Cohere has signed a letter of intent to acquire AISLE, a cybersecurity startup whose artificial-intelligence systems search for vulnerabilities in widely used software. The announcement, made on October 15, 2026, describes a proposed transaction rather than a completed acquisition. Financial and other deal terms were not disclosed.

The proposed combination would give Cohere a security-focused business called Cohere Cyber and add AISLE's vulnerability-research capabilities to Cohere's sovereign-AI platform. The companies say the objective is to help enterprises and public-sector organizations deploy AI in private cloud, on-premises and fully air-gapped environments. Those are stated plans, not evidence that the new unit or the acquisition is already operational.

What was announced

Fact: Cohere announced on October 15, 2026 that it had signed a letter of intent to acquire AISLE. Cohere's announcement calls the agreement a proposed acquisition, while Reuters reported the same day that the terms were undisclosed. A letter of intent records an intention to pursue a transaction; it does not by itself prove that closing conditions have been met or that ownership has transferred.

Reuters described AISLE as an AI cybersecurity company that uses AI to detect vulnerabilities in software. The report also said the transaction would add cybersecurity to the business entity Cohere is assembling through its merger with Germany's Aleph Alpha. The relevant point for this announcement is narrower: AISLE is proposed as an addition to Cohere's security and sovereign-AI strategy, not presented as a separately completed purchase.

Status: The acquisition was not closed in the sources available for this article. No purchase price, valuation, payment structure, closing date or other commercial terms were published. Readers should therefore treat statements about future integration, staffing and products as plans subject to completion of the transaction and any customary conditions.

What Cohere Cyber is intended to do

Cohere says the proposed deal will create or expand Cohere Cyber, a global cybersecurity business. The planned remit spans cybersecurity, corporate security, AI security research and the protection of AI systems. Cohere's stated customer-facing goals include threat detection, stronger governance and observability for AI agents, protection of sensitive data, and support for deployments where customers retain control of infrastructure.

The private-deployment language is significant because sovereign AI is about more than model quality. Organizations handling government information, regulated records or critical infrastructure may require data to remain within a particular legal or operational boundary. An on-premises or air-gapped deployment can reduce dependence on external connectivity, but it also places more responsibility on the customer and supplier for patching, monitoring, identity controls, incident response and the security of the surrounding software stack.

Plan, not current capability: Cohere says AISLE's technology is expected to help identify, prioritize and respond to emerging threats and to strengthen security across enterprise and public-sector deployments. The announcement does not provide product specifications, service-level commitments, independent performance benchmarks or a timetable for commercial availability. It also does not say that every Cohere customer will receive AISLE technology automatically.

The proposed strategy reflects a full-stack view of AI security. Models, retrieval systems, agent tools, orchestration code and deployment infrastructure can all introduce risk. A vulnerability-discovery system could be useful before release, during software maintenance and while organizations investigate a suspected weakness. Whether those benefits materialize will depend on validation, responsible disclosure, remediation quality and the ability to operate inside customers' security processes.

What is known about AISLE's findings

Company claim: Cohere says AISLE found more than 500 previously unknown vulnerabilities assigned CVEs across more than 100 codebases during its first year out of stealth. Cohere also says AISLE found all 12 vulnerabilities in OpenSSL's January security release and 18 of the 24 CVEs in a recent curl release. These figures are claims reported by Cohere and AISLE, and this article does not treat the aggregate total as independently established by the four cited sources.

The wording matters. A CVE is a published identifier for a vulnerability, while finding a weakness, validating its impact, coordinating disclosure and producing a fix are separate stages. Cohere says the findings were independently reviewed by relevant maintainers. That is a description of the company's account of the work, not a blanket conclusion that every vulnerability in the more-than-500 figure has the same severity, exploitability or operational consequence.

The curl record supplies a more specific external data point. In a post dated October 14, 2026, curl maintainer Daniel Stenberg wrote that Aisle's AI-powered tooling had contributed to 35 published curl vulnerabilities and CVE IDs. He described positive cooperation with Aisle, said its employees had authored several dozen curl commits, and said the project had made the audit report available. This validates a substantial Aisle-associated curl record, but it is not the same number as the 18 of 24 vulnerabilities cited by Cohere for a particular recent release.

OpenSSL provides another important distinction. The Node.js Project's security assessment, last updated January 28, 2026, says the OpenSSL project released an advisory containing 12 CVEs. Node.js concluded that three affected Node.js and that nine did not affect it. The Node.js page independently corroborates the existence of a 12-CVE OpenSSL advisory; it does not independently confirm that AISLE discovered all 12, nor does it establish Cohere's more-than-500 total.

What the sources do not show: They do not supply a complete list of the 500-plus vulnerabilities, a common severity distribution, an independently audited methodology, or a comparison against a controlled baseline. Those omissions do not negate the reported work. They do mean that readers should keep company-reported totals, maintainer testimony and third-party release information in their proper categories.

