---
description: IBM and Red Hat commit $5B to Project Lightwell, an AI-driven open source security clearinghouse, and join Anthropic&#039;s Project Glasswing.
title: IBM and Red Hat Launch $5B Project Lightwell, Join Anthropic&#039;s Project Glasswing
image: https://www.storagereview.com/wp-content/uploads/2026/05/Storagereview-IBM-Red-Hat-Lightwell.png
---

[![Storage Review]()](https://storagereview.com/)

---

[Facebook](https://www.facebook.com/@storagereview) [X (Twitter)](https://twitter.twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS Feed](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview)

[Facebook](https://www.facebook.com/@storagereview) [X (Twitter)](https://twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS Feed](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview)

[![StorageReview.com]()](https://www.storagereview.com)

≡ Menu

- [Home](https://www.storagereview.com/)
- [Storage Reviews](https://www.storagereview.com/review)
  - [End User Reviews](https://www.storagereview.com/consumer)
  - [Enterprise Reviews](https://www.storagereview.com/enterprise)
  - [Ubiquiti Reviews](https://www.storagereview.com/best/ubiquiti-reviews)
- [SR Merch](https://store.storagereview.com)
- [Leaderboards](https://www.storagereview.com/best)
  - [Best Storage Arrays](https://www.storagereview.com/best/storage-arrays)
  - [Best Enterprise SSDs](https://www.storagereview.com/best/enterprise-ssds)
  - [Best Servers](https://www.storagereview.com/best/servers)
  - [Best Enterprise GPUs](https://www.storagereview.com/best/enterprise-gpus)
  - [Best Desktops for Local AI](https://www.storagereview.com/best/desktops-local-ai)
  - [Best Laptops for Local AI](https://www.storagereview.com/best/laptops-local-ai)
  - [Best Local LLM Tools](https://www.storagereview.com/best/local-llm-tools)
  - [Agentic AI Hardware](https://www.storagereview.com/best/agentic-ai-hardware)
  - [Best SSDs & Hard Drives](https://www.storagereview.com/best_drives)
  - [Best Portable SSDs](https://www.storagereview.com/best/portable-ssds)
  - [Best Business Laptops](https://www.storagereview.com/best/business-laptops)
  - [Best Mobile Workstations](https://www.storagereview.com/best/mobile-workstations)
  - [Best Desktop Workstations](https://www.storagereview.com/best/desktop-workstations)
  - [Best Mini PCs](https://www.storagereview.com/best/mini-pcs)
  - [Best Laptop Battery Life](https://www.storagereview.com/best/laptop-battery-life)
- [Storage Reference Guide](https://www.storagereview.com/storage-reference-guide)
- [About SR](https://www.storagereview.com/about-storagereview)
  - [StorageReview.com Sweepstakes Rules and Regulations](https://www.storagereview.com/storagereview-com-sweepstakes-rules-and-regulations)

Search

[Home](https://www.storagereview.com/) » [News](https://www.storagereview.com/news) » IBM and Red Hat Launch $5B Project Lightwell, Join Anthropic’s Project Glasswing

# IBM and Red Hat Launch $5B Project Lightwell, Join Anthropic’s Project Glasswing

by Harold Fritts on June 3, 2026

[AI](https://www.storagereview.com/enterprise/ai)  ◇  [Enterprise](https://www.storagereview.com/enterprise)

IBM and Red Hat have expanded their enterprise security strategy with two announcements in quick succession: joining Anthropic’s Project Glasswing on May 19 and introducing Project Lightwell on May 28, aligning large-scale engineering investment with industry collaboration to address growing risks in open-source and AI-driven environments.

### **IBM and Red Hat Launch Project Lightwell**

Project Lightwell represents a $5 billion commitment focused on securing open source software across its full lifecycle, from upstream development through enterprise production. The initiative combines advanced AI capabilities with a global workforce of more than 20,000 engineers to create a coordinated model for identifying, validating, and remediating vulnerabilities at scale.

![IBM and Red Hat Project Lightwell graphic]()

At the center of the effort is a trusted security clearinghouse that serves as an intermediary between enterprises and the open-source ecosystem. The clearinghouse is designed to ingest vulnerability data from real-world deployments, apply AI-assisted validation and testing, and deliver production-ready patches through commercial subscription services. These patches are intended to integrate directly into enterprise software supply chains with lifecycle management and enterprise-grade assurance.

