Cognition, the company behind the AI software engineer Devin, has acquired Corridor, a San Francisco startup that adds security checks to code written by AI coding agents. Corridor's co-founders, Jack Cable and Ashwin Ramaswami, announced the deal in a post on Cognition's blog on October 28, 2026.
Neither company disclosed the price or other financial terms, AlphaSignal reported. Cable and Ramaswami said Corridor was joining Cognition, where they will work on Devin Security, Cognition's security product. AlphaSignal reported that Corridor's team and product will be folded into Devin Security.
Cognition has not published a timetable for bringing Corridor's controls into Devin, and it has not said how pricing, contracts or support will change for existing Corridor customers, according to AlphaSignal.
What Corridor built
Corridor describes itself as a security company for AI-native software development. Its product, which it calls Agentic Coding Security Management, places real-time security controls inside the workflows of AI coding tools so that vulnerabilities are caught while code is being generated, rather than after it has shipped. The company said the platform works natively with coding agents such as Cursor and Factory.
AlphaSignal listed the main features. Developers and agents get security feedback as they write code, and changes are scanned before they reach a pull request. Security teams can write requirements in plain English, which Corridor turns into checks specific to each codebase. Pull requests can be approved or blocked depending on how severe a finding is, and an automated agent triages issues through Slack or the web and opens pull requests with proposed fixes. A dashboard tracks how AI tools and agents are being used and whether policies are being followed. AlphaSignal said Corridor works with Cursor, Claude Code and Codex.
In its Series A announcement, Corridor named two customers: Sublime Security, which used it to secure its AI development pipelines, and Pylon, which used it across its software development lifecycle.
“Today, Corridor is joining Cognition, where we’ll be taking Devin Security to the next level.”
The founders and the funding
Cable, the chief executive, is a well-known bug bounty hunter who helped start the Secure by Design initiative at CISA, the US Cybersecurity and Infrastructure Security Agency, according to Corridor. Ramaswami, the chief technology officer, built large-scale systems and published research on AI and foundation models at Stanford. AlphaSignal described both as former CISA staff.
The founders wrote that Corridor was started almost two years ago with the aim of speeding up secure, autonomous software development, and that it had become a security provider for teams building with AI.
In March 2026 Corridor raised a $25 million Series A at a $200 million valuation. Felicis led the round, with Conviction, Timeless, Artisanal Ventures, Lux Capital, Sunflower Capital, Datadog and SV Angel taking part, along with angel investors from Anthropic, OpenAI, Cursor, Cognition, Factory and Lovable. AlphaSignal put Corridor's total funding across its seed and Series A rounds at about $30.4 million.
Why Cognition is buying
The deal reunites Corridor's founders with people they already knew. Cable and Ramaswami wrote that Cognition president Russell Kaplan was one of Corridor's earliest advisers, and that they would again be working with Alex Stamos, Cognition's chief security officer, and with chief technology officer Steven Hao. Corridor had listed Stamos, a former security chief at Facebook, Yahoo and SentinelOne, as its chief product officer at the time of the Series A. AlphaSignal reported that he joined Cognition as chief security officer about a month before the acquisition.
In their post, the founders argued that AI agents can now carry out complete attack chains on their own and that defenders need new tools to keep up. They wrote that companies will only stay secure by tackling long-standing security debt now, and described the coming six to 12 months as the most consequential period in the history of cybersecurity.
AlphaSignal reported that Stamos has said Cognition is looking at products that automate secure software development, such as rewriting older enterprise applications to run in containers. No release date has been attached to that work.
A crowded field for AI code security
Cognition's most recently reported valuation is about $48 billion, according to AlphaSignal. The company already counted Corridor among its connections before the deal: angels from Cognition were among Corridor's Series A backers.
The purchase is the latest in a run of deals in which companies building AI coding tools have bought startups that check or secure the code those tools produce. Corridor's pitch was that security has to sit inside the agent's workflow, since a growing share of code is now written by agents rather than typed by people. AlphaSignal noted that Cognition has not yet released public benchmarks on Corridor's detection coverage, false-positive rates or the quality of its automated fixes.
