Koi announced a $48M funding round led by Battery Ventures, Team8, Picture Capital, and NFX, with participation from Cerca Partners.
A decade ago, endpoint security was focused almost entirely on static binary software, with attacks targeting operating system vulnerabilities through DLL injections and Windows API hooking. The threat landscape has since changed dramatically. Endpoints are now dominated by non-binary software such as code and OS packages, AI models, extensions, containers, and MCPs. These elements have created the largest and most unguarded attack surface enterprises have ever faced.
Modern attacks no longer concentrate solely on operating systems. Threat actors increasingly target workflows, aiming to steal passwords, files, code bases, SSH keys, and other sensitive data moving fluidly across endpoints. Legacy solutions such as EDRs and MDMs were designed for a different era and cannot adequately address these new challenges.
Koi was founded to tackle this gap. The platform provides full visibility into both binary and non-binary software on the endpoint and continuously evaluates risk through an agentic AI risk engine. Organizations can define what software is permitted, while risky, malicious, or non-compliant elements are proactively blocked or remediated before reaching endpoints.
The approach emphasizes both productivity and employee experience, while ensuring uncompromising protection. Early adopters include Fortune 50 companies, major financial institutions, and leading global technology and cybersecurity vendors, all of whom face longstanding pain points that existing solutions fail to address.
The new investment round also brings new board members: Rakesh Loonkar, Partner at Picture Capital; Barak Schoster Goihman, Partner at Battery Ventures; Ori Barzilay, Partner at Team8; and Gigi Levy Weiss, General Partner at NFX.
This milestone reflects the expertise of Koi’s team, which includes cybersecurity veterans with backgrounds at Microsoft, Zscaler, Sygnia, Akamai, as well as elite security organizations such as the IDF’s Unit 8200 and Mossad. The team’s research, product innovation, and culture are at the core of Koi’s mission to redefine endpoint security.
Amit Assaraf, Co-founder and CEO of Koi, shared: “Koi is the world’s first solution to provide full visibility into every piece of software on the endpoint, binary and non-binary alike, and continuously evaluates risk using an agentic AI risk engine. We’ve built a product that enables organizations to curate what software is allowed in, and proactively block or remediate anything risky, malicious or non-compliant before it ever reaches the endpoint.”
The funding will enable Koi to scale operations, expand customer support, and deliver additional value by addressing the toughest challenges in endpoint security. More details on the product and customer adoption will be shared in upcoming announcements.