Cohere said on Thursday, 15 October 2026, that it had signed a letter of intent to buy AISLE, a cybersecurity startup that uses AI to find vulnerabilities in software, Reuters reported; the terms of the deal were not disclosed.
AISLE says its systems found more than 500 previously unknown vulnerabilities assigned CVEs across more than 100 codebases in its first year, including 18 of the 24 vulnerabilities fixed in curl’s latest release.
Business Pill · SOVEREIGN AI
A one-minute explainer of sovereign AI: who controls the model and the data. It teaches the general idea only and says nothing about any organisation in this story.
The key insight: As we read it, Cohere is buying a security research team as much as a product: AISLE says its three co-founders take a new Cohere Cyber unit, the global CISO post and an AI security research role tied to model training, and Cohere says it wants to explore how difficult, verifiable security problems can help evaluate and improve future models.
Cohere’s own post describes “a proposed agreement to acquire AISLE, the company building autonomous systems to discover and remediate previously unknown vulnerabilities in critical software.” AISLE’s post says the two companies “have signed an LoI for Cohere to acquire AISLE.”
AISLE says that when the transaction completes, its Prague headquarters will become Cohere’s Prague office. Reuters describes AISLE as a San Francisco-based startup with an engineering hub in Prague.
AISLE says it will share more details as the transaction progresses, and Reuters reports that the terms of the deal were not disclosed.
AISLE says it discovered 18 of the 24 vulnerabilities fixed in curl 8.23.0 on 14 October 2026, and more than 500 CVEs across more than 100 codebases in its first year, counts Cohere repeats in its 15 October announcement of a letter of intent to acquire AISLE.
Who Joins Cohere, and in What Roles
AISLE says its three co-founders will continue on the mission. Ondrej Vlcek, AISLE’s CEO, will join Cohere as Senior Vice President of Cohere Cyber, which AISLE describes as a new unit focused on bringing cybersecurity solutions to Cohere’s customers.
Jaya Baloo will become Cohere’s global Chief Information Security Officer, AISLE says. AISLE says Stanislav Fort, its CTO and Chief Scientist, will become Vice President, AI Security, and will work with Cohere co-founder and CTO Ivan Zhang to connect security research with core model development and training.
Reuters reports that AISLE was founded in 2025 by Vlcek, the former CEO of Czech antivirus maker Avast, with co-founders from Google DeepMind and Anthropic.
What AISLE’s Systems Found
Cohere’s post says AISLE discovered more than 500 previously unknown vulnerabilities assigned CVEs across more than 100 codebases in its first year, including all 12 vulnerabilities in OpenSSL’s January security release.
In its own 14 October post, AISLE says curl released version 8.23.0 fixing 24 previously unknown security vulnerabilities, and that AISLE discovered 18 of them, “or 75% of the total.” AISLE says that brings its 12-month total of curl findings to 35 CVEs and 160 bugs.
AISLE says it ran the curl audit after curl founder Daniel Stenberg reported that Anthropic’s Mythos, OpenAI’s Codex Security and ZeroPath had found no additional vulnerabilities in curl. Cohere’s post says these vulnerabilities are independently reviewed by the relevant software maintainers.
Why Cohere Says It Wants AISLE
Cohere’s post says security has become one of the most important factors determining successful enterprise AI adoption, and that addressing it requires a full-stack approach that brings together AI, cybersecurity, governance and secure deployment.
Cohere says it sees an opportunity in bringing AISLE’s autonomous security research closer to its frontier-model development and training, “while exploring how difficult, verifiable security problems can help evaluate and improve future models.”
Cohere lists what it expects the combination to strengthen, including governance, monitoring and observability for AI agents and autonomous workflows, and secure deployments across private cloud, on-premises and fully air-gapped environments.
The European Angle and the Aleph Alpha Deal
Cohere says the deal reflects its continued investment in Europe, following its acquisitions of Reliant AI and Aleph Alpha. Reuters writes that the tie-up would add cybersecurity to the business Cohere is assembling through its merger with Germany’s Aleph Alpha, a combination reported to be worth about $20 billion.
