IBM, Red Hat and Palo Alto Networks Expand Project Lightwell to Help Organizations Respond to Software Vulnerabilities
| Source: IBM Newsroom AI
Tags: IBM, Red Hat, Palo Alto Networks, Project Lightwell, open source security, vulnerability management, enterprise security
IBM, Red Hat, and Palo Alto Networks are combining Project Lightwell's open-source vulnerability remediation with Palo Alto's virtual patching to create a shield-and-fix workflow that blocks exploits at the network layer while software patches are developed and tested.
Details
The three-company collaboration extends IBM's $5 billion Project Lightwell — focused on securing open-source software — with Palo Alto Networks' virtual patching capability. When a new vulnerability is discovered, Palo Alto's network-layer patch blocks exploit attempts immediately while IBM and Red Hat develop and validate a proper software fix. The partnership targets a specific problem: AI has compressed the time between vulnerability discovery and active exploitation from weeks to minutes, outpacing traditional patch cycles. The joint approach covers open source software, commercial applications, OT environments, and healthcare technologies. The collaboration connects existing platforms — Palo Alto's security stack and Red Hat's software toolchain — without creating a new standalone product. Enterprises need subscriptions to both vendors to benefit. IBM cites $5 billion in open-source security commitment as the foundation of Project Lightwell.