IBM and Red Hat invest $5 billion in the future of open source

IBM and Red Hat launched Project Lightwell, a $5 billion open-source security initiative.

The program combines AI-assisted vulnerability analysis, a secure coordination layer, and more than 20,000 engineers to validate and distribute patches.

Enterprises can submit sensitive security issues, get production-ready fixes, and share those patches back upstream.

The effort is being piloted with major banks and aligns with broader supply-chain compliance efforts, including the EU Cyber Resilience Act.