IBM and Red Hat launch Lightwell to protect open-source from AI attacks

Launch of Lightwell Service

IBM and Red Hat have announced the launch of Lightwell to enhance defense mechanisms for open-source code against AI-discovered security vulnerabilities. This initiative has transitioned from a project into two commercial offerings: Lightwell Network, available now, and Lightwell Clearinghouse Premier, which is currently onboarding selected users.

Goals and Capabilities

Lightwell aims to identify and fix vulnerabilities at an industrial scale with backing from a $5 billion initiative. The focus is on providing security for open-source components used across various enterprise software, not limited to IBM or Red Hat products.

AI-Powered Defense Strategy

The core of Lightwell's offerings is a high-throughput remediation engine that utilizes generative AI along with human engineering expertise. This technology enables the identification, validation, and resolution of security issues deeply embedded in software architectures.

Advantages of Automation

Lightwell seeks to reduce the need for enterprises to constantly chase upstream software updates by providing automated backporting of critical fixes to current production versions. This helps mitigate risks associated with major upgrades, such as lengthy regression testing and potential disruptions.