Palo Alto Networks announced on April 20, 2026, the successful completion of its acquisition of Koi, an Israeli-based cybersecurity firm specializing in enterprise endpoint protection and software supply chain security. The transaction, valued at approximately $400 million, marks a significant expansion of the company’s Cortex platform. Following the closure of the deal, Palo Alto Networks officially introduced Agentic Endpoint Security, a new solution that integrates Koi’s autonomous agent technology into its existing security ecosystem.
Koi, headquartered in Tel Aviv, gained prominence for its development of agentic security protocols, which utilize autonomous software agents to monitor and remediate vulnerabilities within complex software environments. The acquisition includes Koi’s intellectual property and its team of specialized security engineers. According to official statements from Palo Alto Networks, the $400 million purchase price was funded through a combination of cash on hand and existing credit facilities. This acquisition follows a period of strategic consolidation in the cybersecurity sector, as firms seek to address the increasing complexity of supply chain attacks.
The newly launched Agentic Endpoint Security platform represents the first major product release resulting from the Koi integration. Nikesh Arora, Chairman and CEO of Palo Alto Networks, stated that the platform is designed to move beyond traditional reactive security measures. The system employs autonomous agents that can identify, analyze, and neutralize threats at the endpoint level without requiring manual intervention from security operations center teams. Key features include real-time software bill of materials analysis and automated patching for vulnerabilities detected within the software supply chain.
The integration of Koi’s technology is intended to bolster Palo Alto Networks' position in the endpoint detection and response market. By incorporating agentic capabilities, the company aims to reduce the mean time to remediate for its enterprise clients. The Agentic Endpoint Security solution will be offered as a standalone module and as an integrated component of the broader Cortex XDR suite. Palo Alto Networks confirmed that existing Koi customers will be transitioned to the new platform over the coming months, with full support for legacy systems maintained during the interim period.
Lee Klarich, Chief Product Officer at Palo Alto Networks, noted that the addition of Koi’s technology addresses a critical gap in modern enterprise security: the visibility of third-party software components. The Agentic Endpoint Security platform uses machine learning models to map dependencies across software environments, providing a continuous audit of potential entry points for attackers. This move aligns with the company’s broader strategy of platformization, which seeks to consolidate disparate security tools into a unified, AI-driven architecture.