Deloitte, IBM, and Red Hat announced a collaboration to help protect the software supply chain against increasingly automated cyber threats. Deloitte joins the initiative as an integration collaborator for Lightwell, bringing its broader secured software supply chain architecture and cyber risk services to the large-scale enterprise open source security model deployed by IBM and Red Hat.
Most organizations rely on a mix of first-party code, open source software, and third-party commercial software. Because a single business application can include all three, an unpatched vulnerability can introduce immediate risk across the entire corporate estate. Frontier AI models have accelerated this risk and can enable adversaries to discover and exploit zero-day flaws in minutes.
Lightwell aims to help address this operational pressure by decoupling open source software security remediation from the traditional software upgrade cycle. The initiative combines an enterprise open source security model with an active engineering force. Supported by IBM and Red Hat, Lightwell coordinates upstream threat disclosures with independent maintainers while developing, testing, and backporting patches directly to the pinned software versions running in production environments. Lightwell delivers validated patches to those specific, in-use software versions, protecting critical systems without forcing disruptive upgrades.
As the pace of vulnerability discovery increases, organizations are looking for solutions that help reduce exposure while improving accountability across the software lifecycle. This collaboration aims to help clients do exactly that — transform software supply chain security from a fragmented, reactive process into a coordinated, evidence-based operating model.
This collaboration builds on the broader Deloitte and IBM relationship focused on helping clients address cybersecurity, resilience, digital trust, and other emerging technology risks. It also draws on the decade-long Deloitte and Red Hat alliance, which combines open source technologies and IT automation to help enterprises manage hybrid cloud complexity and accelerate business integration. Learn more about the Deloitte and IBM relationship here, and explore Deloitte’s alliance with Red Hat here.
