IBM, Red Hat and Palo Alto Networks Expand Project Lightwell to Help Organizations Respond to Software Vulnerabilities

Key Terms

virtual patching technical

Virtual patching is a temporary security measure that protects software or systems from known vulnerabilities without changing the vulnerable code itself. Think of it as a protective bandage or firewall rule that blocks attackers' paths until a permanent fix is applied; investors care because it reduces the immediate risk of costly breaches and regulatory fines but does not eliminate the underlying problem, affecting long-term security posture and potential liabilities.

operational technology (ot) technical

Operational technology (OT) is the hardware and software that directly monitors and controls physical equipment—like sensors, controllers, valves and machinery—in industrial settings such as factories, power plants or utility networks. Investors care because OT drives a company's ability to produce goods or deliver services; failures, upgrades or cybersecurity incidents can halt operations, require costly fixes or trigger regulatory action, much like a car’s engine determining whether a trip succeeds.

coordinated vulnerability disclosure regulatory

A coordinated vulnerability disclosure is a planned process where a security researcher privately tells a company about a software or system weakness and the two parties work together to fix it before the problem is made public. For investors, this matters because it reduces the chance of sudden, damaging cyberattacks or embarrassing disclosures that can hurt a company’s operations, reputation, and stock value—similar to quietly fixing a broken lock before announcing the neighborhood is unsafe.

telemetry technical

Telemetry is the automatic collection and transmission of measurements from remote devices, systems, or patients to a central system for monitoring and analysis—like a car sending engine, speed and location data back to a dashboard. For investors it matters because telemetry provides real-time evidence of product performance, safety and user behavior, helping assess revenue potential, operational risk, regulatory compliance and whether a product is meeting market demand.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

Collaboration combines vulnerability discovery, virtual patching and software remediation to help organizations reduce the time between vulnerability discovery and protection.

SANTA CLARA, Calif., ARMONK, N.Y. & RALEIGH, N.C.--(BUSINESS WIRE)-- Palo Alto Networks (NASDAQ: PANW), IBM (NYSE: IBM) and Red Hat today announced a collaboration to help organizations identify vulnerabilities early and deploy protections fast across open source software, commercial applications, operational technology (OT) and healthcare technologies. By integrating Palo Alto Networks Virtual Patching capability with Project Lightwell from IBM and Red Hat, the collaboration combines rapid network-level protection with software remediation to help organizations reduce exposure to emerging threats.

AI has supercharged vulnerability discovery, enabling flaws to be identified at unprecedented speed and scale. AI-driven threats can uncover security gaps across codebases far faster than defenders can patch them, exposing organizations to systemic supply-chain risks.

Nikesh Arora, CEO and Chairman of Palo Alto Networks

"AI has compressed the window between vulnerability discovery and exploit from weeks to minutes. Traditional patching cannot keep pace. By collaborating with IBM and Red Hat, we are shifting the advantage back to defenders. This powerful combination allows us to neutralize threats in the network while providing uninterrupted business continuity for our global clients."

Arvind Krishna, Chairman and CEO of IBM

"IBM established Project Lightwell to secure the open-source software foundation that enterprises rely on every day. By collaborating with Palo Alto Networks, we are extending that security from the source code directly to the network front lines. This joint solution gives our clients exactly what they need to thrive in the AI era: immediate, automated resilience against emerging threats, combined with the rigorous validation required to safely update their core systems."

A Seamless "Shield-and-Fix" Workflow

The collaboration connects IBM and Red Hat’s $5 billion commitment to open source security via Project Lightwell with Palo Alto Networks’ security platform. This creates a dual-action defense: Palo Alto Networks rapidly deploys a virtual patch at the network layer to block exploit attempts, while IBM and Red Hat’s Project Lightwell offers software remediation for open source software that customers can test and deploy in their environments.

The collaboration combines vulnerability intelligence, software remediation and network-based protections to help organizations respond quickly to newly discovered vulnerabilities. Key capabilities include:

• Broader Vulnerability Coverage: Protection across open source software, commercial applications, operational technology (OT) environments and connected devices.
• Preemptive Coverage: Organizations can receive virtual patch protections before official software patches become available, helping reduce exposure while remediation is underway.
• Rapid Protection: When a new vulnerability is discovered, network-level protections can be deployed the same day, with a long-term goal of reducing the time from validated discovery to protection.

