Palo Alto Networks acquires Koi Security to enhance software supply chain security

Palo Alto Networks Inc. is acquiring Koi Security Ltd., a startup specializing in preventing employees from downloading risky files. The deal, reportedly valued at $400 million, aims to bolster Palo Alto Networks' security offerings, particularly in managing the risks associated with software components and AI workloads, Silicon Angle reports.

Koi Security's platform focuses on securing various software assets beyond traditional binary files, including scripts, AI training datasets, and code editor plug-ins. Its core functionality involves blocking risky downloads by replacing download buttons with an approval request system. The platform evaluates download requests based on factors like the file's developer reputation, code analysis, and observed behavior post-download, including network traffic and host machine modifications. Koi also addresses the risk of software updates by delaying installations to allow for security checks, and it monitors downloaded files with a threat detection engine, offering remediation features like removal, isolation, or rollback to previous versions.

The acquisition highlights a growing concern over the security of the software supply chain and the increasing complexity introduced by AI-native ecosystems. By integrating Koi's technology into its Cortex XDR and Prisma AIRS platforms, Palo Alto Networks aims to provide enterprises with enhanced visibility and control over potentially vulnerable software components and AI agents.

Source: Silicon Angle