IBM and Red Hat Commit $5 Billion to Secure Open Source Supply Chains Under “Project Lightwell”

IBM and Red Hat are launching Project Lightwell, a five billion dollar initiative backed by over 20,000 engineers to systematically secure open source software across enterprise supply chains. The project will use artificial intelligence to identify and validate vulnerabilities at scale, creating an "enterprise clearinghouse" that will deliver vetted patches and security updates to businesses through commercial subscriptions. Major financial institutions including Bank of America, JPMorganChase, and Goldman Sachs are among the initial participants, reflecting widespread concern about open source security as companies increasingly rely on thousands of open source packages in their infrastructure.