--- title: IBM and Red Hat launch Project Lightwell, a $5 billion... description: IBM and Red Hat have launched Project Lightwell, a $5 billion initiative deploying 20,000+ engineers and AI-assisted tools to accelerate open source... canonical: https://daily.dev/posts/ibm-and-red-hat-launch-project-lightwell-a-5-billion-open-source-security-clearinghouse-hd6pn5yrw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: IBM and Red Hat launch Project Lightwell, a $5 billion open source security clearinghouse | daily.dev og:description: IBM and Red Hat have launched Project Lightwell, a $5 billion initiative deploying 20,000+ engineers and AI-assisted tools to accelerate open source... og:url: https://daily.dev/posts/ibm-and-red-hat-launch-project-lightwell-a-5-billion-open-source-security-clearinghouse-hd6pn5yrw og:image: https://api.daily.dev/og/posts/HD6PN5yrW.png og:image:alt: IBM and Red Hat launch Project Lightwell, a $5 billion open source security clearinghouse og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # IBM and Red Hat launch Project Lightwell, a $5 billion open source security clearinghouse **[Collections](https://daily.dev/sources/collections)** · 2 min read · 1 upvotes · 0 comments ## Summary IBM and Red Hat have launched Project Lightwell, a $5 billion initiative deploying 20,000+ engineers and AI-assisted tools to accelerate open source vulnerability remediation for enterprises. Acting as a centralized clearinghouse, it backports validated security patches directly into enterprise software supply chains using configuration manifests like pom.xml, eliminating the need to wait for upstream maintainers or perform major upgrades. Launching with Java/Maven support and expanding to PyPI, npm, and Go, the service counts Bank of America, Goldman Sachs, JPMorgan Chase, and Visa among early adopters. The initiative is partly motivated by frontier AI models accelerating attacker capabilities, outpacing current patch cycles. A commercial subscription is expected within 30 days. ## Content IBM and Red Hat have announced Project Lightwell, a $5 billion initiative to help enterprises find and fix vulnerabilities in open source software faster than they currently can. The project deploys over 20,000 engineers alongside AI-assisted triage and patching tools to act as a centralized clearinghouse between vulnerability discovery and remediation. The core idea: enterprises shouldn't have to wait for upstream maintainers or perform major upgrades to get security fixes. Instead, Project Lightwell backports validated patches directly into enterprise software supply chains, working from configuration manifests like `pom.xml` rather than requiring source code access. The service launches with Java/Maven support and will expand to PyPI, npm, and Go. Fixes validated through the clearinghouse will also be contributed back to upstream open source projects. The initiative builds on earlier work in AI-assisted vulnerability research. Anthropic's Project Glasswing, which used the Claude Mythos model, reportedly identified over 23,000 security flaws across more than 1,000 open source projects. OpenAI's Trusted Access for Cyber program fed into the thinking here as well. The concern driving all of this is that frontier AI models are accelerating the pace at which attackers can find and exploit vulnerabilities — and the current patch cycle isn't keeping up. Companies can report vulnerabilities confidentially through the clearinghouse, receive tested fixes, and share patches with the broader community. Early adopters include Bank of America, Goldman Sachs, JPMorgan Chase, and Visa. The service is expected to launch as a commercial subscription within 30 days. For Red Hat, this extends its existing enterprise Linux security model to a much wider ecosystem of open source components, including libraries and AI frameworks — not just the OS packages it has traditionally maintained. ## Similar posts on daily.dev - [IBM and Red Hat Expand Lightwell with New Offerings to Build the Trust Infrastructure for AI-Era Open Source](https://daily.dev/posts/ibm-and-red-hat-expand-lightwell-with-new-offerings-to-build-the-trust-infrastructure-for-ai-era-ope-xmnogip8m) · SD Times · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#java](https://daily.dev/tags/java) [View this post on daily.dev](https://daily.dev/posts/ibm-and-red-hat-launch-project-lightwell-a-5-billion-open-source-security-clearinghouse-hd6pn5yrw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"IBM and Red Hat launch Project Lightwell, a $5 billion open source security clearinghouse","url":"https://daily.dev/posts/ibm-and-red-hat-launch-project-lightwell-a-5-billion-open-source-security-clearinghouse-hd6pn5yrw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/ibm-and-red-hat-launch-project-lightwell-a-5-billion-open-source-security-clearinghouse-hd6pn5yrw"},"datePublished":"2026-05-29T01:13:42.784Z","dateModified":"2026-05-29T02:07:35.886Z","description":"IBM and Red Hat have launched Project Lightwell, a $5 billion initiative deploying 20,000+ engineers and AI-assisted tools to accelerate open source...","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/ibm-and-red-hat-launch-project-lightwell-a-5-billion-open-source-security-clearinghouse-hd6pn5yrw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,open-source,java","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"IBM and Red Hat launch Project Lightwell, a $5 billion open source security clearinghouse"}]} ```