Yesterday (July 8), IBM and Red Hat commercially launched Lightwell Network and Lightwell Clearinghouse Premier, two services designed to automate open-source vulnerability management using AI-powered remediation and blockchain-enabled secure collaboration. Lightwell Network, now in general availability, distributes over 6,500 digitally signed software packages with Software Bills of Materials (SBOMs) for Java and Python environments. Lightwell Clearinghouse Premier entered limited availability, initially restricted to financial institutions for confidential vulnerability disclosure and coordinated patch management.
The companies plan to expand Lightwell Clearinghouse beyond financial services to government, healthcare, and telecommunications sectors. Technology partners on the initiative include AWS, GitLab, Intel, Microsoft, Nvidia, and Palo Alto Networks, with implementation support from firms such as Accenture, Deloitte, and Infosys. Security fixes developed through the platform will be contributed back to original open-source projects under an upstream-first model.