Open-source security is a mess - IBM and Red Hat bet $5 billion and 20,000 engineers can fix it
IBM and Red Hat are launching Project Lightwell, an initiative aimed at improving open-source software security through AI. The companies are investing $5 billion and deploying 20,000 engineers to address vulnerabilities at an industrial scale. This project seeks to create a new operational model that connects enterprises with the open-source communities responsible for the software they use.
- ▪Project Lightwell is an AI-powered initiative to find and fix vulnerabilities in open-source software.
- ▪IBM and Red Hat are investing $5 billion and dedicating 20,000 engineers to this effort.
- ▪The initiative aims to create a clearinghouse for securing open-source components critical to enterprise IT.
Opening excerpt (first ~120 words) tap to expand
Business Home Business Enterprise Software Open-source security is a mess - IBM and Red Hat bet $5 billion and 20,000 engineers can fix it Project Lightwell is an AI‑powered initiative to find and fix vulnerabilities in open-source software at an industrial scale. Here's what we know so far. Written by Steven Vaughan-Nichols, Senior Contributing EditorSenior Contributing Editor May 29, 2026 at 9:26 a.m. PT PeterPhoto123 via ShutterstockFollow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways Lightwell is a huge effort to safeguard open-source software.IBM and Red Hat are investing in this massive security initiative. We don't yet know how this subscription-based service will work. AI is a mixed blessing for open-source software.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at ZDNet.