Cohere Signs LOI for AISLE: A CVE-Finding Startup That Caught 18 of 24 cURL Flaws

Cohere signed a letter of intent today to acquire AISLE, an AI vulnerability-scanning startup that has found more than 500 new CVEs since 2024 — including 18 of the 24 flaws patched in cURL's October 2026 release. The Prague team will become a Cohere Cyber unit. The deal is an LOI, not a closed transaction. It follows Cohere's merger with Aleph Alpha earlier this year.

This is a consolidation move, not a product move. Cohere is using the AISLE acquisition to position itself for the enterprise go-to-market where the Aleph Alpha merger put its flag. The security capability is the lever. The CVE track record is the credibility. The Prague team is the headcount.

The AISLE Track Record

AISLE has been operating since 2024. The company uses language models to find and triage vulnerabilities in source code, with a particular focus on memory-safety issues in C and C++ codebases. The 500+ CVE count includes:

• 18 of 24 flaws patched in cURL's October 2026 release
• Multiple OpenSSL advisories in 2025 and 2026
• Critical-severity findings in widely deployed open-source libraries across networking, crypto, and parsing
• A standing CVE finding rate that put AISLE in the top 10 of single-year CVE submitters in 2025

The cURL stat is the most quotable. cURL is one of the most-downloaded software packages in the world — billions of installs, embedded in everything from car infotainment to spacecraft ground control. A team finding 75% of cURL's monthly flaws in a single release cycle is not running toy scanners.

Why This Matters

Cohere is consolidating for the enterprise. The Aleph Alpha merger earlier this year gave Cohere a European footprint, a sovereign-cloud story, and a regulated-industry sales motion. AISLE adds a security capability and a CVE-finding track record that the enterprise security market already trusts. Together, the two acquisitions position Cohere as a credible European alternative to OpenAI/Anthropic for regulated buyers who need AI capability, sovereign deployment, and a security story in the same package.

The security AI category is consolidating. AISLE joins a small set of AI-driven security companies that have moved from research to enterprise procurement. The category includes established players (Snyk, Veracode, Checkmarx) and a wave of AI-native challengers. Cohere's LOI is a sign that the AI-native tier is reaching the size where the major model labs want to own the security capability rather than partner for it. Expect more consolidation in this tier over the next 12 months.

CVE-finding rate is a credibility metric. For a security company, the most defensible credibility is the public CVE list. AISLE has 500+. The acquisition is buying that list, the people who produced it, and the methodology that produced it. The methodology in particular — the way AISLE's models are tuned, the way findings are validated, the way false positives are filtered — is the asset a generic LLM cannot reproduce.

The LOI is the announcement; the deal is the story. LOIs signal intent, not closure. Expect a definitive agreement in 60–90 days, with regulatory review in the EU and Czechia. The interesting question is the post-close product strategy: does Cohere keep AISLE as a standalone scanner, integrate it into Cohere Cyber, or both? The Q1 2027 co-marketing timeline suggests both, with AISLE as the standalone SKU and Cohere Cyber as the integrated offering for Cohere's enterprise customers.

The Trade-Off

An LOI is not a closed deal. The price is not disclosed, the integration plan is not finalized, and the regulatory path has not been cleared. Treating the announcement as "Cohere owns AISLE" is premature.

The security product strategy also has a real integration cost. Cohere's enterprise customers are buying a model platform. The AISLE scanner is a security product. The path from "model platform with a security capability" to "enterprise security product" is not free — sales motion, customer support, deployment model, and the security review process all have to be built. Cohere has the runway; the question is execution.

The Bottom Line

Cohere signed an LOI to acquire AISLE, the Prague CVE-finding shop with 500+ credited CVEs. The deal is consolidation, not a product pivot — Cohere is building the European regulated-industry AI platform, and AISLE is the security layer. Expect a definitive agreement in 60–90 days and a Q1 2027 launch of the integrated Cohere Cyber offering. For security buyers evaluating AI-driven scanners: AISLE's CVE list is the credibility benchmark, and that benchmark is about to be embedded in a major model lab.