Home / Technology / IBM & Red Hat Launch $5B Open-Source Fix
IBM & Red Hat Launch $5B Open-Source Fix
29 May
Summary
- AI will help fix open-source software vulnerabilities at scale.
- IBM and Red Hat are investing $5 billion in the initiative.
- Project Lightwell aims to bridge enterprise needs and community development.
The sheer volume of security vulnerability reports is overwhelming open-source software maintainers, a problem IBM and Red Hat are now addressing with Project Lightwell. This ambitious initiative will leverage artificial intelligence to discover and fix security flaws in open-source software at an industrial scale.
IBM and Red Hat are committing $5 billion over the coming years to establish a global engineering organization and develop AI tools for this crucial task. Project Lightwell is designed to act as a trusted intermediary, connecting businesses that rely on open-source components with the developers who build them. The initiative will use AI to identify vulnerabilities and then work with upstream maintainers to integrate fixes.
Initially focusing on the Maven/Java ecosystem, Lightwell plans to expand to other popular codebases like PyPI and npm. The service will be offered through commercial subscriptions, providing enterprises with validated, secure patches that can be integrated into their existing software supply chains. This approach aims to transform the manual process of fixing bugs into a high-throughput remediation pipeline that respects open development principles.
