Full Report
Sees little enterprise AI adoption other than coding assistants, buys Koi for what comes next If enterprises are implementing AI, they’re not showing it to Palo Alto Networks CEO Nikesh Arora, who on Tuesday said business adoption of the tech lags consumer take-up by at least a couple of years – except for coding assistants.…
Analysis Summary
# Industry News: Palo Alto Networks CEO Tempers AI Expectations, Acquires Koi Security
## Summary
Palo Alto Networks CEO Nikesh Arora warns that enterprise AI adoption is lagging behind consumer trends by several years, with coding assistants being the only current meaningful driver of traffic. Despite this "cooling" outlook on immediate adoption, the company has announced the acquisition of **Koi**, a startup specializing in agentic AI endpoint security, to prepare for a future wave of AI-driven enterprise traffic.
## Key Details
- **Date:** February 18, 2026
- **Companies Involved:** Palo Alto Networks (PANW), Koi (Acquisition Target)
- **Category:** M&A / Market Analysis
## The Story
During Palo Alto Networks' Q2 earnings call, CEO Nikesh Arora provided a sobering reality check on the "AI revolution." According to Arora, while consumers have embraced AI, enterprises are moving at a much slower pace—reminiscent of the multi-year transition from on-premise infrastructure to the cloud.
Currently, the only major use case driving throughput is AI coding assistants, which offer limited opportunities for network security vendors because they generate minimal external network traffic. However, Arora anticipates a shift toward "agentic" AI—where AI agents act on behalf of users—which will require entirely new security paradigms. To address this, Palo Alto has acquired Koi, a startup focused on securing agentic endpoints, and is integrating it into their broader platform strategy alongside recent acquisitions like Chronosphere.
## Business Impact
### For the Companies Involved
- **Palo Alto Networks:** Positioned itself as the "long-game" winner by building infrastructure for AI security before the massive traffic arrives. However, despite hitting $2.6 billion in Q2 revenue (15% growth), the stock dropped 6% as investors reacted to tempered profit forecasts.
- **Koi:** Gains the massive distribution engine of the world’s largest pure-play security vendor to scale its agentic AI security technology.
### For Competitors
- Competitors like Fortinet and CrowdStrike are pressured to match this "platformization" narrative. Arora’s comments suggest a "land grab" phase where vendors are fighting to be the unified console for future AI traffic.
### For Customers
- Enterprises are being pushed toward vendor consolidation. Palo Alto's strategy suggests that managing "tangles" of disconnected security tools will be the primary barrier to safe AI adoption.
### For the Market
- There is a clear decoupling between AI "hype" and enterprise "spend." Market analysts may need to recalibrate expectations for when AI security revenue will truly materialize for major vendors.
## Technical Implications
The acquisition of Koi highlights a shift from basic LLM prompts to **Agentic AI**. Technically, this involves securing autonomous agents that can execute tasks across different applications. Arora noted the technical challenge of "consolidating traffic"—ensuring visibility into disparate AI token streams across the LAN so they can be monitored and controlled.
## Strategic Analysis
- **Market Positioning:** Palo Alto is pivoting from traditional perimeter/cloud security to becoming the "control plane" for enterprise AI.
- **Competitive Advantage:** By acquiring Koi and Chronosphere, PANW is building a stack that addresses visibility, observability, and endpoint protection specifically for AI-driven workflows.
- **Challenges:** The "two to three-year lag" in adoption means Palo Alto must maintain high R&D and acquisition spending today without seeing an immediate ROI in AI-driven revenue.
## Industry Reactions
- **Market Response:** Negative; the 6% share price drop indicates that investors are more concerned with short-term profitability than long-term AI positioning.
- **Analysts:** View the move as a pragmatic admission that the AI "gold rush" for security vendors may still be years away from reaching maturity.
## Future Outlook
- **Predictions:** Expect a "slow and steady" migration of enterprise applications to AI-integrated models over the next 24-36 months.
- **What to watch for:** Look for the integration of Koi’s technology into the Cortex and Prisma platforms, and whether other major vendors follow suit with "Agentic AI" acquisitions.
## For Security Professionals
Practitioners should note that coding assistants are currently the primary shadow AI risk within their environments. However, the acquisition of Koi signals that the next frontier is **Agentic Security**. If your organization is planning to deploy autonomous agents (e.g., AI that can autonomously access databases or send emails), existing endpoint and network controls may be insufficient. Now is the time to audit visibility into "token traffic" on the local network.