AISLE: Autonomous C analyzer credited with 12 of 12 OpenSSL CVEs in one release
===============================================================================

AISLE is an autonomous analyzer for C source code credited with all twelve CVEs in OpenSSL's 27 January 2026 release (three dating to 1998 to 2000), twenty OpenSSL zero-days in six months, and six low-severity curl CVEs in August 2026 after curl's maintainer noted that Mythos and Codex Security had reported none.

Maintainer: AISLE
Website: https://aisle.com
Category: Frontier-lab and general scanners
Targets: C source, OpenSSL, curl
Approach: Autonomous analysis of C code with on-premises deployment option
Access: Enterprise
Status: Active
Strengths: Unmatched OpenSSL result count. | On-prem option for sensitive code. | Focused product.
Limits: C only. | Implementation bugs, not protocol logic. | Enterprise pricing; limited public methodology.
Firms using it: none listed
Sources: https://aisle.com/blog/aisle-discovered-12-out-of-12-openssl-vulnerabilities | https://aisle.com/blog/aisle-discovered-six-curl-cves-after-openai-and-anthropic-found-zero

Source page: https://agentsast.com/tools/aisle/
Compiled by: agentsast editors (https://agentsast.com/about/)
Last reviewed: 2026-09-13