Zscaler teams with IBM and Red Hat on AI-era patch-gap defence
Zscaler has announced a three-way collaboration with IBM and Red Hat to address what the company describes as a widening window between vulnerability disclosure and patch deployment. The integration pairs Zscaler's Autonomous Application Shield, delivered through its Zero Trust Exchange platform, with Lightwell, IBM and Red Hat's automated open-source remediation service. The aim is to give enterprise security teams inline exploit blocking at network level while a validated software fix is prepared and applied.
The commercial context is stark. Mandiant's M-Trends 2026 report, cited by Zscaler in its announcement, found the mean time to exploit a newly disclosed vulnerability has fallen below zero: attackers are reaching production systems before a public patch exists. That shift is widely attributed to AI-assisted exploit development, which has lowered the skill threshold and compressed the manual effort once required to weaponise a CVE.
How the integration works
Zscaler's App Connectors continuously assess private application exposure points through its cloud platform. When a vulnerability surfaces, the Zero Trust Exchange applies application-specific inline protections in real time, without waiting for an OS- or library-level patch. Lightwell then supplies tested remediations for the affected open-source component, closing the underlying flaw once the fix has been validated.
Joby Menon, Senior Vice President of Product Management at Zscaler, said the collaboration bridges the two phases organisations struggle to coordinate: "Our collaboration with IBM and Red Hat brings together inline, application-specific protection and validated remediation to help customers reduce risk during that gap."
Gunnar Hellekson, Vice President and General Manager of Lightwell at Red Hat, framed the urgency in concrete terms: "A window that was months or weeks is now hours and minutes." Lightwell's contribution centres on open-source software, which underpins a large share of enterprise application stacks but has historically lagged proprietary software in patch velocity.
The Autonomous Application Shield component is currently in early access and is not yet generally available. Zscaler cautioned that availability, capabilities and timing are subject to change.
Market context and competitive positioning
The patch-gap problem sits at the intersection of vulnerability management, zero-trust network access and software supply-chain security, three categories that are converging rapidly. Established players including Palo Alto Networks (with its Cortex XSIAM platform), CrowdStrike and Tenable address parts of this lifecycle, but the explicit coupling of real-time inline shielding with automated source-level remediation for open-source dependencies is a less common integrated offer.
Red Hat's position as the dominant enterprise Linux and OpenShift vendor gives Lightwell natural reach across on-premises and hybrid Kubernetes environments, where many of the private applications Zscaler protects via ZPA are deployed. That distribution advantage may accelerate enterprise adoption compared with point solutions that require separate procurement and integration work.
From a regulatory standpoint, the EU's Cyber Resilience Act, which will require mandatory vulnerability disclosure and patching timelines for products with digital elements from late 2027, adds compliance urgency to patch-gap risk management for any vendor or enterprise operating in European markets. UK organisations remain subject to NIS2-aligned obligations under the Network and Information Systems regulations; faster exploit windows directly affect their ability to meet required incident-response timescales.
The collaboration does not carry disclosed financial terms. Investors and enterprise buyers will be watching for general availability dates, published benchmark data on detection-to-block latency, and named customer deployments as the primary indicators of whether the integrated offer can compete at scale.