--- title: IBM and Red Hat Launch Lightwell Catalog to Automate... description: IBM and Red Hat have launched the Lightwell Network, a generally available catalog of over 6,500 application-layer dependencies powering an automated... canonical: https://daily.dev/posts/ibm-and-red-hat-launch-lightwell-catalog-to-automate-remediation-3zr1ruijc twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: IBM and Red Hat Launch Lightwell Catalog to Automate Remediation | daily.dev og:description: IBM and Red Hat have launched the Lightwell Network, a generally available catalog of over 6,500 application-layer dependencies powering an automated... og:url: https://daily.dev/posts/ibm-and-red-hat-launch-lightwell-catalog-to-automate-remediation-3zr1ruijc og:image: https://api.daily.dev/og/posts/3Zr1ruIjC.png og:image:alt: IBM and Red Hat Launch Lightwell Catalog to Automate Remediation og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # IBM and Red Hat Launch Lightwell Catalog to Automate Remediation **[DevOps.com](https://daily.dev/sources/devops)** · 4 min read · 0 upvotes · 0 comments ## Summary IBM and Red Hat have launched the Lightwell Network, a generally available catalog of over 6,500 application-layer dependencies powering an automated vulnerability remediation service. The platform delivers digitally signed binaries, source code, and SBOMs to subscribers, while the Lightwell Clearinghouse Premier service enables teams to access validated patches and coordinate fixes. Backed by a $5 billion commitment and 20,000+ engineers, the initiative targets decades of technical debt now being rapidly exposed by AI-driven exploit discovery. Key technology partners include AWS, Microsoft, GitLab, NVIDIA, and major IT services firms. The broader concern is that AI models are shrinking the window between vulnerability discovery and exploitation from months to hours, threatening open source sustainability if maintainers cannot keep pace. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the Lightwell Network from IBM and Red Hat? It is a catalog of more than 6,500 application-layer dependencies that powers an automated vulnerability remediation service, now generally available. Subscribing organizations receive a continuous stream of digitally signed binaries, source code, and compliance artifacts including SBOMs, while the remediation engine backports critical fixes to long-lived production software versions to speed up patching. _Teams tracking open source supply chain security tools can follow releases like this on daily.dev._ ### What is Lightwell Clearinghouse Premier and is it generally available? Lightwell Clearinghouse Premier is a service letting application development teams access validated patches and coordinate remediation efforts; unlike the Lightwell Network catalog, it is currently available only to a limited number of organizations rather than generally available. It complements the broader Lightwell initiative backed by a $5 billion IBM and Red Hat pledge and over 20,000 engineers. _daily.dev helps engineers evaluating emerging remediation tooling keep pace with staged rollouts like this._ ### How old was the oldest vulnerability remediated through the Lightwell initiative? IBM and Red Hat remediated a vulnerability dating back to 2001 involving a legacy Apache Debian package still found in enterprise environments more than two decades later, illustrating the scale of technical debt the Lightwell initiative targets across older, long-lived production software. _Engineers dealing with long-lived legacy dependencies can track efforts like this on daily.dev._ ## Similar posts on daily.dev - [IBM and Red Hat Expand Lightwell with New Offerings to Build the Trust Infrastructure for AI-Era Open Source](https://daily.dev/posts/ibm-and-red-hat-expand-lightwell-with-new-offerings-to-build-the-trust-infrastructure-for-ai-era-ope-xmnogip8m) · SD Times · 0 upvotes · 0 comments - [IBM and Red Hat Expand Lightwell to Strengthen Trust and Governance for AI-Era Open Source](https://daily.dev/posts/ibm-and-red-hat-expand-lightwell-to-strengthen-trust-and-governance-for-ai-era-open-source-8xuuh89h3) · InfoQ · 0 upvotes · 0 comments - [Lightwell project filters out 400 Java library vulnerabilities](https://daily.dev/posts/lightwell-project-filters-out-400-java-library-vulnerabilities-xcl4nw1bw) · InfoWorld · 2 upvotes · 0 comments --- Tags: [#ibm](https://daily.dev/tags/ibm), [#red-hat](https://daily.dev/tags/red-hat), [#sbom](https://daily.dev/tags/sbom) [View this post on daily.dev](https://daily.dev/posts/ibm-and-red-hat-launch-lightwell-catalog-to-automate-remediation-3zr1ruijc) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"IBM and Red Hat Launch Lightwell Catalog to Automate Remediation","url":"https://daily.dev/posts/ibm-and-red-hat-launch-lightwell-catalog-to-automate-remediation-3zr1ruijc","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/ibm-and-red-hat-launch-lightwell-catalog-to-automate-remediation-3zr1ruijc"},"datePublished":"2026-07-09T20:56:49.474Z","dateModified":"2026-09-13T21:40:48.725Z","description":"IBM and Red Hat have launched the Lightwell Network, a generally available catalog of over 6,500 application-layer dependencies powering an automated...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/50cf836cde655d071d115ceb853d6423?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/50cf836cde655d071d115ceb853d6423?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"DevOps.com","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"DevOps.com","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/db8f2265cff0416c878c6e7e92bb8715","url":"https://daily.dev/sources/devops"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/ibm-and-red-hat-launch-lightwell-catalog-to-automate-remediation-3zr1ruijc","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ibm,red-hat,sbom","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"DevOps.com","item":"https://daily.dev/sources/devops"},{"@type":"ListItem","position":3,"name":"IBM and Red Hat Launch Lightwell Catalog to Automate Remediation"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/ibm-and-red-hat-launch-lightwell-catalog-to-automate-remediation-3zr1ruijc#faq","mainEntity":[{"@type":"Question","name":"What is the Lightwell Network from IBM and Red Hat?","acceptedAnswer":{"@type":"Answer","text":"It is a catalog of more than 6,500 application-layer dependencies that powers an automated vulnerability remediation service, now generally available. Subscribing organizations receive a continuous stream of digitally signed binaries, source code, and compliance artifacts including SBOMs, while the remediation engine backports critical fixes to long-lived production software versions to speed up patching. Teams tracking open source supply chain security tools can follow releases like this on daily.dev."}},{"@type":"Question","name":"What is Lightwell Clearinghouse Premier and is it generally available?","acceptedAnswer":{"@type":"Answer","text":"Lightwell Clearinghouse Premier is a service letting application development teams access validated patches and coordinate remediation efforts; unlike the Lightwell Network catalog, it is currently available only to a limited number of organizations rather than generally available. It complements the broader Lightwell initiative backed by a $5 billion IBM and Red Hat pledge and over 20,000 engineers. daily.dev helps engineers evaluating emerging remediation tooling keep pace with staged rollouts like this."}},{"@type":"Question","name":"How old was the oldest vulnerability remediated through the Lightwell initiative?","acceptedAnswer":{"@type":"Answer","text":"IBM and Red Hat remediated a vulnerability dating back to 2001 involving a legacy Apache Debian package still found in enterprise environments more than two decades later, illustrating the scale of technical debt the Lightwell initiative targets across older, long-lived production software. Engineers dealing with long-lived legacy dependencies can track efforts like this on daily.dev."}}]} ```