As we read it, the curl result is the deal’s calling card: AISLE says it found 18 of the 24 vulnerabilities fixed in curl 8.23.0 after curl’s founder reported that Anthropic’s Mythos, OpenAI’s Codex Security and ZeroPath had found no additional issues.
As we read it, Cohere is pitching security as part of the AI stack rather than a separate purchase: its post says enterprise adoption needs a full-stack approach bringing together AI, cybersecurity, governance and secure deployment, including private cloud, on-premises and air-gapped settings.
As we read it, the deal extends a European build-out: Cohere cites its acquisitions of Reliant AI and Aleph Alpha, and Reuters writes that AISLE would join the business Cohere is assembling with Aleph Alpha, a combination reported to be worth about $20 billion.
Cohere, on why it wants AISLE
“while exploring how difficult, verifiable security problems can help evaluate and improve future models”
Three Implications
COHERE’S CUSTOMERS Cohere says the combination is expected to strengthen governance, monitoring and observability for AI agents and support deployments across private cloud, on-premises and fully air-gapped environments.
AISLE’S TEAM AISLE says its Prague headquarters will become Cohere’s Prague office and its three co-founders will take security roles at Cohere.
OPEN-SOURCE MAINTAINERS Cohere says AISLE’s findings are independently reviewed by the relevant software maintainers; AISLE says they include 18 of the 24 vulnerabilities fixed in curl 8.23.0.
The framework puts it this way: “The Verifier Moat โ built by RLVR on domain-specific reward signals, building into a new asset class for reasoning-heavy verticals.”
As we read it, security research fits that description: Cohere says it wants to explore how difficult, verifiable security problems can help evaluate and improve future models, and says the relevant maintainers independently review the vulnerabilities AISLE finds.
The roles AISLE says its co-founders will take at Cohere once the transaction completes, and its Prague headquarters becoming Cohere’s Prague office, per AISLE’s 15 October 2026 post.
What Is Not Established
Neither company states a price or other financial terms, and Reuters reports that the terms were not disclosed. The announcement is a letter of intent, and neither post states closing conditions or a timetable.
Neither post gives AISLE’s revenue or headcount. The vulnerability counts are AISLE’s and Cohere’s own figures; we did not read curl’s own release notes or Stenberg’s posts, and the two sources describe AISLE’s base differently, Prague in AISLE’s post and San Francisco in Reuters’ report.
Business Engineer Framework
The Four Intelligence Moats
A Business Engineer framework on the four data pipelines that build lasting advantage in AI, from pretraining corpora to verifiers and harnesses.
Cohere signed a letter of intent on 15 October 2026 to acquire AISLE, whose AI systems AISLE says found more than 500 CVEs in a year, including 18 of the 24 fixed in curl 8.23.0. The terms were not disclosed, Reuters reported.
AISLE’s three co-founders take security roles at Cohere, including a new Cohere Cyber unit and the global CISO post, according to AISLE.
A note on sourcing. We read Cohere’s and AISLE’s 15 October 2026 posts, the opening of AISLE’s 14 October curl post and Reuters’ 15 October report in full. The vulnerability counts are the companies’ own; we did not read curl’s release notes. The September, 6 October and 15 October items come from our own earlier reporting.
Gennaro Cuofano is a CRO and tech executive who has worked in AI since late 2015, starting with bringing NLP, natural-language generation, voice and chatbot products to the marketing industry. His background is in law and finance: he holds a Master's degree in Law and an International MBA with an emphasis on corporate finance (LUISS Business School and the University of San Diego, 2012), and worked as a financial analyst at a real-estate investment firm in San Diego and as an assistant controller. His work focuses on business model strategy, business engineering and, more broadly, structural analysis: how companies make money, read from their own filings. He created FourWeekMBA and leads research there and at The Business Engineer, his newsletter on AI and business strategy, with over 95,000 subscribers and more than 1,000 published analyses. His writing has also appeared on Entrepreneur (for example, How to Digitize a Family Business in Europe) and HackerNoon. Find him on LinkedIn and Substack. See how we source.
Scroll to Top
Discover more from FourWeekMBA
Subscribe now to keep reading and get access to the full archive.
