The Cohere AISLE deal is a signed letter of intent, not a finished purchase: Cohere plans to buy the AI security startup that finds and fixes software bugs. AISLE says its scanners found 18 of the 24 flaws fixed in curl’s latest release. Price and closing date haven’t been shared.
Cohere and AISLE announced the plan on October 15, 2026. Here’s what’s confirmed, what isn’t, and why it matters if you run or ship software.
Quick facts, so you can stop here if you’re short on time:
- Announced October 15, 2026, as a letter of intent to acquire.
- Price, structure and closing date have not been disclosed.
- AISLE’s CEO becomes Senior VP of a new unit called Cohere Cyber.
- AISLE’s Prague headquarters becomes Cohere’s Prague office once the deal closes.
A letter of intent usually comes before final paperwork, so details could still change.
What is AISLE, and what does it actually do?
AISLE launched about a year ago to build AI systems that find and fix vulnerabilities in critical software. It has offices in San Francisco and Prague. Former Avast CEO Ondrej Vlcek started it with two co-founders.
The company says it has found more than 500 previously unknown vulnerabilities, each assigned a CVE, across more than 100 codebases. Those numbers come from AISLE’s own announcement, so treat them as the company’s claims rather than an independent audit.
AISLE also says it found all 12 vulnerabilities in OpenSSL’s January security release. That matters because OpenSSL protects a huge share of the web’s encrypted traffic.
Why the curl result got everyone’s attention
The headline claim is that AISLE found 18 of the 24 CVEs fixed in curl’s latest release. curl is a tool built into countless apps, phones and servers, so bugs there ripple far.
It’s also a codebase that human reviewers have picked over for years. Finding most of a release’s bugs there suggests AI scanners are getting good at the kind of flaws people miss.
If you’ve been following AI coding tools, this fits a pattern. We covered how GitHub’s agentic autofix now repairs code scanning alerts and how Claude Code wrote a Linux driver from scratch. Security is the next place AI agents are moving in.
Who runs what at Cohere after the deal
AISLE’s leaders are getting senior jobs, which tells you Cohere wants the team, not just the software. The planned roles look like this:
| Person | Planned role | What it covers |
|---|---|---|
| Ondrej Vlcek (AISLE CEO) | Senior VP, Cohere Cyber | Runs the new cybersecurity unit |
| Jaya Baloo | Global Chief Information Security Officer, Cohere | Security for Cohere itself |
| Stanislav Fort | VP, AI Security | Leads AI security research with Cohere CTO Ivan Zhang |
Fort’s job is the interesting one. He’ll connect security research with how Cohere trains its models, so lessons from finding bugs can feed back into the models themselves.
Why Cohere wants this: sovereign AI and Europe
According to CP24, Cohere is pitching the deal as a step toward sovereign AI and a bigger European presence. It follows Cohere’s earlier purchases of Aleph Alpha and Reliant AI.
Cohere has also promised a substantial long-term investment in Prague. For a company that sells mostly to businesses and governments, owning a security arm is a clear selling point.
AISLE’s message to current customers is that nothing changes. In its words, “Our mission remains unchanged,” with the focus on continuity and stronger products.
What this means for developers and everyday users
If you maintain software, expect more AI-found bug reports, and probably more patches. That’s good for security, but it can also mean a busier queue for open-source maintainers.
For everyday users, the benefit is indirect. Fewer hidden bugs in libraries like curl and OpenSSL means fewer ways in for attackers, even if you never hear about the fix.
The unknown is how Cohere will package this. We don’t yet know if Cohere Cyber will sell scanners as a product, bundle them with its models, or both.
What we still don’t know
A letter of intent isn’t a promise to close. Regulators, funding terms and due diligence can all change the outcome, and the companies haven’t said when they expect to finish.
We also don’t know whether AISLE’s current products will stay available to everyone. The company says continuity is the goal, but customers should watch for updates on pricing and support.
It’s also worth remembering that bug counts depend on how you measure them. A tool that finds many flaws is useful, but severity matters just as much as quantity.
Frequently Asked Questions
Has Cohere finished buying AISLE?
No. Cohere has only signed a letter of intent. The companies say more details will be shared as the transaction progresses.
How much is Cohere paying for AISLE?
It hasn’t been disclosed. Neither company’s announcement includes a price, deal structure or closing timeline.
What is Cohere Cyber?
It’s a new Cohere unit for cybersecurity products. AISLE CEO Ondrej Vlcek is set to lead it as Senior Vice President.
Did AISLE really find 18 of curl’s 24 bugs?
That’s AISLE’s own claim, published in its announcement. We haven’t seen an independent audit confirming the count.
My take: this is a smart move if Cohere follows through on the “security feeds model training” idea. Keep an eye on whether the deal closes and what Cohere Cyber ships first. Until then, treat the big numbers as promising claims, not proof.
Leave a Reply