Illustration for: Cohere Signs LOI to Buy AI Bug-Hunting Startup AISLE

Cohere Signs LOI to Buy AI Bug-Hunting Startup AISLE

Cohere signed a letter of intent to buy AISLE, a San Francisco AI startup that hunts software vulnerabilities, adding security to the AI lab's pending $20 billion merger with Aleph Alpha.

ShareXLinkedInEmail

THE RUNDOWN

1

Cohere is assembling a broader business through its roughly $20 billion merger with Germany's Aleph Alpha, and AISLE would add a cybersecurity product line to that combined entity.

2

AISLE's AI found more than 500 new software bugs in its first year, including 12 in OpenSSL, the kind of result enterprise security buyers take seriously.

3

The deal signals AI labs are starting to acquire security tooling rather than just defend against it, a shift from a year mostly spent on model-safety defense.

4

AISLE was co-founded by Ondrej Vlcek, the former CEO of antivirus maker Avast, alongside engineers with backgrounds at Google DeepMind and Anthropic.

The VC Read

Value Add VC analysis

A letter of intent at an undisclosed price, weeks after a $20B Aleph Alpha merger was formalized, reads more like Cohere buying credibility and a CVE-issuing authority than buying meaningful revenue. The diligence item worth tracking: whether AISLE's customer contracts transfer cleanly, or whether this unwinds into a straight acquihire once the LOI period ends.

Analysis

Cohere has signed a letter of intent to acquire AISLE, a San Francisco-based AI cybersecurity startup that hunts software vulnerabilities, Reuters reported Thursday. Terms were not disclosed, and the deal would add a security product line to the broader AI business Cohere is assembling through its roughly $20 billion merger with Germany's Aleph Alpha.

What AISLE actually does

AISLE's AI system continuously maps an organization's software environment and hunts for exploitable bugs; the company says it found more than 500 new vulnerabilities in its first year, including 12 in OpenSSL, the open-source encryption library used across most of the internet. AISLE was co-founded by Ondrej Vlcek, the former CEO of antivirus maker Avast, alongside Stanislav Fort, previously of Google DeepMind, Google Brain, Stability AI and Anthropic, and Jaya Baloo, a former Avast colleague, according to Czech tech outlet Lupa.cz. The roughly 40-person startup, which operates out of Prague and San Francisco, emerged from stealth in October 2025 and has since obtained CVE Numbering Authority status, letting it formally assign vulnerability identifiers -- a credibility marker usually reserved for established security vendors.

“## Why Cohere, why now Cohere's strategy has shifted from pure model-building toward assembling a broader enterprise AI business.”

Why Cohere, why now

Cohere's strategy has shifted from pure model-building toward assembling a broader enterprise AI business. The Aleph Alpha combination, first disclosed in April 2026 and formalized as a definitive agreement in September, was framed as building a North American and European counterweight to OpenAI and Anthropic. Adding AISLE would give that combined entity a security product competing directly with Microsoft Security Copilot, Google's Mandiant and well-funded AI-security startups like Harmonic Security and Pluto Security, both of which raised fresh rounds this month.

However, a signed letter of intent is not a closed acquisition, and with terms undisclosed, there's no way yet to judge whether Cohere overpaid, underpaid, or structured this as a talent acquisition dressed up as a product deal. AISLE's actual revenue and customer base have not been reported publicly, which makes the deal's real strategic value hard to assess until Cohere discloses more at close.

The move also lands the same week Anthropic and OpenAI are fielding civil subpoenas from the US Federal Trade Commission over AI safety incidents, a reminder that security credibility is becoming as competitive a battleground among frontier labs as raw model performance.

ShareXLinkedInEmail

Key Sources

2 sources

Reported by Reuters · Analysis by Value Add Pulse.

← Back to Pulse

THE WIRE in your inbox— Tech, startup & VC news with The VC Read, a few times a week. Free to subscribe, no spam.

No spam, unsubscribe anytime. Sent via Substack · Privacy · or subscribe on Substack ↗