IBM, Red Hat and Palo Alto Networks Expand Project Lightwell to Accelerate Enterprise Vulnerability Response

IBM, Red Hat and Palo Alto Networks have announced an expansion of their collaboration on Project Lightwell, introducing an integrated approach designed to help enterprises respond more quickly to software vulnerabilities across open-source software, commercial applications, operational technology (OT) and healthcare environments.

The initiative combines IBM and Red Hat’s Project Lightwell with Palo Alto Networks’ Virtual Patching capabilities to deliver both immediate network-level protection and software remediation. The objective is to reduce the time between vulnerability discovery and enterprise protection, an increasingly critical requirement as AI accelerates the pace of cyber threats.

The companies said the collaboration addresses a growing challenge for organisations, where vulnerabilities can now be identified and exploited much faster than traditional patch management processes can respond. By integrating vulnerability intelligence, virtual patching and remediation workflows, the solution aims to help security teams minimise exposure while permanent software fixes are being tested and deployed.

The expanded Project Lightwell framework establishes a dual-layer security model. Palo Alto Networks’ virtual patching technology provides immediate protection at the network layer by blocking exploitation attempts, while Project Lightwell delivers validated remediation for affected open-source software packages.

According to the announcement, the integrated solution offers:

The companies also plan to establish secure mechanisms for sharing vulnerability intelligence among software vendors, technology providers and security teams. The initiative is expected to support coordinated vulnerability disclosure, accelerate protection development and provide anonymised telemetry on real-world exploitation attempts.

As part of the collaboration, IBM Security Services will provide advisory and deployment support to help enterprises identify high-risk vulnerabilities, prioritise remediation activities and validate protections across complex hybrid IT environments. These services will complement the virtual patching and remediation capabilities delivered through the joint solution.

The announcement reflects a broader industry trend towards integrating software remediation, threat intelligence and network-based protection into unified cybersecurity operations. As artificial intelligence continues to compress the timeline between vulnerability discovery and exploitation, enterprises are increasingly adopting security strategies that provide immediate protection while long-term remediation is implemented.

For the channel ecosystem, the expanded collaboration is expected to provide IBM, Red Hat and Palo Alto Networks partners with an integrated framework for delivering vulnerability management, cyber resilience and managed security services to enterprise customers navigating increasingly complex threat environments.