IBM and Red Hat Unveil Lightwell Vulnerability Remediation Service

IBM and Red Hat have launched Lightwell, a service designed to provide automated vulnerability remediation for open source software dependencies. The companies stated that this launch builds on their $5 billion commitment to open source security announced in May 2026.

The service uses an AI-powered remediation engine to identify, validate, and remediate vulnerabilities across software dependencies. It currently provides access to a catalog of 6,500 remediated, digitally signed application-layer dependencies across Java and Python ecosystems.

Lighwell Clearinghouse Premier is a limited-availability phase for the financial services industry, serving as an intermediary for secured patch embargoes and threat coordination. The companies plan to expand this service to government, healthcare, and telecommunications sectors in future phases.