Strengthening the open source supply chain with Red Hat partners

Earlier today, Red Hat and IBM unveiled two commercial offerings of Lightwell to deliver automated vulnerability remediation at scale. However, true security requires a movement—a connected network of industry leaders and experts working in lockstep. Vulnerabilities in the open source supply chain affect the entire ecosystem, regardless of where they originate.

That is why the launch of Lightwell is intrinsically tied to our global partner ecosystem. With this release, we are establishing a new standard for industry collaboration.

A unified front for open source security

Modern innovation is built on open source software. But as the complexity of the software supply chain grows, so do the vulnerabilities that threaten its integrity. Lightwell is built on the belief that securing open source is a mission best accomplished together. By tapping into Red Hat’s robust partner ecosystem to fuel and extend the reach of Lightwell, we can improve vulnerability intelligence, increase supply chain transparency, accelerate remediation, and establish consistent security practices.

Through this ecosystem strategy, Red Hat is creating a systemic approach to security across the stack. From global systems integrators to innovative independent software vendors (ISVs), Red Hat’s partner ecosystem is rallying behind Lightwell to provide the backporting and patching consistency that enterprises require.

Already, technology and cloud providers like Amazon Web Services (AWS), AMD, F5, GitLab, Intel, JFrog, Microsoft, NVIDIA, Palo Alto Networks, and ServiceNow are working with Red Hat to build remediation directly into the application layers and infrastructure where customers operate. We’re also collaborating with key integration and services partners like Accenture, Atos, Cognizant, Deloitte, EY cyber and risk consulting teams, HCLTech, IBM Consulting, Infosys, Kyndryl, LTM, NTT DATA, Tata Consultancy Services (TCS) and Tech Mahindra. to provide the critical expertise and change management needed to navigate complex, regulated security environments. 

How you can engage Lightwell

Whether you are a leading global firm or an emerging technology provider, we designed Lightwell to be open and collaborative. Lightwell is driven by a spectrum of collaboration—from deep API-driven integration to high-touch advisory services. 

We invite Red Hat partners to support and engage with Lightwell in the following ways:

• Be a customer of Lightwell: Open source software is the foundation we all build on. Lightwell gives you access to remediated packages that could be integrated in your products and platforms to bolster your software supply chain.
• Build on Lightwell: Integrate Lightwell with your products and platforms to streamline delivery, enhance capabilities, and immediately unlock enterprise value for your customers. Lightwell delivers the core framework, but our customers rely on robust automation, security, and operational tooling to activate and scale Lightwell’s capabilities enterprise-wide.
• Bring Lightwell to market: Help customers leverage Lightwell as a catalyst for holistic cybersecurity transformation—reimagining how they build, deliver, and protect software from the ground up. 

Today’s announcement represents the first wave of a scalable, standardized framework for open source security. Throughout the coming months, Red Hat will continue to expand our partner engagements around Lightwell, focusing on high-impact solution development for critical sectors like the financial services industry.

Red Hat partners can sign up today to receive updates on partnership opportunities with Lightwell, technical resources, and more. Additionally, join our upcoming live Partner Power Hour on the Red Hat Partner Training Portal for more information on Lightwell.