Palo Alto Networks announces the acquisition of Koi to protect the Endpoint Agent

As artificial intelligence drives changes in workplace productivity, it has also created a new surface of risk at endpoints. AI agents and tools, known as “Endpoint Agetic,” operate with broad access to sensitive information, nearly unlimited permissions, and the capability to execute multiple actions, allowing them to circumvent traditional security mechanisms.

To reduce this vulnerability, Palo Alto Networks has announced the signing of an agreement to acquire Koi, a company specializing in Endpoint Agetic security. The merger aims to provide organizations with greater visibility and protection over the native AI ecosystem shaping today’s work environment.

The new priority: Endpoint Agetic Security

Traditional security was designed to stop malicious files, but modern AI agents and tools can actively read, write, and move data. Attackers chain exploits within agent frameworks — from authentication bypasses to remote code execution via APIs — while impersonating agents and hijacking credentials to turn automation into a weapon. The attack surface of endpoints is also evolving beyond traditional executables, with extensions, plugins, packages, scripts, and model artifacts increasingly shaping endpoint behavior outside centralized oversight.

Agents accelerate and operationalize this shift, multiplying the risk at machine speed. This rapid change has created a critical new blind spot in traditional security approaches, necessitating a new protection category: Endpoint Agetic Security.

Following the acquisition, Koi’s Endpoint Agetic Security will be integrated with Palo Alto Networks’ Prisma AIRS™, its premier AI security platform. This integration will extend coverage in critical AI-driven operations. Concurrently, it will enhance the Cortex XDR® endpoint security solution, providing significant visibility into the AI attack surface to improve security policies and malware prevention. These critical capabilities will be accessible to customers, empowering them to deploy Agetic tools with confidence.

Lee Klarich, Chief Product & Technology Officer, Palo Alto Networks

“AI agents and tools are the ultimate insiders. They have full access to your systems and data, yet operate entirely outside the reach of traditional security controls. With the acquisition of Koi, we will close this gap and set a new standard for endpoint security. We will give our customers the visibility and control needed to harness AI’s power safely, ensuring that every agent, plugin, and script is governed, verified, and secure.”

Amit Assaraf, CEO and Co-Founder of Koi

“We founded Koi to protect the next frontier of risk. In a world where Agetic is first, traditional solutions are blind. Partnering with Palo Alto Networks will allow us to scale our technology to the world’s largest organizations, offering protection that makes modern native AI endpoints secure by design.”

Scroll to Top