IBM and Red Hat want to become the ‘security clearinghouse’ for open source applications in the enterprise
Fri May 29 2026
Open Source
Patch Management
Security Management
Vulnerability
www.csoonline.com
Open source code is everywhere in the enterprise; it’s estimated that upwards of 90% of Fortune 500 companies have it in their software supply chains. But open source code is notoriously rife with vulnerabilities, and identifying and patching those bugs can be an endless battle for security teams.
IBM and Red Hat are betting that a new initiative, Project Lightwell, can help accelerate this process.
Announced today, the project will commit $5 billion and 20,000 IBM and Red Hat engineers to build a new ‘enterprise clearinghouse’ to accelerate discovery and remediation of vulnerabilities in open source software. The companies say the clearinghouse will serve as an AI-powered “security coordin...