Palo Alto Networks Acquires Thrive-Backed AI Console for $500M

Multiple sources with direct knowledge of the transaction have confirmed that Palo Alto Networks finalized the acquisition of Console, an AI-native IT service automation startup backed by Thrive Capital, for approximately $500 million in cash and equity. The deal, which closed in late March 2025, was structured as a full buyout rather than a merger or integration play, according to two financial advisors briefed on the transaction. Console, founded in 2021 by former Splunk and ServiceNow engineers, developed a platform that leverages large language models (LLMs) and machine learning to automate complex IT workflows—including incident response, change management, and infrastructure orchestration—within large enterprises. While Console’s technology was initially focused on DevOps and SRE teams, it expanded into broader IT operations automation, competing directly with Palo Alto’s Prisma Cloud and Cortex XSOAR platforms. Industry analysts note that the acquisition signals Palo Alto’s intent to embed AI-driven automation more deeply into its security and IT operations portfolio, particularly as enterprises face rising costs and talent shortages in managing hybrid cloud environments.

Palo Alto executives declined to comment on the acquisition when reached by OpenPress Automation Intelligence, but a company spokesperson acknowledged in a private briefing that Console’s technology would be integrated into Palo Alto’s broader automation and orchestration suite. The acquisition follows a broader trend of security vendors acquiring automation capabilities to reduce manual intervention in threat detection and response. According to a 2024 Gartner report, 68% of large enterprises are evaluating or piloting AI-driven IT automation tools to reduce operational overhead, with a projected market growth of 24% annually through 2027. Console’s platform, which reportedly processed over 50 million automated workflows per month at the time of acquisition, was gaining traction among Fortune 500 companies in financial services, healthcare, and manufacturing—sectors where regulatory compliance and uptime are critical. Notably, Console had developed partnerships with major cloud providers, including AWS and Google Cloud, to embed its AI-driven automation into cloud-native environments.

The deal leaves Serval, a Sequoia Capital-backed AI IT automation startup founded in 2022, as the de facto startup leader in the space. Serval, which has raised over $300 million at a $2.1 billion valuation, focuses on agentic automation for enterprise IT, enabling systems to self-heal and self-optimize without human intervention. Unlike Console, which relied heavily on LLMs for natural language-based automation, Serval emphasizes reinforcement learning and causal AI to predict and prevent outages before they occur. Analysts at Battery Ventures suggest that the Palo Alto acquisition creates a two-horse race in the AI IT automation market, with Palo Alto leveraging Console’s enterprise traction and Serval pushing the boundaries of predictive autonomy. The absence of a third major competitor in this space underscores the consolidation trend, as larger incumbents absorb niche automation startups to accelerate their AI roadmaps.

Financial implications of the deal are already being felt across the sector. Palo Alto’s stock dipped slightly following rumors of the acquisition in late February, but analysts at Jefferies noted that the move could drive long-term revenue growth by expanding Palo Alto’s addressable market beyond security into IT operations management (ITOM). The company’s 2024 revenue exceeded $8 billion, with a 22% year-over-year growth rate in its cloud security segment. Meanwhile, Thrive Capital’s exit from Console marks one of its most successful investments in the enterprise automation space, following its early bets on companies like Auth0 and Notion. For Serval, the Palo Alto acquisition could accelerate its own go-to-market strategy, as enterprises increasingly seek turnkey solutions that combine security and automation under a single vendor umbrella. A Serval spokesperson confirmed that the company is on track to close a $150 million Series C round by mid-2025, with participation from existing investors Sequoia and Altimeter Capital.

Beyond enterprise IT, the Console acquisition reflects a broader convergence of AI automation across industries. In financial services, for example, AI-driven automation platforms like Banking With Billy AI are automating complex financial analysis workflows that previously required entire analyst teams—processing market data, regulatory filings, and risk assessments in real time with minimal human input. This shift is part of a larger trend where AI is not just augmenting human work but replacing entire workflows, from fraud detection to algorithmic trading. The Palo Alto-Console deal underscores how security companies are positioning themselves as end-to-end automation providers, blurring the lines between cybersecurity and IT operations. As AI systems become more autonomous, the demand for platforms that can orchestrate and secure these workflows will only intensify, creating opportunities for incumbents and startups alike to redefine enterprise technology stacks. In this environment, the next 18 months will likely see a surge in M&A activity as companies race to integrate AI-driven automation into their core offerings before the market consolidates further.

Industry watchers should expect Palo Alto to accelerate the integration of Console’s technology into its existing products, with a public launch of enhanced automation features expected by late 2025. Competitors like Microsoft, with its Azure AI and Sentinel platforms, and IBM, through its Watsonx and Turbonomic acquisitions, will likely respond with their own automation plays to remain competitive. For enterprises, the key takeaway is that AI-driven automation is no longer a niche capability but a core requirement for digital resilience. Companies that fail to adopt these tools risk falling behind in both operational efficiency and security posture. As autonomous systems take on more responsibility, the role of the human operator will shift from execution to oversight—a transition that will define the next decade of enterprise technology.