People, Prague and the European angle

Planned staffing: Reuters reported that AISLE's 50 full-time employees are expected to join Cohere and that Ondrej Vlcek is expected to lead the new cybersecurity unit. Cohere's own announcement gives more detail about the planned leadership structure: Vlcek is named Senior Vice President of Cohere Cyber; Jaya Baloo is named Chief Information Security Officer; and Stanislav Fort is named Vice President of AI Security. Because the transaction is proposed and not closed, these should be read as announced future roles.

Cohere also says it plans a substantial long-term investment in Prague, expanding AISLE's existing presence and establishing the city as a global center for AI cybersecurity and autonomous security systems. That is a corporate plan, not a completed investment or a confirmed headcount forecast. It nevertheless explains why the announcement presents the deal as part of a European technology strategy rather than only as a product acquisition.

The European context has two sides. Customers and governments across the region are seeking advanced AI with stronger control over data, infrastructure, compliance and security. At the same time, security research is inherently international: open-source components such as OpenSSL and curl are used across borders and industries. A Prague-centered team could therefore serve both a regional sovereign-AI narrative and a global software-security function.

Why the proposed deal matters

The announcement illustrates a broader shift in how AI companies describe cybersecurity. AI is being positioned not only as a source of new automation but also as a way to inspect complex code at a scale that human teams may find difficult. The value proposition is strongest when automated discovery is paired with human review, maintainer coordination and fixes that can be verified.

For Cohere, the proposed acquisition would connect model development with security research. Cohere says difficult, verifiable security problems could help evaluate and improve future models, while AISLE's systems could gain access to Cohere's models and deployment infrastructure. That is a stated rationale rather than a demonstrated result. It also raises practical questions about how research data, sensitive source code and vulnerability information would be separated, governed and protected.

For prospective customers, the relevant test will be operational. A security product for a private or air-gapped environment must work with restricted data flows, local identity systems, patch windows and existing incident-response procedures. It must also explain findings clearly enough for engineers to reproduce, prioritize and remediate them. The acquisition announcement offers no benchmark for those requirements, so customer impact cannot yet be quantified.

What to watch next: The clearest milestones would be closing of the transaction, publication of product details, evidence of customer deployments, additional maintainer-verified findings, and information about how Cohere Cyber handles responsible disclosure. Any future claim should be assessed by its source: company announcement, independent maintainer, regulator, customer or technical documentation.

Open questions

Transaction and governance

The public announcement leaves the purchase price, definitive agreement, closing conditions and post-closing legal structure unanswered. It also does not explain how AISLE's technology and staff will be integrated with Cohere's existing security organization or with the broader Aleph Alpha combination described by Reuters.

Evidence and measurement

The sources document strong reported activity, especially the curl maintainer's account, but they do not offer a full independent audit of the 500-plus figure. Future disclosures could clarify discovery dates, CVE assignment, severity, affected versions, remediation status and the boundaries between AISLE's automated tooling and human researchers.

Deployment and trust

Cohere promises support for private cloud, on-premises and air-gapped environments. The practical questions are how updates reach isolated installations, how telemetry is handled, who controls vulnerability data, and how customers can verify that an AI security system itself does not expand their attack surface.

Frequently asked questions

Has Cohere completed the acquisition of AISLE?

No. The October 15, 2026 announcement concerns a signed letter of intent and a proposed acquisition. The available reports say the terms were undisclosed and do not report a closing.

What is Cohere Cyber?

Cohere Cyber is the planned cybersecurity business Cohere says it will establish or expand around the combination. Its announced goals include threat detection, AI security research, governance, observability and support for secure private, on-premises and air-gapped deployments.

How many vulnerabilities did AISLE find?

Cohere says AISLE found more than 500 previously unknown vulnerabilities assigned CVEs across more than 100 codebases. That is a company-reported figure. Separately, curl maintainer Daniel Stenberg reported 35 published curl vulnerabilities and CVE IDs associated with Aisle's work. The figures describe different scopes and should not be added together.

Does the Node.js source confirm AISLE found all 12 OpenSSL vulnerabilities?

No. The Node.js assessment confirms that the January 2026 OpenSSL advisory included 12 CVEs and analyzes which affected Node.js. It does not assess who discovered them or confirm AISLE's attribution. Cohere's statement that AISLE found all 12 remains a company claim in the sources used here.

Who is expected to lead the new cybersecurity unit?

Reuters reported that Ondrej Vlcek is expected to lead it. Cohere names him as the planned Senior Vice President of Cohere Cyber and also lists planned leadership roles for Jaya Baloo and Stanislav Fort. These appointments are tied to the proposed transaction and future organization.

References

  1. Cohere, Cohere to acquire AISLE to advance cyber-resilient sovereign AI, published October 15, 2026. Primary source for the proposed agreement, Cohere Cyber plans and company-reported findings.
  2. Reuters, Cohere moves to buy AI cybersecurity startup Aisle, October 15, 2026. Source for undisclosed terms, proposed staffing and Vlcek's planned leadership.
  3. Daniel Stenberg, A curl audit by Aisle, October 14, 2026. Curl maintainer's account of 35 published curl vulnerabilities and CVE IDs.
  4. Node.js Project, OpenSSL Security Advisory Assessment, January 2026, last updated January 28, 2026. Source for the 12-CVE OpenSSL advisory and Node.js's separate three-CVE assessment.