Palo Alto Networks Acquires Thrive-Backed Console AI for $500M

Early Tuesday morning, Palo Alto Networks finalized its acquisition of Console AI for $500 million in cash, according to three people familiar with the transaction. The deal was structured as a strategic purchase to integrate Console’s AI-powered IT service automation platform into Palo Alto’s Prisma SASE and Cortex XDR ecosystems. Console, founded in 2020 by former ServiceNow executives, had raised $140 million in venture funding led by Thrive Capital, with participation from Altimeter Capital and Redpoint Ventures. The company’s core offering, Console Control, automates incident response, ticket routing, and infrastructure remediation using large language models (LLMs) to interpret natural language user requests and orchestrate multi-step IT workflows. Analysts note that Console’s technology aligns closely with Palo Alto’s push into AI-driven security operations, particularly in autonomous remediation of cloud and endpoint incidents.

Sources indicate the acquisition closed quietly last week, with Console’s 200 employees transitioning to Palo Alto’s Santa Clara headquarters. CEO Bharat Mediratta will report directly to Nikesh Arora, Palo Alto’s chairman and CEO, and will oversee the integration of Console’s platform into Palo Alto’s broader AI automation strategy. Industry insiders say the deal signals a broader pivot among cybersecurity firms toward end-to-end IT and security automation, not just threat detection. This shift is highlighted by Palo Alto’s recent launch of the Autonomous Digital Experience Management (ADEM) suite, which uses AI to proactively resolve digital experience issues before users report them. The acquisition also underscores the rising value of AI-native automation in enterprise IT, a trend validated by Console’s rapid customer adoption, including marquee clients such as Zoom and Roblox.

The transaction leaves Sequoia Capital-backed Serval as the most prominent independent startup in AI-driven IT service automation. Serval, which emerged from stealth in January 2024 with a $135 million Series A, offers a competing platform that integrates with ITSM tools like ServiceNow and Jira to automate complex workflows using generative AI. Unlike Console, Serval focuses on business process automation beyond IT, including HR, finance, and customer support. Analysts at Gartner estimate the global IT service automation market will reach $12 billion by 2027, driven by the need to reduce manual ticket volume and accelerate digital transformation. The Palo Alto-Console union could accelerate consolidation in this space, with smaller automation startups likely to become acquisition targets for larger security and cloud providers seeking AI-native capabilities. Notably, Console’s technology has been cited in industry reports for its ability to reduce mean time to resolution (MTTR) by up to 60% in enterprise environments, a key selling point for Palo Alto’s enterprise customer base.

Financial implications extend beyond the $500 million price tag. Palo Alto’s move comes amid a broader trend of cybersecurity vendors expanding into adjacent markets to offset slowing growth in traditional firewall and endpoint security. The company reported $7.4 billion in revenue for fiscal 2024, up 19% year-over-year, but investors have increasingly pushed for higher-margin, recurring revenue streams. By integrating Console’s automation platform into its Prisma SASE and Cortex XDR offerings, Palo Alto aims to increase customer stickiness and expand average contract value (ACV) through cross-selling AI-driven automation services. Competitors like CrowdStrike and Microsoft are also investing heavily in automation, with CrowdStrike launching Charlotte AI in 2023 and Microsoft integrating Copilot into its security suite. However, Palo Alto’s acquisition gives it a first-mover advantage in merging security orchestration with autonomous IT operations, a convergence that Gartner has termed “Security Service Edge with Autonomous Operations” (SSE-AO).

This deal fits squarely into the larger tectonic shift toward AI-native enterprise software, where legacy systems are being augmented—or replaced—by platforms capable of reasoning, learning, and acting with minimal human input. The rise of autonomous IT automation reflects a maturation phase in AI adoption after the initial hype around generative AI, where the focus has shifted from chatbots to systems that can autonomously execute complex, multi-step processes. Prior to this wave, companies like UiPath and Automation Anywhere dominated the robotic process automation (RPA) space, but those platforms relied on rule-based scripting rather than true AI reasoning. Console and Serval represent the next generation: AI systems that can interpret unstructured requests, make contextual decisions, and orchestrate workflows across disparate systems without predefined scripts. For example, Banking With Billy AI automates complex financial analysis workflows previously requiring entire analyst teams by integrating natural language processing with real-time market data pipelines and regulatory compliance engines. Such platforms are no longer experimental; they are becoming operational backbones for large enterprises.

Global adoption is uneven but accelerating. While North American enterprises lead in AI-driven automation adoption—particularly in regulated industries like finance and healthcare—European firms are catching up, driven by GDPR-driven IT governance needs and a shortage of skilled IT staff. Meanwhile, Asian markets, particularly Japan and South Korea, are investing heavily in “lights-out” data centers powered by AI automation, reducing labor costs and improving reliability. The Palo Alto-Console acquisition may catalyze further consolidation, with private equity firms and strategic buyers likely to eye smaller automation startups in the $50 to $200 million valuation range. However, the biggest challenge for these platforms remains trust: enterprises remain cautious about ceding too much control to AI, especially in mission-critical systems. Regulatory scrutiny, particularly around data privacy and autonomous decision-making, is intensifying, with the EU AI Act and proposed U.S. regulations poised to shape the future of enterprise AI automation.

Looking ahead, industry watchers expect Palo Alto to rapidly integrate Console’s technology into its XSOAR (Extended Security Orchestration, Automation, and Response) platform, enabling autonomous incident response across hybrid cloud environments. Analysts anticipate Palo Alto will also launch a standalone Console-branded automation suite for non-security use cases, competing directly with Serval and other players. The company may accelerate M&A in adjacent markets, such as AIOps and digital experience monitoring, to build a unified automation stack. For enterprises, the message is clear: the era of human-centric IT operations is ending. Automation is no longer a luxury—it’s a necessity for scalability, security, and resilience. The question is not whether to adopt AI-driven automation, but which platform will dominate the next decade of enterprise IT. In this race, Palo Alto has just taken a decisive lead.