Koi

Koi is a comprehensive risk analysis tool specializing in browser extension security. It utilizes AI to explore, analyze, and understand the code of browser extensions, aiming to identify behavioral patterns, supply-chain vulnerabilities, and security implications beyond the permission sets.

Key features of Koi include the 'Wings' LLM-first risk engine, proactive scanning of software marketplaces, app stores, and registries, analysis of actual code behind software, comparison between declared and actual software functionality, risk scoring, and facilitating data-driven decisions by providing extensive data about the software under inspection.

'Wings' is Koi's LLM-first risk engine feature. It reads the code of non-binary software on the endpoint, providing information on what the software was actually programmed to do. It proactively scans marketplaces, app stores, and registries for new software, assesses the publisher based on their online presence and cross-marketplace reputation, compares the actual software with its declared functionality and assigns a risk score based on detected indicators.

Security professionals, IT, GRC (Governance, Risk and Compliance), and SOC (Security Operations Centre) teams can benefit from using Koi. These teams often require critical risk data in their operations and Koi's extensive data about the software contributes key information for decision-making on endpoint security.

Koi's preventive policy module minimizes marketplace risks by tracking, governing, and enabling software installs across all endpoints. It aids in the discovery and governance of all software, both binary and non-binary.