IBM and Red Hat are extending their established enterprise open-source model beyond curated platform components to include independent libraries, language toolchains, AI frameworks, and data streaming platforms. IBM already uses more than 62,000 open source packages and maintains deep expertise in over 10,000, spanning technologies such as Linux, Java, Kubernetes, Kafka, Ansible, and Terraform. The expansion reflects the operational reality that enterprises rely on a broad mix of community-driven software outside vendor-managed distributions.

The clearinghouse enables organizations to report vulnerabilities discovered in active environments within a controlled framework, receive validated patches optimized for production use, and coordinate responsible disclosure upstream to maintainers. This approach is designed to reduce fragmentation in vulnerability handling while reinforcing long-term ecosystem stability through upstream contributions.

![]()

The initiative comes as open-source software continues to underpin enterprise infrastructure, with more than 90 percent of Fortune 500 companies relying on OSS, and as advances in AI accelerate both vulnerability discovery and exploitation. Anthropic recently reported that its Mythos Preview model identified nearly 3,900 high- or critical-severity vulnerabilities in open source software alone. IBM and Red Hat are positioning Project Lightwell as a response to this shift, applying AI and engineering scale to compress remediation timelines and improve consistency across complex software supply chains.

### **AI-Assisted Engineering Model**

A core component of Project Lightwell is the deployment of a large-scale engineering organization augmented by AI-driven tooling. IBM and Red Hat are emphasizing technical capacity as a strategic asset, with engineers operating across both upstream communities and enterprise environments.

The engineering teams will contribute to upstream maintenance alongside project maintainers and handle enterprise-specific requirements, such as vulnerability triage, prioritization, and validation. AI is used to support high-volume analysis, secure patch development, dependency hardening, and release engineering.

![]()

This model addresses a key challenge for enterprises managing diverse open-source dependencies, where vulnerability management is often fragmented and resource-intensive. By combining AI-assisted workflows with dedicated engineering resources, IBM and Red Hat aim to standardize and scale remediation processes.

Early adopters are concentrated in financial services: Bank of America, BNY, Citi, Goldman Sachs, JPMorganChase, Mastercard, Morgan Stanley, Royal Bank of Canada, State Street, Visa, and Wells Fargo are already collaborating with IBM and Red Hat on Project Lightwell. IBM says insights from these initial deployments will shape how vulnerabilities are identified, validated, and remediated at scale in large, regulated environments.

### **Integration with IBM’s AI Security Portfolio**

Project Lightwell aligns with IBM’s broader security portfolio for the AI era, outlined in the company’s May 19 announcement. IBM Concert aggregates application, infrastructure, and network signals into a unified operational view, with the goal of moving organizations from passive monitoring to coordinated response. Its security capabilities extend into the developer’s IDE through IBM Concert Secure Coder, which detects and prioritizes risks by business impact and generates automatic remediations as code is written, preventing vulnerabilities from reaching production.

![IBM Concert Screencap]()

IBM Consulting is also advancing Autonomous Security services, which use multi-agent systems to coordinate detection, decision-making, and response at machine speed. These services are intended to help enterprises adapt vulnerability management and open source governance to increasingly compressed timelines driven by AI-enabled threats.

### **IBM Joins Project Glasswing<br>**

Shortly before the Lightwell announcement, IBM joined Project Glasswing, the Anthropic-led industry initiative to defend critical software infrastructure. The coalition brings together security and technology leaders to identify and remediate vulnerabilities in widely used software and share findings across industries. The Lightwell release notes that the new initiative incorporates lessons from Glasswing and OpenAI’s Trust Access for Cyber program.

As part of Glasswing, IBM has been identifying and remediating vulnerabilities in widely used software and sharing those findings with the broader community. Rob Thomas, SVP Software and Chief Commercial Officer at IBM, said the company has been “hardening our own products and contributing fixes back to the open-source community,” adding that “the collaboration makes the entire ecosystem stronger.”

![]()

A central component of this work is coordinated disclosure. IBM shares findings with affected vendors and maintainers in accordance with established disclosure practices, enabling patches to be developed and validated before public release. The company also contributes fixes directly to upstream projects, ensuring that remediations are incorporated into future releases and supported branches, reducing divergence between enterprise deployments and community codebases.

