IBM, Red Hat Pledge $5B for Open Source Security

IBM and Red Hat have introduced project Lightwell, a $5 billion initiative aimed at enhancing the security of open source software utilized by businesses. This project will leverage new AI capabilities along with the expertise of a team of over 20,000 engineers. Lightwell is anticipated to revolutionize the utilization of open source software in enterprises, addressing processes ranging from the development of open projects to maintaining production implementations.

Within the framework of the project, a clearinghouse will be established to oversee the resolution of security-related issues, utilizing AI to validate security and test fixes in open code bases. This dedicated division will enable businesses to engage engineers from IBM and Red Hat to address critical security issues, while ensuring the integration of fixes into upstream projects.

Lightwell will function as a hub where enterprises can report identified issues, remediate vulnerabilities, receive validated patches applicable to Red Hat products and community-developed code, and collaborate in disseminating fixes to upstream projects. IBM and Red Hat will mobilize their engineers and AI resources to support the maintenance of upstream projects and corporate environments, analyzing identified vulnerabilities, creating patches, and facilitating the adoption of fixes considering intricate dependency structures.

/Reports, release notes, official announcements.