IBM, Red Hat and Palo Alto Networks are integrating Palo Alto’s network-based virtual patching in Prisma with IBM/Red Hat’s Project Lightwell to spot and shield against open-source software flaws. The joint effort uses shared vulnerability intelligence and AI-driven processes to deliver preemptive, same-day network protections while patches are developed.

• IBM/Red Hat's Project Lightwell now feeds vulnerability intelligence into Palo Alto's Prisma so virtual patches can deploy the same day a flaw is confirmed, shrinking the discovery-to-defense window from weeks to minutes.
• The integration sits under IBM and Red Hat's $5 billion Project Lighthouse, with Lightwell acting as an AI-driven clearinghouse that validates and tests fixes across massive volumes of open-source code before delivering them via subscription.
• Early adopters include major banks and financial firms (Bank of America, Citi, Goldman Sachs, JPMorgan Chase, Mastercard, Visa), gaining preemptive protection across open-source libraries, commercial apps, OT and IoT environments.
• This builds on existing IBM-Palo Alto collaboration on quantum-safe readiness and AI risk assessment, adding network-level virtual patching as a stopgap while permanent fixes are developed.