Cohere plans senior roles for all three Aisle founders in its intended purchase of the security startup
Cohere signed a letter of intent on Oct. 15 to buy Prague-based Aisle, an AI security startup with about 50 staff. Cohere's stated reason is a sovereign platform for customers.
The Investor · Invest desk

Key figures: over 500 previously unknown vulnerabilities Aisle uncovered in its first year, per Cohere; 18 of the 24 vulnerabilities addressed in the latest curl release found by Aisle's system, per Aisle; about 50 Aisle full-time employees who will join Cohere.
| Figure | Value | Note | Claim |
|---|---|---|---|
| Vulnerabilities found in first year, over, per Cohere | 500 vulnerabilities | 15 | |
| Curl vulnerabilities found, per Aisle | 18 vulnerabilities | of 24 addressed in latest curl release | 16 |
| Staff to join Cohere, about | 50 employees | 10 |
What happened
- Aisle CEO Ondřej Vlček would lead Cohere Cyber as senior vice-president, co-founder Jaya Baloo would become global CISO, and co-founder Stanislav Fort would be vice-president of AI security.
- Aisle claimed this week that its system found 18 of the 24 vulnerabilities fixed in the latest curl release, while models from Anthropic and OpenAI found no issues.
- Cohere is also set to acquire Germany's Aleph Alpha, subject to regulatory approvals, and has already bought Reliant AI.
Why it matters
- constraint BetaKit lists incidents at OpenAI, Anthropic and Google, yet Cohere is the only company in the story buying a team, so the lab-wide thesis has a sample of one.
- cost The price is undisclosed, so Cohere's spend per head cannot be computed. Whatever it is, it buys about 50 people and results that Aisle and Cohere reported themselves.
- precedent Aisle would be Cohere's third acquisition aimed at buyers wary of US AI giants. Three such deals set an expectation that sovereignty demands get answered by buying teams.
The case that frontier labs are buying security capability in-house has one deal behind it so far, and the buyer is Cohere [1]. BetaKit's context paragraph lists incidents at OpenAI, Anthropic and Google, plus an attempted agentic hack of Library and Archives Canada [13].
Two motives are on the page, and they point different ways. BetaKit opens by saying Cohere hopes to make its own AI platforms more resilient to cybersecurity threats [9], which is the in-house reading. Cohere's announcement sells the deal to customers: it said security "is becoming the defining challenge of enterprise AI" [6], and that buyers want to run in "private cloud, on-premises, and fully air-gapped" environments [7]. Co-founder Ivan Zhang wrote in an X post that defenders face a tradeoff between securing their systems and exposing their intellectual property and telemetry to a provider [5]. Zhang's complaint is about where a customer's data sits, so the perimeter being protected is the customer's first and Cohere's second. With Aisle, Zhang wrote, Cohere will "continue to empower defenders with a truly sovereign platform that they can fully trust to secure their most critical systems" [4].
Then the results, all of which come from the seller or the buyer. Cohere said Aisle's systems found more than 500 previously unknown vulnerabilities in their first year [15]. Spread over about 50 staff [10], that is at least 10 per head [18] (the 50 is today's headcount, not an average over the year, so the figure moves with whatever the early team looked like). Aisle also claimed this week, per BetaKit, that its system found 18 of the 24 vulnerabilities fixed in the latest curl release, or 75% [17], while models from Anthropic and OpenAI found no issues [16].
A company founded in 2025 [15] has had about a year to build anything, so most of what Cohere is buying is people: 50 of them [10], three founders in senior roles [11], and records that include running Avast and working at Anthropic and DeepMind [3]. Cohere is taking all of the staff, and Aisle's Prague headquarters becomes a Cohere office [14]. Neither report includes a price or a closing date, so a cost per head cannot be computed.
We think the best-supported version is a sales feature for sovereignty-minded buyers. Cohere said the purchase should help it build a platform that pairs frontier models and agentic applications with security, and expand in Europe, where buyers want security, privacy, compliance and data sovereignty [8]. It follows Aleph Alpha, which Cohere is set to acquire subject to regulatory approvals, and Reliant AI, which it has already bought [12]. Two other readings fit the same facts: a talent purchase built around the founders, or the first of several lab-side deals. The third reading is the one the angle needs, and it stays unproven until a second lab buys a security team.
