Palo Alto Networks Acquires Koi to Enhance AI Security

February 17, 2026 – Palo Alto Networks announced its intent to acquire Koi, a company specializing in Agentic Endpoint Security, in a move designed to address the emerging security risks posed by the proliferation of AI agents and tools within enterprise environments. The acquisition, still subject to closing conditions, aims to integrate Koi’s technology into Palo Alto Networks’ Prisma AIRS AI security platform and Cortex XDR endpoint security solution.

The Rise of the “Agentic Endpoint” and the Security Gap

The increasing adoption of AI-powered agents – software programs designed to automate tasks and operate with significant autonomy – has created a new and largely unmanaged attack surface. These “Agentic Endpoints,” as Palo Alto Networks terms them, possess deep access to sensitive data, broad permissions, and the capacity to execute a wide range of actions, often bypassing traditional security controls. This represents a fundamental shift from traditional security models focused on preventing malicious files.

According to Palo Alto Networks, attackers are actively exploiting vulnerabilities within agent frameworks, employing tactics such as authentication bypass and API-based remote code execution. They are also leveraging agent identities and compromising credentials to weaponize trusted automation processes. The threat extends beyond traditional executable files to include extensions, plugins, packages, scripts, and even AI model artifacts, all of which contribute to endpoint behavior outside of centralized oversight.

This rapid evolution has created a “critical new blind spot” in security, necessitating a new category of protection: Agentic Endpoint Security. Traditional security measures, built to detect and block malicious files, are proving inadequate against the dynamic and often unpredictable actions of AI agents.

What is Agentic Endpoint Security?

Agentic Endpoint Security focuses on gaining visibility into and controlling the behavior of these AI-driven agents. Unlike traditional endpoint detection and response (EDR) systems, which primarily focus on identifying and responding to known threats, Agentic Endpoint Security aims to understand the normal operation of AI agents and detect anomalous activity that could indicate malicious intent. This includes monitoring agent interactions with data, APIs, and other systems.

Koi’s technology, the core of this acquisition, is designed to provide this level of visibility and control. The company’s solutions allow enterprises to oversee and protect AI-based ecosystems, offering a crucial layer of defense against attacks that exploit the unique characteristics of agentic endpoints.

Palo Alto Networks’ Strategy and Integration

Palo Alto Networks’ acquisition of Koi is a strategic move to bolster its AI security capabilities and address the growing demand for protection against AI-powered threats. The integration of Koi’s Agentic Endpoint Security into Prisma AIRS will broaden the platform’s coverage across critical AI-driven operations. Prisma AIRS is Palo Alto Networks’ leading AI security platform, and this addition will enhance its ability to detect and prevent attacks targeting the AI attack surface.

the acquisition will enhance Cortex XDR, Palo Alto Networks’ endpoint security solution, providing “significant visibility into the AI attack surface to improve security policy and malware prevention.” Cortex XDR is a widely used platform for threat detection and response, and the integration of Koi’s technology will strengthen its ability to protect against the evolving threat landscape.

Implications for Enterprises

The acquisition signals a growing recognition within the cybersecurity industry of the unique risks posed by AI agents. Enterprises that are increasingly reliant on AI-powered tools for automation, data analysis, and other critical functions will need to adopt new security measures to protect themselves from attacks that exploit these technologies.

The integration of Agentic Endpoint Security into existing security platforms like Prisma AIRS and Cortex XDR will provide enterprises with a more comprehensive and proactive approach to AI security. By gaining visibility into the behavior of AI agents, organizations can better identify and mitigate potential threats, reducing the risk of data breaches, system compromises, and other security incidents.

The move also highlights the importance of understanding the evolving attack surface created by AI. Traditional security models are no longer sufficient to protect against the sophisticated tactics employed by attackers targeting AI-driven systems. Enterprises will need to invest in new technologies and expertise to stay ahead of the curve and ensure the security of their AI-powered infrastructure.

While the financial terms of the acquisition were not fully disclosed in the initial announcement, reports indicate a transaction value of approximately $400 million. The acquisition is expected to close in the coming months, pending regulatory approvals and other customary closing conditions.