formatNews” wd_print_url=”https://newsroom.ibm.com/2026-06-26-ibm,-red-hat,-and-deloitte-announce-project-lightwell-collaboration-to-help-strengthen-open-source-software-supply-chain-trust?printable=1″> < div wd_resize="formatNews" wd_print_url =" https://newsroom.ibm.com/ 2026 -06 -26 -ibm,-red-hat,- and-deloitte-announce-project-lightwell-collaboration-to-help-strengthen-open-source- software -supply-chain-trust? printable = 1 >
NEW YORK, ARMONK, N.Y. and RALEIGH, N.C., June 26, 2026 — Deloitte, IBM( NYSE: IBM), and Red Hat today revealed a collaboration to assist protect the software program supply chain versus increasingly automated cyber risks. Deloitte joins the initiative as a combination collaborator for Lightwell, bringing its wider secured software program supply chain architecture and cyber danger solutions to the large-scale enterprise open resource security version deployed by IBM and Red Hat.
The majority of organizations depend on a mix of first-party code, open source software, and third-party business software program. Due to the fact that a solitary service application can consist of all 3, an unpatched vulnerability can present prompt risk throughout the whole business estate. Frontier AI designs have actually increased this threat and can enable foes to uncover and make use of zero-day flaws in minutes.
Lightwell intends to aid resolve this operational stress by decoupling open resource software program safety removal from the typical software application upgrade cycle. The campaign incorporates a business open source security model with an active design pressure. Supported by IBM and Red Hat, Lightwell collaborates upstream danger disclosures with independent maintainers while establishing, testing, and backporting spots directly to the pinned software variations running in production environments. Lightwell delivers verified spots to those particular, in-use software application variations, securing important systems without forcing disruptive upgrades.
Through this cooperation, the 3 companies will certainly work with throughout the software lifecycle to help clients handle protection risks:
- &# 13;
- Continual Presence & & Exploration: Continually mapping and scanning first-party, open source, and third-party software to identify precisely what code exists, where it runs, and which critical business works it supports.
- Contextual Prioritization: Separating active threats from noise by assessing extent, exposure, threat-chaining, and exploitability to notify operational choices.
- Machine-Speed Removal: Integrating Red Hat and IBM’s automated spot recognition with Deloitte’s orchestration solutions to quickly collaborate, examination, and release verified solutions into production repositories, restricting disturbance. To attain this, Deloitte will certainly keep a bench of Onward Deployed Engineers (FDEs) to support ongoing removal and maintenance of customer applications.
- Environment Trust Fund & & Compliance: Via the partnership, the companies will certainly assist business manage upstream open resource and supplier connections, including pre-disclosure vulnerability handovers, while providing constant, evidence-based coverage for boards, auditors, and regulatory authorities.
&# 13;
&# 13;
&# 13;
&# 13;
“Ventures do not await hand-operated patching processes, and neither can enterprise response,” said Adnan Amjad, Deloitte’s United States Cyber leader. “With each other, we’re making it possible for customers to run at device rate to recognize, verify, and remediate vulnerabilities. This cooperation has to do with developing the functional strength required to keep trust throughout increasingly complex software application environments– creating systems that can hold up against and neutralize risk without disrupting business.”
“Lightwell was created to resolve the expanding obstacle of protecting open source software program in an AI-driven hazard landscape,” claimed Savio Rodrigues, Vice President, Solution Allies at IBM “It unites the design, automation, and community partnerships needed to tackle this risk at scale. “We’re thrilled to team up with Deloitte and utilize their abilities in cyber danger administration to extend this version to even more organizations.”
“Open up source drives innovation, but the quantity of AI-generated threats calls for design capacity that matches the rate of the aggressor,” says Kevin Kennedy, Vice President, Global Companion Ecological Community at Red Hat “Our work with Deloitte will bring the removal capacities we created with IBM with Lightwell directly to venture application environments. Together we will certainly separate, patch, and supply the repairs, sustaining the open resource ecosystem while safeguarding the certain variations our consumers depend on.”
As the speed of susceptability discovery rises, companies are trying to find services that help in reducing exposure while boosting responsibility throughout the software program lifecycle. This collaboration intends to help customers do specifically that– change software application supply chain safety from a fragmented, responsive procedure into a collaborated, evidence-based operating version.
This cooperation builds on the wider Deloitte and IBM partnership concentrated on helping customers address cybersecurity, durability, digital trust fund, and various other emerging technology risks. It also makes use of the decade-long Deloitte and Red Hat alliance, which integrates open source modern technologies and IT automation to aid ventures handle crossbreed cloud complexity and accelerate business integration. Discover more regarding the Deloitte and IBM partnership below, and check out Deloitte’s partnership with Red Hat here.
Concerning Deloitte
Deloitte gives industry-leading audit, consulting, tax obligation and advising services to many of the world’s most admired brand names, including almost 90 % of the Lot of money 500 ® and greater than 9, 000 U.S.-based private companies. At Deloitte, we aim to live our purpose of making an impact that matters for our people, clients, and communities. We unite distinctive skills, technologies, disciplines, and a community of alliances to aid take on today’s most complex service obstacles and drive long-term development. Deloitte is honored to be component of the biggest global professional solutions network offering our customers in the markets that are essential to them. Bringing more than 180 years of solution, our network of member companies covers greater than 150 nations and areas. Find out exactly how Deloitte’s about 470, 000 people globally attach for impact at www.deloitte.com.
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private business limited by assurance (” DTTL”), its network of participant companies, and their associated entities. DTTL and each of its member firms are legitimately separate and independent entities. DTTL (likewise referred to as “Deloitte Global”) does not offer services to customers. In the USA, Deloitte describes one or more of the United States member firms of DTTL, their related entities that operate making use of the “Deloitte” name in the USA and their particular affiliates. Specific services may not be readily available to testify customers under the policies and guidelines of public bookkeeping. Please see www.deloitte.com/about to find out more about our worldwide network of member companies.
About IBM
IBM is a leading service provider of international hybrid cloud and AI, and consulting competence. We aid customers in more than 175 nations take advantage of understandings from their information, streamline service processes, reduce costs and gain the competitive edge in their markets. Hundreds of governments and company entities in vital infrastructure areas such as monetary solutions, telecoms and medical care depend on IBM’s hybrid cloud platform and Red Hat OpenShift to impact their electronic makeovers swiftly, effectively and safely. IBM’s innovation developments in AI, quantum computing, industry-specific cloud remedies and speaking with supply open and adaptable alternatives to our customers. All of this is backed by IBM’s long-lasting commitment to trust, transparency, obligation, inclusivity and service. Visit www.ibm.com to find out more.
About Red Hat
Red Hat is the open hybrid cloud technology leader, supplying a relied on, constant and detailed structure for transformative IT development and AI applications. Its profile of cloud, developer, AI, Linux, automation and application system technologies allows any application, anywhere– from the datacenter to the edge. As the globe’s leading supplier of enterprise open resource software remedies, Red Hat buys open ecological communities and communities to fix tomorrow’s IT challenges. Collaborating with companions and customers, Red Hat aids them develop, link, automate, protect and manage their IT settings, supported by speaking with services and prize-winning training and qualification offerings.
Media contacts:
Deloitte
&# 13;
Taylor Tarleton
&# 13;
tagraham@deloitte.com
IBM
&# 13;
Michele Brancati
&# 13;
mbrancati@ibm.com
Red Hat
&# 13;
press@redhat.com