IBM, Red Hat Launch Project Lightwell

IBM and its subsidiary OpenShift have launched Project Lightwell, a $5 billion initiative aimed at securing open-source software supply chains. This project establishes a trusted enterprise clearinghouse that leverages advanced AI capabilities and a global team of over 20,000 engineers to identify, validate, and remediate vulnerabilities in open-source code. The service will be offered through commercial subscriptions, allowing enterprises to integrate secure patches directly into their software supply chains. Project Lightwell addresses the increasing reliance of Fortune 500 companies on open-source software and the accelerating pace of AI-driven vulnerability discovery. Early adopters include major financial institutions such as Bank of America, BNY, Citigroup, Goldman Sachs, JPMorgan Chase, Mastercard, Morgan Stanley, Royal Bank of Canada, State Street Corporation, Visa Inc., and Wells Fargo, whose insights will help refine the project's approach. IBM Chairman and CEO Arvind Krishna highlighted the project's role in defining a new industry model for securing open-source software at its source and across the entire supply chain, strengthening trust in systems powering business, government, and society. The initiative also incorporates learnings from Anthropic's Project Glasswing and OpenAI's Trust Access for Cyber.