Palo Alto Buys Koi to Secure AI Endpoints

Palo Alto Networks has announced a definitive agreement to acquire Israeli startup Koi, a pioneer in securing AI-native environments. As modern enterprises shift toward "Agentic Endpoints"—AI agents with deep data access and autonomous execution capabilities—they face significant, unmanaged security gaps.

This acquisition is valued at approximately $300 million in cash and replacement awards, with some reports citing up to $400 million. aims to provide enterprises with the visibility and protection needed to secure these powerful AI-native workflows, closing the critical security divide between traditional controls and the future of work.

Founded in 2024 by Unit 8200 veterans, Koi represents a rapid, high-value acquisition in a series of Israeli security firm buys by Palo Alto Networks.

Koi Security specializes in securing the "agentic endpoint"—the, often untrusted, AI tools, browser extensions, and plugins that employees install. Koi's technology will be integrated into Palo Alto Networks' Prisma AIRS (AI Security) platform and Cortex XDR to protect against AI-driven threats and provide visibility into non-traditional software assets.

As enterprises rapidly deploy AI agents, plug-ins, and nonbinary code across workflows, security teams are struggling with a fast-expanding and often unmanaged attack surface. Traditional endpoint and network tools were not designed to monitor autonomous AI processes or dynamically generated code. Koi Security addresses this gap by delivering deep visibility into AI agents, third-party plug-ins, and model-integrated applications that operate beyond conventional detection layers.

The acquisition will enhance Palo Alto’s Cortex XDR platform by extending detection and response capabilities into AI-native environments. It will also complement Prisma AIRS, the company’s AI runtime security solution, by helping organizations track, validate and secure AI-driven operations in real time.

Lee Klarich, Chief Product & Technology Officer, at Palo Alto Networks. 
"AI agents and tools are the ultimate insiders. They have full access to your systems and data, but operate entirely outside the view of traditional security controls. By acquiring Koi, we will be closing this gap and setting a new standard for endpoint security. We will give our customers the visibility and control required to safely harness the power of AI—ensuring that every agent, plugin, and script is governed, verified, and secure."

Amit Assaraf, CEO and Co-Founder of Koi.

"We founded Koi to secure the next frontier of risk. In an agentic-first world, traditional solutions are blind. Joining forces with Palo Alto Networks will allow us to scale our technology to the world's largest organizations, delivering protection that makes work on the modern AI-native endpoint secure by design."

Industry analysts view the move as a strategic response to a new class of risks—where AI systems can both introduce vulnerabilities and accelerate exploitation. As enterprises integrate generative AI into development, finance, and operations, securing AI workloads is becoming mission-critical.

With this acquisition, Palo Alto Networks is positioning itself at the forefront of defending the rapidly expanding AI attack surface.