IBM is also applying its Glasswing work to its own portfolio. The company says that by contributing fixes proactively and maintaining enterprise-grade versions of widely used open-source components, IBM and Red Hat can move quickly when issues arise, pairing the flexibility of open source with reliable, rapid support.

The Glasswing collaboration model emphasizes shared learning across participants. IBM contributes findings through coordinated disclosure, upstream open-source patches, and best practices shared with fellow participants, reflecting the company’s position that openness and scrutiny are prerequisites for security at scale. This cross-industry visibility is increasingly important as AI lowers the barrier to discovering and exploiting vulnerabilities.

### **Positioning for AI-Driven Threat Environments**

Together, Project Lightwell and IBM’s participation in Project Glasswing reflect a shift toward more coordinated, AI-assisted security models. IBM is combining internal engineering scale, ecosystem collaboration, and AI-driven tooling to address the growing complexity and speed of modern threat environments.

The approach focuses on securing open source software at its source while improving how vulnerabilities are identified, validated, and remediated across enterprise supply chains. By linking upstream engagement with production-grade validation and industry-wide intelligence sharing, IBM and Red Hat are positioning these initiatives as foundational elements of enterprise security in the AI era.

**Engage with StorageReview**

[Newsletter](https://www.storagereview.com/storage_newsletter) |  [YouTube](https://www.youtube.com/user/StorageReview "Opens in a new window") | Podcast  [iTunes](https://podcasts.apple.com/gb/podcast/storagereview-com-storage-reviews/id1060681115 "Opens in a new window")/ [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0 "Opens in a new window") |  [Instagram](https://www.instagram.com/storagereview/ "Opens in a new window") |  [Twitter](https://twitter.com/storagereview "Opens in a new window") |  [TikTok](https://www.tiktok.com/@storagereview? "Opens in a new window") |  [RSS Feed](https://www.storagereview.com/rss.xml)

![]()

### Harold Fritts

I have been in the tech industry since IBM created Selectric. My background, though, is writing. So I decided to get out of the pre-sales biz and return to my roots, doing a bit of writing but still being involved in technology.

Previous post: [JetCool Brings SmartPlate Liquid Cooling to Dell PowerEdge R770 and R7725](https://www.storagereview.com/news/jetcool-brings-smartplate-liquid-cooling-to-dell-poweredge-r770-and-r7725)

Next post: [MSI Brings Liquid-Cooled ORv3 Racks, NVIDIA MGX Servers, and a DGX Station Desktop to COMPUTEX 2026](https://www.storagereview.com/news/msi-brings-liquid-cooled-orv3-racks-nvidia-mgx-servers-and-a-dgx-station-desktop-to-computex-2026)

Trusted Vendors

Products and solutions from our affiliate partners:

- [  
  ![Ubiquiti Logo]()  
   Ubiquiti  
  ](https://store.ui.com/us/en?a_aid=StorageReview "Opens in a new window")
- [  
  ![Newegg Logo]()  
   Newegg  
  ](https://click.linksynergy.com/fs-bin/click?id=g5terNMDhz0&offerid=1207190.18&subid=0&type=4 "Opens in a new window")
- [  
  ![Amazon Logo]() Amazon  
  ](https://amzn.to/4fLJUEW "Opens in a new window")

Newsletter

Subscribe to the StorageReview newsletter to stay up to date on the latest news and reviews. We promise no spam!

1  

Leave this field empty if you’re human:

## Advertisement

Content Categories

[Facebook](https://www.facebook.com/@storagereview) [X](https://twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview)

Copyright © 1998-2025 Flying Pig Ventures, LLC Cincinnati, Ohio. All rights reserved.

Manage your privacy

To provide the best experiences, we and our partners use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us and our partners to process personal data such as browsing behavior or unique IDs on this site and show (non-) personalized ads. Not consenting or withdrawing consent, may adversely affect certain features and functions.

Click below to consent to the above or make granular choices. Your choices will be applied to this site only. You can change your settings at any time, including withdrawing your consent, by using the toggles on the Cookie Policy, or by clicking on the manage consent button at the bottom of the screen.

