LTM Builds a Lightwell Remediation Services Practice Around IBM and Red Hat’s $5B Open-Source Program

LTM, the Larsen & Toubro Group services company formerly known as LTIMindtree, announced a Lightwell remediation services practice built around IBM and Red Hat's $5 billion open-source security program, which uses AI-generated, vendor-validated fixes. LTM's planned portfolio covers remediation strategy, dependency analysis, risk-based prioritization, program management, DevSecOps integration, testing and validation, and large-scale deployment support, with no pricing, availability dates, or named customers disclosed. The move converts LTM's spot on Lightwell's July deployment partner bench — alongside Accenture, Deloitte, HCLTech, Infosys, Kyndryl, and TCS — into a defined offering, as IBM and Red Hat push validated patches to enterprises through integrators after early adopters including Bank of America, Citi, Goldman Sachs, JPMorganChase, and Visa.

LTM, the Larsen & Toubro Group services company that was LTIMindtree until its February rebrand, is building a Lightwell https://www.storagereview.com/news/ibm-and-red-hat-launch-5b-project-lightwell-join-anthropics-project-glasswing remediation services practice around the $5 billion IBM and Red Hat program for securing open-source software with AI-generated, vendor-validated fixes. IBM’s clearinghouse produces validated, production-ready patches for open-source dependencies; LTM’s job is getting them into customer environments. The company says its planned portfolio spans remediation strategy, dependency analysis, risk-based prioritization, remediation program management, DevSecOps integration, testing and validation, and large-scale deployment support. Where LTM Fits in the Lightwell Model Lightwell’s premise, as IBM and Red Hat laid it out in May, is that AI is accelerating vulnerability discovery faster than enterprises can remediate, so a clearinghouse staffed by more than 20,000 engineers ingests vulnerability data from live deployments, validates fixes, and ships them as production-ready patches through subscription services. In July, the two companies added a Lightwell Network tier, which is generally available with a library of remediations spanning current and legacy libraries, and a Lightwell Clearinghouse Premier tier in limited-availability commercial onboarding, and named a bench of deployment partners that included LTM alongside Accenture, Deloitte, HCLTech, Infosys, Kyndryl, TCS, and others. This week’s announcement turns LTM’s spot on that list into a defined offering, backed by its standing as an IBM Platinum Partner. “As AI accelerates software development and vulnerability discovery, enterprises need a faster and more scalable approach to remediation,” said Chandan Pani, chief information security officer at LTM. “Lightwell represents a significant advancement in securing the open-source software supply chain by bringing AI-driven remediation and trusted software maintenance into the enterprise. Through our collaboration with IBM, LTM will help organisations strengthen their cyber resilience at scale.” Sandip Patel, managing director of IBM India and South Asia, framed it as collective defense: “As AI accelerates vulnerability discovery, collaboration across the ecosystem becomes increasingly important. Bringing LTM’s engineering and transformation expertise to Lightwell can help enterprises mitigate risk and build more resilient software supply chains.” Why IBM and Red Hat Want the Integrators Red Hat’s Ryan King, vice president of AI and infrastructure partners, was the most direct about why the program needs a partner channel at all: “AI-driven discovery has pressed the demand for speed and patch delivery far beyond the means of any one single vendor.” A validated patch from the clearinghouse still has to be prioritized against a customer’s actual dependency graph, tested in that customer’s pipelines, and rolled out across an estate without taking down the applications it protects, and that’s the work LTM says it’ll take on, with the stated goal of heading off zero-day exploits and production downtime. LTM describes the portfolio as planned, and the release carries no pricing, availability dates, or named customers, so this is a go-to-market announcement for services that are being built around Lightwell’s existing tiers. What it does signal is that Lightwell’s financial-services early adopters, which included Bank of America, Citi, Goldman Sachs, JPMorganChase, and Visa at launch, will be followed by a wider enterprise base that reaches the program through integrators like LTM, and we’ll be watching for the first deployment specifics.