Palo Alto Networks has announced its definitive agreement to acquire Koi, a pioneer in Agentic Endpoint Security. This strategic move aims to address a critical new attack surface created by the proliferation of AI agents and tools on endpoints. The acquisition will equip enterprises with the necessary tools to see, manage, and protect the modern AI-native work environment.
The Rise of the Agentic Endpoint
The widespread adoption of artificial intelligence is fundamentally reshaping the endpoint, creating what is now termed the "Agentic Endpoint." Unlike traditional threats, modern AI agents operate with deep access to sensitive data and extensive system permissions. These tools often bypass conventional security controls, which were primarily designed to detect and block malicious files rather than govern autonomous processes.
This new paradigm introduces significant risks, as attackers can exploit agent frameworks, spoof identities, and hijack credentials to weaponize trusted automation. The attack surface has expanded beyond executables to include a complex ecosystem of plugins, scripts, and AI model artifacts. This shift has created a critical blind spot for security teams, compounding risk at machine speed and demanding a new security category.
Integrating Koi to Secure the AI-Native Ecosystem
Palo Alto Networks plans to integrate Koi's specialized technology directly into its core security platforms to address this emerging challenge. Following the acquisition's close, Koi's Agentic Endpoint Security will extend the capabilities of Prisma AIRS, the company's AI security platform. This integration is designed to provide comprehensive coverage across the growing landscape of AI-driven operations within the enterprise.
Furthermore, the technology will enhance the Cortex XDR endpoint security solution by providing crucial visibility into the AI attack surface. This will enable improved security policy enforcement and more effective malware prevention for customers. The goal is to empower organizations to deploy powerful agentic tools with confidence, knowing they are secure by design.
A Shared Vision for a New Security Paradigm
Leadership from both companies emphasized the necessity of this evolution in security. Lee Klarich, Chief Product & Technology Officer at Palo Alto Networks, described AI agents as the "ultimate insiders" that operate outside traditional controls. He stated the acquisition will set a new standard by giving customers the visibility and control required to safely harness AI's power.
Amit Assaraf, CEO and Co-Founder of Koi, echoed this sentiment, noting his company was founded to secure this "next frontier of risk." He explained that in an agentic-first world, traditional solutions are effectively blind to the new threats. Joining Palo Alto Networks will allow Koi to scale its technology globally and deliver protection for the modern AI-native endpoint.
The acquisition of Koi by Palo Alto Networks marks a significant step in the evolution of cybersecurity, directly responding to the structural changes AI brings to the endpoint. This strategic partnership is poised to define the emerging category of Agentic Endpoint Security, offering a clear path for enterprises to innovate securely. It underscores a proactive approach to protecting the very tools that are shaping the future of workforce productivity.

