AISLE debuts autonomous AI tool to patch software vulnerabilities

AISLE has launched a cyber reasoning system that autonomously identifies, diagnoses, and remediates both known and zero-day software vulnerabilities within enterprise software environments.

The company, founded by Ondrej Vlcek, former Chief Executive Officer of Avast, Jaya Baloo, former Chief Information Security Officer at Rapid7, and Stanislav Fort, an early scientist at Anthropic, aims to address the increasing challenge of unresolved vulnerabilities in critical software infrastructure. According to the company, the system not only finds vulnerabilities but also writes and tests fixes before they go live, a process that marks a shift from the functions of traditional security tools.

AISLE's system has already discovered and remediated more than 100 vulnerabilities in major open source projects, including the Linux kernel, OpenSSL, and Apache. The founder of Curl, which is widely used in internet infrastructure, recently credited AISLE with detecting a previously unknown vulnerability in the project.

Increasing attack surface

Organisations continue to face pressure from malicious actors who are using AI to automate and scale exploits of software vulnerabilities. Unpatched vulnerabilities provide attackers with opportunities for compromise, and despite advances in detection, large backlogs of common vulnerabilities remain unresolved within many enterprises.

"AI is reshaping the economics of cybersecurity, but to date, it's almost entirely in favour of malicious actors - speeding up attacks and driving down the costs of weaponising vulnerabilities," said Ondrej Vlcek, Chief Executive Officer and co-founder of AISLE. "AISLE flips the advantage back to defenders by solving the hardest problem in security: fast and accurate vulnerability remediation. Developers and security professionals can now operate together at machine speed, get free of the backlog burden and finally move toward a future of self-defending software stacks."

Speed and verification

Traditionally, vulnerability scanners generate substantial volumes of alerts, often resulting in what is known as 'patch fatigue' among IT and security teams. While some new products incorporate AI to assist with discovery, these tools typically deliver only incremental improvements and, according to AISLE, struggle to address the scale of the problem or to verify fixes within the context of a company's complete software stack.

The AISLE system, designed as an AI-native cyber reasoning platform, quickly identifies vulnerabilities that might be missed by other tools and automatically generates patches and pull requests. Human experts remain part of the process, overseeing the review and approval of fixes prior to deployment.

The system builds a continually updated representation of an enterprise's software environment, learning from each interaction. Capable of simulating proposed changes, it can proactively detect regressions, outages, and related risks before new code is pushed to production. This is facilitated by its integration with code repositories and its ability to analyse complex dependency graphs.

Leadership and support

The AISLE leadership consists of domain specialists recognised within the cybersecurity and AI fields. Chief Executive Officer Ondrej Vlcek formerly served as President of Gen Digital, while Chief Operating Officer Jaya Baloo brings experience from roles at Rapid7, Avast, and KPN Telecom. Chief Scientist Stanislav Fort has worked in research at institutions including Google DeepMind and Anthropic.

The company is also backed by a group of angel investors with experience across the technology industry, including Jeff Dean, Chief Scientist at Google; Thomas Wolf, Chief Scientist at Hugging Face; Olivier Pomel, Chief Executive Officer at Datadog; and Aparna Chennapragada, Chief Product Officer at Microsoft.

Continuous remediation

Vlcek commented, "AISLE flips the advantage back to defenders by solving the hardest problem in security: fast and accurate vulnerability remediation. Developers and security professionals can now operate together at machine speed, get free of the backlog burden and finally move toward a future of self-defending software stacks."

Through its continuous, AI-driven scanning and real-time verification, AISLE's system aims to enable organisations to address vulnerabilities before they become widely exploited, and to patch software while minimising the risk of disrupting business operations. According to the company's statements, the transition from manual remediation to an autonomous process is intended to help enterprises respond to attackers' increasing use of automated tools with greater speed and confidence.

AISLE positions its technology as an approach to reducing outstanding vulnerabilities across enterprise environments, supporting defenders pursuing faster resolution of security issues within complex software ecosystems.