Cohere signs letter of intent to buy AISLE for autonomous software security

Cohere is seeking to bring automated software security into its AI platform. On October 15, 2026, the company announced a letter of intent to acquire AISLE, which builds autonomous systems that find, validate and help fix previously unknown software vulnerabilities. Cohere says the proposed deal would strengthen security for enterprise and government AI deployments.

The transaction remains proposed, not a completed acquisition. Cohere did not disclose a purchase price or say the deal had closed. Its announcement describes the capabilities it expects to combine, rather than a newly available security product for customers.

The security work Cohere wants to bring inside

Founded in 2025, AISLE combines foundation models with specialized security expertise, large-scale code analysis, validation and automated remediation. Its work targets complex software already in production. The process goes beyond spotting a possible flaw: AISLE’s systems are designed to validate the vulnerability and help address it, according to Cohere.

Cohere points to AISLE’s first-year record as evidence of that approach. It says the company found all 12 vulnerabilities in OpenSSL’s January security release and 18 of the 24 vulnerabilities assigned CVE identifiers in curl’s latest release. Those figures are Cohere’s account of AISLE’s results.

More than 500Previously unknown vulnerabilities

Cohere says AISLE discovered more than 500 previously unknown vulnerabilities that received CVE identifiers.

More than 100Codebases

Those discoveries spanned more than 100 codebases during AISLE’s first year, according to Cohere.

Cohere says the relevant software maintainers independently review these vulnerabilities. That review is an important part of the record it presents: the claimed results concern previously unknown flaws assessed by the people maintaining the affected software, not just potential weaknesses identified by an automated scan.

From software flaws to AI deployments

The proposed purchase responds to a security problem Cohere describes among enterprises and governments moving AI into production. Those organizations must manage data protection, governance, regulatory compliance and software vulnerabilities, alongside risks from more autonomous AI systems. Cohere argues that meeting those needs requires security and deployment controls as well as capable models.

Cohere calls its offering a sovereign AI platform, emphasizing customers’ control over their AI strategy, data, infrastructure and governance. AISLE would add autonomous vulnerability research to a platform that combines models, applications using AI agents and secure deployment infrastructure. The company identifies several intended customer benefits:

• Stronger security and threat detection for enterprise and public-sector deployments, with improved protections for sensitive organizational data and mission-critical systems.
• Better governance, monitoring and visibility into AI agents and the autonomous workflows they carry out.
• Support for secure deployments in private clouds, on customer premises and in fully air-gapped environments, alongside systems that identify, prioritize and respond to emerging threats.

Security problems as a test for future models

Cohere also sees a research role for the combination. It wants to bring AISLE’s autonomous security work closer to its model development and training. The premise is that a foundation model and the specialized system built around it can improve each other, rather than treating model capability as the only source of progress.

Specifically, Cohere wants to explore whether difficult security problems with verifiable answers can help evaluate and improve future models. That remains a research ambition, not a demonstrated outcome of the proposed acquisition. Its operational goal is similarly forward-looking: making the discovery, validation and repair of software vulnerabilities a continuous, scalable capability for protecting critical systems.