The startup offers capabilities for boosting visibility and protection for AI agent usage on endpoint devices.
Palo Alto Networks announced Tuesday it has reached a deal to acquire Koi, a startup offering capabilities for boosting visibility and protection for AI agent usage on endpoint devices.
Terms of the acquisition were not disclosed. A Calcalist report in January had indicated Palo Alto Networks was in discussions to acquire Koi for $400 million.
[Related: Palo Alto Networks CEO: Surging ‘AI Cycle’ Driving Billion-Dollar Acquisitions]
Koi was founded in 2024 by a team that was previously behind SaaS security company Canonic, which was acquired by Zscaler in 2023.
The technology offered by Koi forms the basis for what Palo Alto Networks called the new cybersecurity category of “agentic endpoint security.”
The cybersecurity giant plans to integrate Koi’s capabilities into its AI security platform, Prisma AIRS, the vendor said in a news release Tuesday.
The Koi technology will also bolster Palo Alto Networks’ endpoint security offering, Cortex XDR, through delivering greater visibility across AI attack surfaces. The result will be enhanced prevention of malware and improved adherence to security policies, the company said.
In October 2025, Palo Alto Networks launched the new version of its AI security platform, Prisma AIRS 2.0, which included the full integration of capabilities from the acquisition last year of Protect AI.
The update enabled Prisma AIRS to provide in-line defense against a range of AI security threats—including prompt injection, malicious agents and tool misuse—in real time, according to Palo Alto Networks.
The acquisition deal for Koi comes a week after Palo Alto Networks completed its $25 billion acquisition of CyberArk, a deal similarly aimed at boosting the vendor’s security capabilities around agentic AI.
The deal also follows the completion of Palo Alto Networks’ $3.35 billion acquisition of observability provider Chronosphere in late January.
