Head to head · Checked against vendor sites, September 2026
Koi (Palo Alto Networks) vs Lasso Security: AI agent security compared
The verdict
Koi scores higher overall on our weights (7.1 vs 6.6 out of 10). Koi scores higher on visibility and maturity; Lasso Security scores higher on tool-call control and breadth. They tie on policy, footprint and identity and audit. Neither publishes list prices.
Koi (Palo Alto Networks Cortex Agentic Endpoint Security)
Owner: Palo Alto Networks (acquisition completed 14 April 2026)
Best for Palo Alto Cortex customers
How do Koi and Lasso Security compare on each criterion?
| Criterion | Weight | Koi | Lasso Security | Edge |
|---|---|---|---|---|
| Visibility | 22% | 9 | 6 | Koi |
Why these scoresKoi: Visibility into models, MCPs, extensions and packages on the endpoint, with risk scoring. Lasso Security: Discovers MCP servers across Claude, Cursor and Windsurf and AI tool use; device-level inventory is not detailed. | ||||
| Tool-call control | 20% | 7 | 8 | Lasso Security |
Why these scoresKoi: Blocks unsafe AI application interactions and prevents prompt injections; tool-call level mechanics not published. Lasso Security: Inspects every tool call before it is executed through Claude Code lifecycle hooks; open-source MCP gateway with block, alert or sanitize. | ||||
| Policy | 15% | 7 | 7 | Tie |
Why these scoresKoi: Out-of-the-box policies and one-click removal of insecure packages, extensions and AI tools. Lasso Security: Intent-aware policies, role-based permissions and DLP with masking. | ||||
| Identity and audit | 12% | 5 | 5 | Tie |
Why these scoresKoi: Agent vs human attribution not described on the pages we reviewed. Lasso Security: Detailed audit history of inputs and decisions; agent vs human attribution not described. | ||||
| Footprint | 13% | 6 | 6 | Tie |
Why these scoresKoi: Agent-based; offered as a Cortex XDR module and as a standalone offering. Lasso Security: Browser extension, proxy, gateway and Claude Code enterprise hooks; several components to run. | ||||
| Breadth | 8% | 7 | 8 | Lasso Security |
Why these scoresKoi: Palo Alto Networks is integrating Koi with Prisma AIRS for wider AI coverage. Lasso Security: AI apps, agents, red teaming and usage control. | ||||
| Maturity | 10% | 7 | 6 | Koi |
Why these scoresKoi: Acquisition completed 14 April 2026 by Palo Alto Networks; pricing not published. Lasso Security: Pricing and company backing not published on the pages we reviewed. | ||||
| Total | 100% | 7.1 | 6.6 | Koi |
How do they deploy, and what do they cost?
| Attribute | Koi | Lasso Security |
|---|---|---|
| Owner | Palo Alto Networks (acquisition completed 14 April 2026) | Not acquired |
| How it reaches devices | Cortex XDR module or standalone agent | Browser extension, proxy, gateway, Claude Code hooks |
| Deployment detail | Integrates with Cortex XDR as a module and is also available standalone as an agent-based deployment. If you run Cortex XDR, this is the lowest-friction path; if you run another EDR, expect a separate agent. | Lasso offers a browser extension, proxy integrations, its MCP gateway and Claude Code hook integration, and says it works with existing stacks such as Palo Alto Networks or CrowdStrike. |
| Pricing | Contact sales. Pricing is not published. | Contact sales. Pricing is not published. |
Source: Cortex Agentic Endpoint Security · Press release, 14 April 2026 · lasso.security · Lasso MCP security · Lasso AI coding assistants · Lasso AI usage control · Reviewed Sep 2026
Which should you choose?
Choose Koi if
- Your priority matches our designation for Koi: best for Palo Alto Cortex customers.
- You need a fleet-wide inventory of AI agents, MCP servers, extensions and credentials on devices: Koi scores 9 to 6.
- Vendor maturity, public documentation and backing weigh heavily in procurement: Koi scores 7 to 6.
Choose Lasso Security if
- Your priority matches our designation for Lasso Security: best for MCP gateway and Claude Code hooks.
- You need to evaluate or stop individual tool calls before they run: Lasso Security scores 8 to 7.
- Your agents also run in SaaS platforms, cloud workloads or apps you build: Lasso Security scores 8 to 7.
Frequently asked questions
Which is better, Koi (Palo Alto Networks) or Lasso Security?
Koi scores higher overall on our weights (7.1 vs 6.6 out of 10). Koi scores higher on visibility and maturity; Lasso Security scores higher on tool-call control and breadth. They tie on policy, footprint and identity and audit. Scores are editorial assessments from public vendor material, reviewed September 2026.
Do Koi (Palo Alto Networks) and Lasso Security publish prices?
No. Neither publishes list prices, so ask both for a quote.
Do Koi (Palo Alto Networks) or Lasso Security replace EDR?
No. The tools in this guide add control over AI agent actions and work alongside EDR. Koi: Cortex XDR module or standalone agent. Lasso Security: Browser extension, proxy, gateway, Claude Code hooks.
Related
Sources
- Cortex Agentic Endpoint Security · Reviewed Sep 2026
- Press release, 14 April 2026 · Reviewed Sep 2026
- lasso.security · Reviewed Sep 2026
- Lasso MCP security · Reviewed Sep 2026
- Lasso AI coding assistants · Reviewed Sep 2026
- Lasso AI usage control · Reviewed Sep 2026