IBM and subsidiary Red Hat launched Lightwell, a commercial platform designed to secure the open-source software supply chain. The offering includes Lightwell Network, which provides a catalog of thousands of certified application dependencies. A second service, Lightwell Clearinghouse Premier, coordinates secured patch embargoes and threat intelligence.
This initiative stems from a $5 billion commitment to open-source security announced in May 2026. The platform utilizes a generative AI-powered engine to automate vulnerability remediation at scale.
IBM Security Services is rolling out new capabilities to help enterprises integrate and operationalize the platform. These tools aim to improve overall cyber resilience and response to software supply chain risks.