Palo Alto Networks (NASDAQ:PANW) announced on Tuesday, April 14, 2026, that it has completed its acquisition of Israeli cybersecurity startup Koi, a deal estimated at approximately $400 million.
The move establishes a first-of-its-kind protection category termed Agentic Endpoint Security (AES), designed to secure the rapidly expanding landscape of autonomous AI agents and "vibe coding" tools within the enterprise.
The integration of Koi’s technology addresses a critical blind spot in traditional Endpoint Detection and Response (EDR) solutions.
While standard tools are designed to stop malicious executables, autonomous agents often operate using legitimate user credentials to read, write, and execute code at machine speed.
By merging Koi with its Prisma AIRS platform, Palo Alto Networks now provides a single control plane to discover and govern agentic AI across cloud, SaaS, and local endpoints.
As part of the rollout, Palo Alto Networks is introducing a dedicated module for Cortex XDR to identify and remediate risks specifically within the AI software ecosystem.
This module allows security teams to monitor for "tool misuse" and adversarial instructions that could lead an autonomous agent to perform unauthorized actions.