Koi

Koi Security is a cybersecurity firm defining a new category for endpoint protection focused on the modern software perimeter, an area often overlooked by traditional security tools. The company was founded in 2024 by Amit Assaraf (CEO), Idan Dardikman (CTO), and Itay Kruk (CPO), all alumni of the Israeli Defense Forces' elite 8200 intelligence unit. The founders' journey began after they uncovered a significant security gap in the VSCode Marketplace by creating a fake extension that could secretly exfiltrate source code from developers' machines, infecting over 300 organizations within a week. This experiment led to the creation of "ExtensionTotal" to detect risky extensions, which evolved into Koi's broader security platform.

The company's core offering is the Supply Chain Gateway, which acts as a centralized checkpoint for all incoming software across endpoints. This platform provides visibility, risk analysis, and policy enforcement for unmanaged, self-installed, non-binary software such as code packages, containers, AI models, and browser extensions that traditional tools like EDRs and MDMs were not designed to handle. At the heart of the platform is "Wings," an AI-driven risk engine that uses threat intelligence, classification, and sandboxing to detect and stop threats that bypass conventional scanners, ensuring only safe and compliant software operates in a client's environment.

Koi Security serves large enterprises, including Fortune 50 companies, major financial institutions, and leading technology firms, and has scaled to protect over 500,000 endpoints. The business model appears to be subscription-based access to their security platform. In September 2025, the company announced it had raised $48 million in total funding, including a $38 million Series A round, to support its growth and product development. The funding rounds were led by investors such as Battery Ventures, Team8, Picture Capital, and NFX.

Keywords: endpoint security, software supply chain security, risk analysis, policy enforcement, non-binary software, threat intelligence, AI risk engine, cybersecurity, software perimeter, self-installed software, software asset management, vulnerability management, application security, cloud security, DevSecOps, container security, AI model security, extension security, enterprise security, network security