Global open source solution companies Red Hat and IBM said on Thursday they will formally launch Lightwell, which provides automated vulnerability response functions.

The companies said Lightwell helps enterprises protect specific software packages running in real operating environments while supporting the building of a stable platform for future applications.

It consists of two services: Lightwell Network and Lightwell Clearinghouse Premier.

Lightwell Network, currently available, provides an initial catalogue of more than 6,500 application-layer dependencies used across major ecosystems such as Java and Python.

Lightwell Clearinghouse Premier is currently offered on a limited basis and serves as a trusted intermediary for security patch embargoes and industry-specific threat response.

The launch is part of a $5 billion open source security investment plan announced by IBM and Red Hat in May.

Matt Hicks (맷 힉스), Red Hat president and CEO, said Lightwell is a turning point that fundamentally changes how enterprise software is protected. He said the company aims to provide the trust infrastructure enterprises need to use open source in a trusted and sustainable way in the AI era by combining automated vulnerability resolution with Red Hat engineering capabilities.