Functional Functional Always active

The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.

Preferences Preferences

The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.

Statistics Statistics

The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.

Marketing Marketing

The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.

Statistics

Marketing

Features

Always active

Special features

Special purposes

Always active

- Manage options
- Manage services
- Manage {vendor\_count} vendors
- [Read more about these purposes](https://cookiedatabase.org/tcf/purposes/)

Accept Deny Manage options Save preferences Manage options

- {title}
- {title}
- {title}

Manage your privacy

To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.

Functional Functional Always active

The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.

Preferences Preferences

The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.

Statistics Statistics

The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.

Marketing Marketing

The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.

Statistics

Marketing

Features

Always active

Special features

Special purposes

Always active

- Manage options
- Manage services
- Manage {vendor\_count} vendors
- [Read more about these purposes](https://cookiedatabase.org/tcf/purposes/)

Accept Deny Manage options Save preferences Manage options

- {title}
- {title}
- {title}

Manage consent Manage consent

```json
{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.storagereview.com\/news\/ibm-and-red-hat-launch-5b-project-lightwell-join-anthropics-project-glasswing","url":"https:\/\/www.storagereview.com\/news\/ibm-and-red-hat-launch-5b-project-lightwell-join-anthropics-project-glasswing","name":"IBM and Red Hat Launch $5B Project Lightwell, Join Anthropic's Project Glasswing - StorageReview.com","isPartOf":{"@id":"https:\/\/www.storagereview.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.storagereview.com\/news\/ibm-and-red-hat-launch-5b-project-lightwell-join-anthropics-project-glasswing#primaryimage"},"image":{"@id":"https:\/\/www.storagereview.com\/news\/ibm-and-red-hat-launch-5b-project-lightwell-join-anthropics-project-glasswing#primaryimage"},"thumbnailUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2026\/05\/Storagereview-IBM-Red-Hat-Lightwell.png","datePublished":"2026-06-03T17:59:52+00:00","dateModified":"2026-07-21T09:46:13+00:00","description":"IBM and Red Hat commit $5B to Project Lightwell, an AI-driven open source security clearinghouse, and join Anthropic's Project Glasswing.","breadcrumb":{"@id":"https:\/\/www.storagereview.com\/news\/ibm-and-red-hat-launch-5b-project-lightwell-join-anthropics-project-glasswing#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.storagereview.com\/news\/ibm-and-red-hat-launch-5b-project-lightwell-join-anthropics-project-glasswing"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.storagereview.com\/news\/ibm-and-red-hat-launch-5b-project-lightwell-join-anthropics-project-glasswing#primaryimage","url":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2026\/05\/Storagereview-IBM-Red-Hat-Lightwell.png","contentUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2026\/05\/Storagereview-IBM-Red-Hat-Lightwell.png","width":1920,"height":720,"caption":"IBM and Red Hat Project Lightwell graphic with blue data streams crossing through a central envelope-shaped node"},{"@type":"BreadcrumbList","@id":"https:\/\/www.storagereview.com\/news\/ibm-and-red-hat-launch-5b-project-lightwell-join-anthropics-project-glasswing#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.storagereview.com\/"},{"@type":"ListItem","position":2,"name":"News","item":"https:\/\/www.storagereview.com\/news"},{"@type":"ListItem","position":3,"name":"IBM and Red Hat Launch $5B Project Lightwell, Join Anthropic&#8217;s Project Glasswing"}]},{"@type":"WebSite","@id":"https:\/\/www.storagereview.com\/#website","url":"https:\/\/www.storagereview.com\/","name":"StorageReview.com","description":"StorageReview.com is a leading provider of news and reviews throughout the entire IT stack - from the datacenter to the edge, and all points in between.","publisher":{"@id":"https:\/\/www.storagereview.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.storagereview.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.storagereview.com\/#organization","name":"StorageReview.com","url":"https:\/\/www.storagereview.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.storagereview.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2020\/02\/Storage-Reviews-2-2.png","contentUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2020\/02\/Storage-Reviews-2-2.png","width":344,"height":61,"caption":"StorageReview.com"},"image":{"@id":"https:\/\/www.storagereview.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/storagereview","http:\/\/youtube.com\/user\/storagereview"]}]}
```