What to watch
- A price, closing date or definitive agreement for Aisle, and whether Aleph Alpha clears its regulatory approvals, since both deals follow the same sovereignty pitch.
- Any acquisition of a security team by Anthropic, OpenAI or Google; one would turn a single deal into the pattern the angle claims.
- Whether the curl result, 18 of 24 against none for Anthropic and OpenAI models, is reproduced by someone other than Aisle.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+30
- Incentives70
- Confidence60
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Toronto AI company Cohere announced it had signed a letter of intent to acquire Prague-based AI cybersecurity company Aisle, which develops tools to identify software vulnerabilities.
- [2]
Cohere announced the proposed acquisition of Aisle on Thursday, Oct. 15.
- [3]
Aisle was launched a year ago by Vlček, the former CEO of antivirus company Avast, with Baloo and Fort; Fort worked at Anthropic and DeepMind.
- [4]
Cohere co-founder Ivan Zhang wrote in an X post that with Aisle, Cohere will "continue to empower defenders with a truly sovereign platform that they can fully trust to secure their most critical systems."
- [5]
Zhang wrote that many cyber defenders have to make a tradeoff between securing their systems and "exposing their [intellectual property] and telemetry to a provider" that does zero data-retention performatively.
- [6]
Cohere said security "is becoming the defining challenge of enterprise AI" in announcing the proposed acquisition.
- [7]
Cohere said organizations are looking for AI partners that can offer the flexibility to operate in "private cloud, on-premises, and fully air-gapped" environments without sacrificing security or control.
- [8]
Cohere said the acquisition is designed to help it build a platform combining frontier AI models and agentic applications with advanced security capabilities, and to expand its presence in Europe, where governments and businesses seek partners meeting security, privacy, compliance and data sovereignty requirements.
- [9]
BetaKit wrote that Cohere is hoping to make its AI platforms more resilient to cybersecurity threats by acquiring a company that detects software vulnerabilities with AI.
- [10]
Aisle's approximately 50 full-time employees will all join Cohere, an Aisle spokesperson told BetaKit.
- [11]
Aisle CEO Ondřej Vlček will join Cohere as senior vice-president of a new cybersecurity unit called Cohere Cyber; co-founder Jaya Baloo will become Cohere's global chief information security officer; co-founder and CTO Stanislav Fort will become vice-president of AI security.
- [12]
Cohere is set to acquire Germany's Aleph Alpha, subject to regulatory approvals, and has also bought Montreal- and Berlin-based Reliant AI, as it looks to develop a sovereign AI alternative for organizations wary of reliance on US AI giants.
- [13]
BetaKit reported that OpenAI revealed its agents organized to hack Hugging Face, that Anthropic and Google have also disclosed hacking incidents, and that the Canadian government said there had been an attempted agentic hack of Library and Archives Canada.
- [14]
Aisle's Prague headquarters, which hosts an engineering hub, will become Cohere's Prague office, the company said.
- [15]
Founded in 2025, Aisle uncovered more than 500 previously unknown vulnerabilities in complex production software in its first year, Cohere said.
- [16]
Aisle claimed this week that its AI security system found 18 of the 24 vulnerabilities addressed in the latest release of curl, while models from Anthropic and OpenAI found no issues.
- [17]
18 of 24 curl vulnerabilities is 75%.
- [18]
More than 500 vulnerabilities across about 50 employees is at least 10 vulnerabilities per employee.
Get this ledger inside ChatGPT. Ask about any of our stories and the answer brings its figure, each claim’s verdict and the sources. Free, no account.
Sources
3 independent publishers whose own reporting we read for this story.
- betakit.comCohere to acquire Czech AI cybersecurity firm Aisle, set up new cyber division
1 article · October 15, 2026
- channelnewsasia.comCohere moves to buy AI cybersecurity startup AISLE
1 article · October 15, 2026
- mezha.netCohere підписала лист про наміри придбати стартап з кібербезпеки AISLE, що використовує ШІ
1 article · October 15, 2026
- pymnts.comAI Startup Cohere Moves to Acquire Cybersecurity Firm AISLE
1 article · October 15, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.