IBM and Red Hat today announced the commercial launch of Lightwell, delivering automated vulnerability remediation at scale through two offerings: Lightwell Network and Lightwell Clearinghouse Premier. Available now, Lightwell Network gives enterprises access to a launch catalog of 6,500+ remediated, digitally signed, and certified application-layer dependencies across major ecosystems, including Java and Python. Lightwell Clearinghouse Premier enters a limited-availability phase, serving as a trusted intermediary for secured patch embargoes and vertical threat coordination.
Lightwell Network launches with 6,500+ remediated dependencies across Java and Python ecosystems.
Lightwell Clearinghouse Premier enters limited availability for financial services, expanding to government, healthcare, and telecommunications.
Backed by $5B commitment and 20,000+ engineers from IBM and Red Hat.
AI-powered remediation engine combines frontier/open AI models with human engineering expertise.
Open source comprises up to 90% of enterprise codebases with average 581 vulnerabilities.
Ecosystem partners include AWS, AMD, F5, GitLab, Intel, JFrog, Microsoft, NVIDIA, Palo Alto Networks, ServiceNow.
Matt Hicks, President and CEO of Red Hat, stated: "Lightwell represents a fundamental structural shift in how we secure all enterprise software. By pairing automated remediation with our deep engineering heritage, we aim to deliver the trusted infrastructure required to consume open source reliably, sustainably, and at AI speeds."
Rob Thomas, Senior Vice President, Software & Chief Commercial Officer at IBM, added: "IBM and Red Hat are giving enterprises certified fixes they can pull straight into the systems they already run, with no retooling or disruption, backed by a growing network of technology and delivery partners. Making that possible takes scale most organizations don't have, a world-class team of engineers and AI systems working around the clock."
Lightwell Network, generally available now, provides immediate access to an active and growing library of content spanning latest to legacy libraries with high-value remediations. Members receive a continuous stream of digitally signed binaries, source code, and comprehensive compliance artifacts, including complete Software Bills of Materials (SBOMs), delivered directly into existing pipelines. Lightwell Clearinghouse Premier, entering limited-availability commercial onboarding, serves as a trusted intermediary for deep industry collaboration, advanced vertical threat coordination, and secured patch embargoes. Initial launch is limited to financial services, with plans to expand to government, healthcare, and telecommunications.
Lightwell leverages the high-throughput capability of a generative AI-powered remediation engine that is already live and operating at scale, combining frontier and open AI models with human engineering expertise. The ecosystem includes technology providers AWS, AMD, F5, GitLab, Intel, JFrog, Microsoft, NVIDIA, Palo Alto Networks, and ServiceNow, along with deployment partners Accenture, Atos, Cognizant, Deloitte, EY, HCLTech, Infosys, Kyndryl, LTM, NTT DATA, TCS, and Tech Mahindra.
Jerry Silva, Program Vice President for IDC Financial Insights, stated: "Heavily regulated industries such as financial services have the highest cost of compliance, meaning that they take security extremely seriously, especially in its use of open source software. The partnership bringing Red Hat and IBM together under the Lightwell banner to identify, triage, and remediate vulnerabilities will bolster the security and resiliency posture of these organizations globally."
About IBM
IBM is a leading provider of global hybrid cloud and AI, and consulting expertise. We help clients in more than 175 countries capitalize on insights from their data, streamline business processes, reduce costs and gain the competitive edge in their industries. Thousands of governments and corporate entities in critical infrastructure areas rely on IBM's hybrid cloud platform and Red Hat OpenShift.
About Red Hat
Red Hat is the open hybrid cloud technology leader, delivering a trusted, consistent and comprehensive foundation for transformative IT innovation and AI applications. Its portfolio of cloud, developer, AI, Linux, automation and application platform technologies enables any application, anywhere—from the datacenter to the edge.
TechIntelPro empowers B2B technology decision-makers with the latest industry trends, deep insights, leadership perspectives and actionable intelligence to drive both organizational and professional milestones, and thrive on the tech pulse.
