Cohere is buying its way into cybersecurity. The Canadian AI lab said Thursday it has signed a letter of intent to acquire AISLE, a San Francisco-based startup that uses AI to hunt for software vulnerabilities. It’s a move that adds a security arm to the roughly $20 billion AI group Cohere is assembling with Germany’s Aleph Alpha.

The Cohere AISLE acquisition is, for now, just a letter of intent, not a signed purchase agreement, and not a closed deal. But the target is real enough. AISLE was founded in 2025 by Ondrej Vlcek, the former CEO of Czech antivirus maker Avast, with co-founders drawn from Google DeepMind and Anthropic. Reuters, the Economic Times, and Chosun Biz all reported the deal on October 15. Terms were not disclosed.

And the startup’s track record is unusually easy to verify for a one-year-old company. AISLE said its AI found more than 500 new bugs in widely used software during its first year. The most eye-catching: 12 vulnerabilities in OpenSSL, the free encryption program that guards internet traffic for banks, governments, and messaging apps. All were fixed after discovery.

Why Cohere wants to buy AISLE

Cohere isn’t buying AISLE for the product revenue. It’s buying for the angle.

The company is in the middle of merging with Aleph Alpha in a combination reported to be worth about $20 billion, the centerpiece of a strategy to build a serious European AI alternative. AISLE’s engineering hub sits in Prague, and Cohere framed the acquisition as continued investment in Europe, deepening its presence across the region.

There’s a business logic underneath the geography. “Increasingly capable AI systems are transforming both cybersecurity and the threats organizations face, and defensive capabilities must advance just as quickly,” Cohere said in a statement.

The pitch is aimed squarely at enterprise and public-sector buyers. Cohere said the combined group’s security and threat-detection capabilities would be offered with private deployment available on the customer’s own system, a deliberate nod to governments and large companies that won’t run their data through someone else’s cloud.

That matters right now. A FII Institute report released this month found global AI spending reached $400 billion in 2026, with 88% of organizations using AI, but 73% of respondents cited security concerns as a key challenge. Security has become one of the biggest friction points between AI pilots and AI in production. Cohere clearly wants to own both sides of that transaction.

What Vlcek brings to the table

Vlcek isn’t a first-time founder guessing at security. He ran Avast, one of the world’s largest consumer antivirus companies, through the era when endpoint security went from selling boxed software to a cloud-subscription business. His co-founders come from Google DeepMind and Anthropic, which covers the frontier-model side of the house.

According to Chosun Biz, Vlcek is set to join Cohere as senior vice president of a newly created security organization called “Cohere Cyber,” which would link AISLE’s security capabilities directly to Cohere’s model development and training. The stated goal: evaluate and improve future AI models while building stronger cybersecurity systems. In other words, it would use the same models Cohere sells to make the security product better, and using the security operation to stress-test the models.

It also signals how the AI labs are repositioning themselves. Anthropic spent this week talking about AI agent safety research. Nvidia just committed $250 million in compute to UK AI safety work. Google has its Big Sleep vulnerability-finding agent and a public SynthID detector. The race to build the best AI is increasingly also a race to prove the AI won’t burn your company down.

Why this matters

Twelve OpenSSL bugs found by a startup that barely existed a year ago is the detail that makes this deal more than a merger-press-release footnote. OpenSSL isn’t some obscure library. It’s the encryption backbone for enormous parts of the internet. An AI system that can find flaws like that at scale is genuinely useful, and a lab that owns that capability has something to sell to exactly the customers most afraid of AI adoption.

The Cohere-Aleph Alpha combination was already one of the biggest AI bets outside the US giants. AISLE adds the piece every enterprise buyer is asking about: security. If Vlcek’s “Cohere Cyber” unit works as described, Cohere stops being just a model vendor and starts being the company that sells you the model and the insurance on the model.

The letter of intent is step one. Watch whether the terms — and the full acquisition agreement — follow.

Frequently asked questions

What is the Cohere AISLE acquisition? On October 15, 2026, Canadian AI lab Cohere signed a letter of intent to buy AISLE, a San Francisco-based cybersecurity startup that uses AI to detect software vulnerabilities. Deal terms were not disclosed.

Who founded AISLE? AISLE was founded in 2025 by Ondrej Vlcek, the former CEO of Czech antivirus company Avast, along with co-founders from Google DeepMind and Anthropic. Its engineering hub is in Prague.

How does this fit the Cohere Aleph Alpha merger? Cohere is merging with German AI lab Aleph Alpha in a combination reported at about $20 billion. Buying AISLE adds a cybersecurity arm to that group, aimed at enterprise and public-sector clients with private, on-premises deployment.

What did AISLE’s AI actually find? In its first year, AISLE said its AI discovered more than 500 previously unknown bugs in widely used software, including 12 vulnerabilities in OpenSSL, the encryption library used by banks, governments, and messaging apps. All were fixed after discovery.

Sources: Reuters, Economic Times, Chosun Biz, FII Institute