IBM Commits $5 Billion to Open-Source Software Security

IBM is committing $5 billion to Project Lightwell, a new initiative that will use engineers and AI tools to help companies secure open-source software across the enterprise software supply chain.

Project Lightwell is designed as a clearinghouse for open-source security. Companies will be able to confidentially report flaws, receive tested fixes, and share patches back into the broader open-source community. IBM plans to offer the service commercially within 30 days, with subscription pricing likely tied to the number of software packages a client uses.

IBM and Red Hat have piloted the model with companies including Bank of America, JPMorgan Chase, and Visa. The system is meant to cover software from development through production, including independent open-source components, libraries, and AI frameworks.

The move comes as open-source software remains foundational to enterprise technology while AI gives attackers faster ways to find and exploit flaws. IBM is positioning Lightwell as a production-grade security layer for code that companies already depend on.

Source: Reuters — https://www.reuters.com/legal/transactional/ibm-commits-5-billion-secure-open-source-software-2026-05-28/