TECH & AI
Rather than forcing enterprises to defend their supply chains in isolation, Lightwell establishes a collective defence model that levels the playing field against wellfunded threat actors and nation-states.
By pooling intelligence across open source communities and commercial ecosystems, Lightwell equips member organisations with deep visibility, automated patch generation and validated test coverage. Members gain direct source code access to verify fixes alongside secure embargo management. Brian notes that while attackers have equal access to advanced tools, collective intelligence alters the defensive dynamic.“ We have access to the AI tools and have information shared by our members, so we are fighting on equal footing,” he says.“ Collectively with the right tools, we have great visibility into what is going on across open source communities. We have expertise to ensure the patch is built, test coverage is created, and you have access to source code to validate what happened. It moves the ball much further forward than an individual company up against a well-funded attacker.”
Building an ecosystem for orchestrated defence To secure the open-source software supply chain, Lightwell is backed by a vast partner ecosystem including industry giants like AWS, Microsoft, NVIDIA and Accenture. This unified collaboration enables an“ orchestrated
88 September 2026