IBM & Red Hat: How Lightwell Can Lock Up AI-Era Open Source

IBM and Red Hat launched Lightwell, an AI-driven platform delivering automated vulnerability remediation and certified fixes for open-source dependencies at scale, addressing the reality that enterprise codebases now average 581 vulnerabilities. The service launches with 6,500+ remediated dependencies and initially targets financial services, with expansion planned to government, healthcare and telecoms. If you're selling vulnerability scanning, SCA tools or patch management to enterprises, IBM and Red Hat just commoditised your core value: they've built the remediation engine themselves and are giving it away with certified fixes. Your defensibility now sits in the niche—vertical-specific compliance, zero-day detection, or the speed of your human review—not in the scanning layer.