Deloitte, IBM, and Red Hat are partnering to improve software supply chain security against automated cyber threats.
Deloitte, IBM and Red Hat announce a collaboration to protect the software supply chain against increasingly automated cyber threats. To this end, Deloitte is joining IBM and Red Hat’s Lightwell project, which Palo Alto Networks also recently signed up for. As an integration partner for Lightwell, Deloitte brings additional expertise in cyber risks and secure software architecture.
Open source vulnerabilities
Lightwell combines an open source security model with active engineering. The platform coordinates upstream threat notifications with independent maintainers while patches are developed, tested, and applied directly to the software versions in use. This allows organizations to receive security updates without performing disruptive, large-scale upgrades.
Exploits don’t wait for manual patching processes, and neither can a company’s response.
Adnan Amjad, Deloitte’s US Cyber Leader
Thanks to this approach, validated patches are quickly rolled out for the specific software versions running in production. This significantly narrows the window in which vulnerabilities can be exploited, especially in complex IT environments where traditional patch cycles often cause delays.
Software lifecycle
The collaboration focuses on continuous visibility of all software components within an organization, including proprietary, open source, and third-party code. Through continuous monitoring and scanning, it maps out exactly which code is running where and what functions it supports.
Furthermore, contextual prioritization makes it possible to distinguish real threats from less relevant signals based on severity, exposure, and exploitability. The automated validation of patches by IBM and Red Hat, combined with Deloitte’s Forward Deployed Engineers, ensures that fixes are rolled out quickly and without disruptions.