AI Firms and Workday Expand Into Cybersecurity Through Acquisitions

Summary
Workday acquired identity-governance startup C1.ai, Cohere announced plans to buy vulnerability-remediation firm Aisle, and The Information reported early OpenAI talks to acquire Trail of Bits. The article examines strategic and partnership implications.
Key points
- Workday acquired C1.ai, formerly ConductorOne, to provide identity governance for people and AI agents across business systems and cloud infrastructure.
- The Information reported that OpenAI was in early talks to acquire Trail of Bits; the article does not describe a completed deal.
- Cohere announced plans to acquire Aisle, aiming to expand autonomous vulnerability discovery and remediation capabilities.
- The article contrasts Promptfoo’s software-based LLM evaluation and automated red teaming with Trail of Bits’ consulting, research, and security reviews.
- Aisle’s COO said the company intends to continue supporting customer-preferred models and benchmarking models beyond Cohere’s.
- The acquisitions may create tension with existing partners when new owners offer competing identity or security products.
Article Details
- Event Type
- Cybersecurity-sector M&A: Workday acquired C1.ai; Cohere announced plans to acquire Aisle; The Information reported that OpenAI was in early talks to acquire Trail of Bits.
- Impact
- The deals bring identity governance and vulnerability discovery and remediation capabilities into larger HR and AI organizations. Aisle said it intends to continue supporting customer-preferred models and benchmarking providers beyond Cohere. The article notes that acquisitions could affect the startups’ independence, R&D investment, and relationships with third-party partners.
People
Vendors
Aislediscovery and remediation. The Toronto sovereign AI provider said the proposed acquisition will help Aisle deploy close to customer environments and continue model-agnostic benchmarking while integrating deeperC1.aiWorkday kicked the week off by acquiring C1.ai to give people and AI agents the right access to CRMs, code repositories, finance systems and cloud infrastructure from the day they join to the day they leave. C1.ai -CohereTwo days later, Cohere announced plans to purchase a Czech startup led by the former CEO of Avast to enhance its capabilities around autonomous vulnerability discovery and remediation. The Toronto sovereign AI providerOpenAIThat same day, The Information reported OpenAI was in early talks to buy Trail of Bits, a firm that finds and fixes vulnerabilities in open-source software. Trail of Bits, founded in 2012, employs 106 people and hasTrail of BitsThat same day, The Information reported OpenAI was in early talks to buy Trail of Bits, a firm that finds and fixes vulnerabilities in open-source software. Trail of Bits, founded in 2012, employs 106 people and hasWorkdayWorkday kicked the week off by acquiring C1.ai to give people and AI agents the right access to CRMs, code repositories, finance systems and cloud infrastructure from the day they join to the day they leave. C1.ai -
Tools
Codexsuch as the popular programming language Python, to find, review and fix bugs, with the help of OpenAI Codex tools, including models specialized for cybersecurity, according to The Information.Promptfooas a threat intelligence lead in the Federal Reserve. The talks come seven months after OpenAI bought Promptfoo for a similar purpose.