Koi is an Israeli cybersecurity startup focused on what it calls “Agentic Endpoint Security,” aimed at governing and assessing the risk of modern endpoint software artifacts such as browser extensions, VS Code plugins, AI agents, MCP servers, and model artifacts. Originating from an experiment involving a malicious-lookalike VS Code extension, it developed tooling (including ExtensionTotal) that emphasizes pre-execution governance and inventory with an AI-driven risk engine rather than relying only on runtime detection.