IBM and Red Hat to invest $5 billion in open-source supply chain security, launch 'Project Lightwell'

IBM and Red Hat are launching Project Lightwell, a $5 billion initiative to secure open-source software supply chains.

The plan uses AI and 20,000 engineers to find, test, and fix vulnerabilities through an enterprise clearinghouse.

The service will be sold by subscription, with early customers including major banks and payment firms.

The move matters because open-source software powers much of the enterprise and AI stack, making supply-chain security a growing priority.