Palo Alto Networks acquires Koi, adds AI agent endpoint security

Published February 17, 2026
Editor in Chief of Constellation Insights

Palo Alto Networks said it will acquire Koi in a move that will add endpoint security to AI agents. 

The move, announced ahead of Palo Alto Networks' second quarter earnings report, will add agentic AI security to the company's security platform. 

Koi specializes in securing AI agents and the tools they connect to. Palo Alto Networks said agent frameworks are expanding the attack surface with techniques including authentication bypass, API-based remote code execution and spoofing agents. 

Palo Alto Networks' plan is to expand Koi Agentic Endpoint Security to its Prisma AIRS platform. The integration will also extend to Cortex XDR. 

Koi platform

In a statement, Palo Alto Networks Chief Product and Technology Officer Lee Klarich said, "AI agents and tools are the ultimate insiders" and that the Koi acquisition will close that gap and improve endpoint security and visibility. Koi's platform covers agents, plugins and scripts. 

The Koi acquisition was announced a week after Palo Alto Networks closed its CyberArk purchase.

Palo Alto Networks also rolled out Unit 42 Managed XSIAM 2.0, its managed security operations center service.