Pomegra
Cohere signed a letter of intent on October 15, 2026 to buy AISLE, a 50-person startup whose AI found 500+ software flaws in a year. Terms are undisclosed.
Key Takeaways
- Cohere signed a non-binding letter of intent to acquire AISLE on October 15, 2026; price and structure were not disclosed.
- AISLE's AI found 500+ new CVEs in its first year, including all 12 in OpenSSL's January 2026 release.
- AISLE's 50 staff join Cohere, and Prague becomes its AI cybersecurity hub.
Lead
Cohere said on October 15, 2026 that it has signed a letter of intent to acquire AISLE, a San Francisco-based startup that builds autonomous systems to find and fix vulnerabilities in critical software. Neither side disclosed a price, payment structure or closing date. A letter of intent is non-binding, so the deal remains subject to a definitive agreement.
AISLE is barely a year out of stealth, having emerged on October 16, 2025. In that time it reported more than 500 previously unknown vulnerabilities with assigned CVE identifiers across over 100 codebases. About 50 full-time employees would move to Cohere.
What Did Cohere Agree to Buy?
Cohere agreed to buy a team and a track record rather than a revenue line. AISLE's pitch is a cyber reasoning system that locates flaws in widely used code and proposes patches, aimed at driving vulnerability backlogs toward zero. The company has published no revenue figures, and no funding total has been disclosed.
The track record is concentrated in open-source infrastructure. AISLE says it found all 12 vulnerabilities in OpenSSL's January 2026 security release, and 20 of the 23 disclosed across three OpenSSL releases. Ten of its fixes were accepted into official releases. In the most recent curl release, it found 18 of the 24 CVEs.
Those results are verifiable in public advisories, which makes them more persuasive than a typical security vendor's marketing claims. They also say little about how the system performs against proprietary enterprise code, where AISLE's customer base would have to be built.
Who Is Joining Cohere?
The leadership of AISLE moves intact into senior roles. Co-founder and CEO Ondrej Vlcek, the former CEO of Czech antivirus company Avast, becomes senior vice president of a new unit called Cohere Cyber. COO Jaya Baloo becomes chief information security officer for the whole company. Co-founder Stanislav Fort becomes vice president of AI security.
This is a strategic purchase with a team component, not a pure acquihire. Cohere is buying a working product and its public vulnerability record, along with the people who built it. The founders' roles suggest Cohere wants the unit to run as a distinct business inside the company.
Cohere also said it will make a long-term investment in Prague and make the city its global center for AI cybersecurity. AISLE's engineering base there gives Cohere another European foothold.
Why Does Cohere Want Cybersecurity?
Cohere wants security to be a built-in feature of its sovereign AI platform, which it sells to governments and regulated enterprises that cannot send sensitive data to US hyperscalers. For those buyers, a model vendor that can also audit and harden the code the model runs on is a stronger offer than a model alone. Cohere framed the case in its own announcement by saying security is becoming the defining challenge of enterprise AI.
The deal also covers governance for AI agents and autonomous systems, a product area where enterprise buyers currently have few established vendors. Cohere describes the combination as a full-stack security approach.
The timing fits a pattern. Cohere has been assembling a European presence through its earlier purchase of Reliant AI and its merger with Germany's Aleph Alpha, a combination reported to be worth about $20 billion. AISLE adds a third European engineering site, in Prague, to that structure.
How Is AISLE Funded, and What Does a Sale Imply?
AISLE raised an angel round and has not disclosed its size. Backers named at launch include Google's Jeff Dean, Hugging Face's Thomas Wolf, Datadog's Olivier Pomel, Microsoft's Aparna Chennapragada, podcaster Dwarkesh Patel and researcher Ian Goodfellow. No institutional lead investor or valuation has been made public.
That absence matters. A company that sells within 12 months of emerging from stealth, without a disclosed priced round, was likely more valuable as a capability inside a larger lab than as a standalone security vendor competing for enterprise budgets. The undisclosed price leaves outsiders unable to judge whether angel investors earned a meaningful return.
What Comes Next?
The first milestone is a definitive agreement, followed by regulatory and closing steps. Cohere has not given a timeline. Until then, AISLE remains independent.
The larger test is whether AISLE's open-source results carry over to commercial products. Buyers will want evidence that autonomous patching works in private codebases without introducing regressions. Rival AI labs are also building their own code-security tools, so Cohere's advantage depends on how fast it can package AISLE's research into something procurement teams can buy.
Outlook
Cohere is paying an undisclosed sum for a year-old team with a verifiable record in OpenSSL and curl, and it is putting that team in charge of security across the company. The deal strengthens its sovereign AI pitch and its European footprint, though it leaves open how much revenue AISLE's technology can generate outside open-source projects. Closing terms and the first Cohere Cyber product are the next things to watch.
