Developed with leading global financial institutions and backed by a growing partner ecosystem, the new Lightwell offerings help enterprises mitigate open source risk without disruptive upgrades

Jul 8, 2026

RALEIGH, N.C. and ARMONK, N.Y. — July 8, 2026 — IBM (NYSE: IBM) and Red Hat today announced the commercial launch of Lightwell, delivering automated vulnerability remediation at scale through two offerings: Lightwell Network and Lightwell Clearinghouse Premier. Available now, Lightwell Network gives enterprises access to a launch catalog of 6,500+ remediated, digitally signed, and certified application-layer dependencies across major ecosystems, including Java and Python. Lightwell Clearinghouse Premier enters a limited-availability phase, serving as a trusted intermediary for secured patch embargoes and vertical threat coordination.

Today's launch builds on the $5 billion commitment to open source security that IBM and Red Hat announced in May 2026, backed by a global force of more than 20,000 engineers to oversee and scale Lightwell's advanced, AI-driven remediation capabilities. Lightwell’s rollout scales a model built on decades of trust, in which Red Hat has secured critical systems for thousands of customers, with millions of core product downloads and an immeasurable number of patches, bug fixes, and community contributions. It also reflects the rapid momentum and active collaboration with design partners from financial services industry leaders who view Lightwell as critical to solving this industry issue, recognizing that Red Hat and IBM are uniquely equipped to deliver the required open source engineering expertise and scale. Lightwell now extends that proven enterprise protection to an organization's open source software portfolio.