New York, Jan 5, 2026, 15:00 EST — Regular session
Shares of Palo Alto Networks (PANW.O) rose 1.7% to $182.46 in afternoon trading on Monday after an Israeli media report said the cybersecurity firm is in talks to buy endpoint-security startup Koi Security for about $400 million.
The report lands as investors look for signs that security spending is holding up in early 2026, even as corporate IT budgets face tighter scrutiny. Endpoint protection — software that secures laptops, servers and other devices — has been a competitive battleground as attacks increasingly start on employee machines and developer tools.
M&A is also back in focus for the sector, with buyers trying to stitch together broader security “platforms” that can be sold as a package. That strategy can lift growth, but it also raises execution risk if products don’t integrate cleanly or if sales cycles get disrupted.
CTech said Koi has raised $48 million and built tools aimed at stopping malicious code and vulnerabilities from entering organizations through software marketplaces, including developer extension stores.
Separately, Guggenheim analyst John DiFucci upgraded Palo Alto Networks to neutral from sell, citing the stock’s underperformance. “We are upgrading the shares of Palo Alto Networks to Neutral from Sell,” DiFucci wrote. 1
Piper Sandler analyst Rob Owens raised his price target to $265 from $230 and maintained an overweight rating — meaning he expects the stock to outperform others in the firm’s coverage universe, GuruFocus reported. 2
Cybersecurity stocks were broadly firmer, with the Global X Cybersecurity ETF up 1.2%. Peers Fortinet and CrowdStrike were up 0.2% and 0.4%, while the tech-heavy Invesco QQQ was up about 0.7%.
Palo Alto has leaned on acquisitions to broaden its product lineup, completing its purchase of AI-security startup Protect AI in 2025 and later agreeing to buy observability firm Chronosphere for $3.35 billion. It also signed a deal last year to acquire identity security company CyberArk. 3
But another deal would add integration work at a time when investors are watching margins and free cash flow closely. Any hint that dealmaking is pressuring profitability — or that demand is cooling — could weigh on the shares.
Traders are watching for any confirmation or denial on Koi, and for Palo Alto’s next earnings update, which is expected around Feb. 12 based on historical reporting patterns. That report is also likely to refocus attention on billings, a closely watched measure of contracted sales that can signal near-term demand. 4
