Palo Alto Networks Acquires AI Security Startup Koi
Palo Alto Networks has acquired Koi, an Israeli startup that specializes in security for agentic AI. The acquisition is part of a broader strategy to secure next-generation digital agents and autonomous platforms. The move highlights a growing industry focus on proactive security solutions as AI-driven automation becomes more widespread in enterprises.
- The acquisition is valued at an estimated $400 million, a significant return for Koi's investors who had contributed a total of $48 million in funding. - Koi was founded in 2024 by alumni of the Israeli Defense Forces' elite 8200 intelligence unit: Amit Assaraf (CEO), Idan Dardikman (CTO), and Itay Kruk (CPO). - The startup gained initial recognition by creating a malicious VSCode theme extension as a proof-of-concept, which successfully infected over 300 organizations and demonstrated a significant security gap in the software supply chain. - Koi's technology is designed to secure the "agentic endpoint," providing visibility and control over AI agents, browser extensions, plugins, and other scripts that operate with deep access to systems and data but are often invisible to traditional security tools. - The acquisition will see Koi's technology integrated into Palo Alto Networks' existing platforms, specifically enhancing the Prisma AIRS AI security platform and the Cortex XDR endpoint security solution. - Agentic AI security is a new field focused on protecting AI systems that can make decisions and take actions autonomously, addressing risks like prompt injection, goal manipulation, and identity spoofing that arise from their multi-step, tool-using capabilities. - This deal is part of an aggressive acquisition strategy by Palo Alto Networks to bolster its AI security capabilities, following its recent multi-billion dollar purchases of CyberArk for identity security and Chronosphere for observability. - Palo Alto Networks was already a customer of Koi's technology before the acquisition, using it internally since mid-2025 to address security gaps from emerging AI-driven coding tools.
