Cohere to acquire AISLE to launch Cohere Cyber for sovereign AI security

Cohere has announced a proposed agreement to acquire AISLE, a company specializing in autonomous systems for discovering and remediating unknown software vulnerabilities. This acquisition marks the launch of Cohere Cyber, a new global cybersecurity business unit designed to help enterprises and governments secure AI systems against complex threats.

AISLE's Track Record in Vulnerability Discovery

Founded in 2024, AISLE combines foundation models with specialized security expertise to analyze complex production software. In its first year out of stealth, the company discovered more than 500 previously unknown vulnerabilities assigned CVEs across over 100 codebases. Notable achievements include identifying all 12 vulnerabilities in OpenSSL's January security release and 18 of the 24 CVEs in curl's latest release.

Leadership and European Expansion

AISLE’s three founders will assume leadership roles within Cohere:

• Ondrej Vlcek will serve as Senior Vice President, Cohere Cyber, leading the new global cybersecurity business.
• Jaya Baloo will become Cohere’s Chief Information Security Officer.
• Stanislav Fort will join as Vice President, AI Security, focusing on core model research and training.

Cohere plans to make a substantial long-term investment in Prague, establishing the city as its global center for AI cybersecurity and autonomous security systems. This move follows previous acquisitions of Reliant AI and Aleph Alpha, further deepening Cohere's presence in Europe.

Strategic Implications for Sovereign AI

The integration of AISLE’s technology aims to provide a full-stack approach to security, combining AI, cybersecurity, governance, and secure deployment. The combined capabilities are expected to enhance threat detection, strengthen governance for AI agents, and support secure deployments in private cloud, on-premises, and air-gapped environments. By merging autonomous vulnerability research with frontier model development, Cohere seeks to make the discovery and remediation of software vulnerabilities a continuous, scalable capability.