaponizing newly disclosed vulnerabilities faster than enterprise patch cycles can respond. According to Mandiant's M-Trends 2026 report, the mean time to exploit a vulnerability has fallen below zero, meaning vulnerabilities are increasingly exploited before a public patch exists. Patching remains necessary, but on its own it can no longer keep pace. Organizations need protection that can be applied at machine speed while remediation is prepared and deployed.
A Protection-First Operating Model
This collaboration extends Zscaler's protection-first operating model for private applications, which assumes a remediation window will always exist and builds resilience around it: hide applications with Zscaler Private Access™ (ZPA™) so they are harder to discover and target, segment access with Autonomous User-to-App Segmentation so a foothold does not become broad reachability, and shield reachable applications with Autonomous Application Shield so exploit attempts are stopped inline while the root cause is fixed. By uniting Zscaler Autonomous App Shield with Lightwell, the collaboration provides customers a coordinated path from immediate protection to durable fix.
Operating through the Zero Trust Exchange, Zscaler App Connectors continuously perform safe assessments of each private application's exposure points and vulnerabilities. The Zscaler cloud individually evaluates each application, ensuring only necessary protections are applied. When a new vulnerability emerges, adaptive protections can be applied inline and in real time, without waiting for a patch. Through this collaboration, Lightwell helps Zscaler defend its customers from potential cyber threats, with Zscaler blocking exploit attempts immediately at the network level. Lightwell then provides validated remediations for affected open source software, enabling customers to fix the underlying flaw at the source.
Executive Perspectives
"As attackers weaponize newly disclosed vulnerabilities faster than enterprises can respond, organizations need a way to protect private applications immediately while fixes are being prepared and deployed," said Joby Menon, Senior Vice President of Product Management at Zscaler. "Our collaboration with IBM and Red Hat brings together inline, application-specific protection and validated remediation to help customers reduce risk during that gap."
Integrated Capabilities Across the Application Security Lifecycle
Through this collaboration, Zscaler, IBM, and Red Hat will deliver integrated capabilities across the application security lifecycle, addressing critical needs including:
Exposure Discovery: Providing a current understanding of a private application's actual risk profile, updated as fast as applications change, rather than relying on periodic scans.
Preemptive, Application-Specific Protection: Bridging the gap between vulnerability and patching. Applying only the protections a given application needs during the gap between disclosure and patching, reducing exposure while remediation is underway and avoiding one-size-fits-all policy noise.
Machine-Speed Response: Deploying protections inline and in real time when a new vulnerability emerges, informed by global threat intelligence from across Zscaler's worldwide customer base.
Validated Source-Level Remediation: Delivering tested software fixes through Lightwell so organizations can resolve the underlying vulnerability, with advisory and deployment support to prioritize and validate protections across complex environments.
"AI is shrinking the window between vulnerability discovery and vulnerability exploitation. A window that was months or weeks is now hours and minutes," said Gunnar Hellekson, vice president and general manager, Lightwell, Red Hat. "Lightwell helps keep open source safe by patching and fixing these vulnerabilities at machine speed. Collaborating with partners like Zscaler brings Lightwell's capabilities to the forefront of enterprise networks, mitigating potential vulnerabilities head-on while patches are applied to critical systems."
About Zscaler
Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange™ platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world's largest in-line cloud security platform.
