Red Hat, Inc. Due Diligence

Run due diligence on Red Hat, Inc.: check compliance and get alerts when suppliers or ownership change.

United States · owned by IBM (United States) · www.redhat.com · 29 vendors

Red Hat, Inc. is the world's leading provider of enterprise open source solutions, offering products including Red Hat Enterprise Linux, OpenShift (Kubernetes/container platform), Ansible automation, and cloud technologies. The company develops, supports, and sells open source software for enterprise use, enabling organizations to modernize infrastructure, improve application development, and adopt hybrid cloud strategies. Red Hat operates a subscription-based business model providing enterprise-grade support, security, and services around its open source offerings.

Resilience scores

Technology vendors

Services catalogue

8 services in catalogue across 4 categories; runs on 29 sub-vendors.

Insights

Last updated 2026-08-19 · revision 3

29 direct vendors, 215 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

12 in-scope frameworks identified; showing 3.

HIPAA (source) — Evidence found

Evidence: https://www.redhat.com/en/solutions/healthcare, https://www.redhat.com/en/solutions/security-and-compliance-approach, https://access.redhat.com/articles/hipaa-compliance-red-hat-enterprise-linux

NIS2 (source) — No public evidence

Evidence: https://www.redhat.com/en/solutions/security-and-compliance-approach, https://www.redhat.com/en/about/office-locations, https://www.redhat.com/en/products/digital-sovereignty

Export Control Regulations — Evidence found

Evidence: https://www.redhat.com/en/about/export-control-product-matrix, https://www.redhat.com/en/about/all-policies-guidelines

Financials

Three-year financials

Financial Resilience Score: 9/10

Red Hat's financial resilience is very high, primarily because it operates as a wholly-owned subsidiary of IBM (an A-rated, investment-grade U.S. company) since the $34 billion acquisition closed in July 2019. This provides Red Hat with access to abundant parent-company capital, no independent debt burden, and strategic protection as IBM's designated growth engine for hybrid cloud and AI. Standalone financial visibility ended in FY2019, but IBM continues to disclose Red Hat revenue growth rates in quarterly filings, consistently showing double-digit growth (mid-teens through 2023-2025). The business model is inherently resilient: over 85% of revenue historically came from recurring subscription contracts (RHEL, OpenShift, Ansible), providing strong revenue visibility and large deferred revenue balances. Red Hat is the #1 commercial Linux distributor with penetration in over 90% of U.S. Fortune 500 companies, and its products are distributed across all major hyperscalers (AWS, Azure, GCP, IBM Cloud, Oracle Cloud), reducing single-partner risk. Historically, Red Hat delivered more than 65 consecutive quarters of revenue growth through fiscal 2019, an exceptional track record. Post-acquisition, growth has continued at low-to-mid teens annually with estimated run-rate revenue of $6-7 billion by 2023-2024. Key risks include competitive pressure from free Linux alternatives (AlmaLinux, Rocky Linux), hyperscaler-native Kubernetes/AI services, community backlash from the 2023 RHEL source-code redistribution restrictions, and reduced strategic independence under IBM.

Key strengths: Wholly-owned subsidiary of IBM (investment-grade, A-rated balance sheet), Subscription-based recurring revenue model (~88% of revenue), Market leadership in commercial Linux and Kubernetes (OpenShift), Used by >90% of U.S. Fortune 500 companies, Strategic role as IBM's hybrid cloud and AI growth engine, Diversified hyperscaler distribution (AWS, Azure, GCP, IBM Cloud, Oracle), 65+ consecutive quarters of revenue growth through FY2019, Continued double-digit growth post-acquisition (mid-teens)

Risk factors: Competition from free alternatives (AlmaLinux, Rocky Linux post-CentOS Stream), Hyperscaler-native Kubernetes and AI services competition, Community backlash from 2023 RHEL source-code redistribution restrictions, Reduced standalone strategic flexibility under IBM, Opacity: no standalone profitability, margin, or cash flow disclosure since 2019, FX exposure with ~40% of revenue historically from outside the U.S.

Revenue by geography

Revenue by product/service

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report