The companies also plan to establish secure processes for sharing vulnerability information across participating software vendors, technology providers and security teams. This collaboration is expected to support coordinated vulnerability disclosure, accelerate protection development and provide anonymized telemetry on real-world exploitation attempts.

Expert Deployment via IBM Consulting

To help organizations respond more effectively to newly discovered vulnerabilities, IBM Security Services can also provide advisory and deployment services that help customers identify which vulnerabilities pose the greatest risk to their business and determine the best path to remediation. Working alongside Palo Alto Networks' virtual patching capabilities and Project Lightwell's software remediation capabilities, IBM Security Services can help customers prioritize, deploy and validate protections and fixes across complex environments.

About Palo Alto Networks

Palo Alto Networks (NASDAQ: PANW), the global AI cybersecurity leader, protects our digital way of life with a comprehensive portfolio of cybersecurity solutions and platforms across Network, Cloud, Security Operations, AI and Identity. Trusted by 70,000+ customers and powered by Unit 42 threat intelligence, our AI-driven platforms eliminate complexity, empowering enterprises to modernize with confidence and securing the speed of innovation. Explore the future of security at www.paloaltonetworks.com.

Palo Alto Networks, Prisma, Prisma AIRS, Idira and the Palo Alto Networks logo are trademarks of Palo Alto Networks, Inc. in the United States and in jurisdictions throughout the world. All other trademarks, trade names, or service marks used or mentioned herein belong to their respective owners. Any unreleased services or features (and any services or features not generally available to customers) referenced in this or other press releases or public statements are not currently available (or are not yet generally available to customers) and may not be delivered when expected or at all. Customers who purchase Palo Alto Networks applications should make their purchase decisions based on services and features currently generally available.

About IBM

IBM is a leading provider of global hybrid cloud and AI, and consulting expertise. We help clients in more than 175 countries capitalize on insights from their data, streamline business processes, reduce costs and gain the competitive edge in their industries. Thousands of governments and corporate entities in critical infrastructure areas such as financial services, telecommunications and healthcare rely on IBM's hybrid cloud platform and Red Hat OpenShift to affect their digital transformations quickly, efficiently and securely. IBM's breakthrough innovations in AI, quantum computing, industry-specific cloud solutions and consulting deliver open and flexible options to our clients. All of this is backed by IBM's long-standing commitment to trust, transparency, responsibility, inclusivity and service.

Visit www.ibm.com for more information.

About Red Hat

Red Hat is the open hybrid cloud technology leader, delivering a trusted, consistent and comprehensive foundation for transformative IT innovation and AI applications. Its portfolio of cloud, developer, AI, Linux, automation and application platform technologies enables any application, anywhere—from the datacenter to the edge. As the world's leading provider of enterprise open source software solutions, Red Hat invests in open ecosystems and communities to solve tomorrow's IT challenges. Collaborating with partners and customers, Red Hat helps them build, connect, automate, secure and manage their IT environments, supported by consulting services and award-winning training and certification offerings.

Forward-Looking Statements

This release contains forward-looking statements with respect to Palo Alto Networks that involve risks, uncertainties and assumptions, including, without limitation, statements regarding the benefits, impact, or performance or potential benefits, impact or performance of Palo Alto Networks products, technologies, and integrations or future products, technologies, and integrations. These forward-looking statements are not guarantees of future performance, and there are a significant number of factors that could cause actual results to differ materially from statements made in this release. Palo Alto Networks identifies certain important risks and uncertainties that could affect its results and performance in its most recent Annual Report on Form 10-K, its most recent Quarterly Report on Form 10-Q, and its other filings with the Securities and Exchange Commission from time-to-time, each of which are available on Palo Alto Networks' website at investors.paloaltonetworks.com and on the SEC's website at www.sec.gov. All forward-looking statements in this release regarding Palo Alto Networks are based on information available to Palo Alto Networks as of the date hereof, and Palo Alto Networks does not assume any obligation to update the forward-looking statements provided to reflect events that occur or circumstances that exist after the date on which they were made.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260624513461/en/

Palo Alto Networks Media Contact: press@paloaltonetworks.com
IBM Media Contact: Michele Brancati, mbrancati@ibm.com
Red Hat Media Contact: press@redhat.com

Source: Red Hat Inc.