By Titik Puspa 
In a significant move to bolster its AI capabilities and expand its autonomous security offerings, cybersecurity giant Palo Alto Networks has acquired Console, a two-year-old startup specializing in AI agents for automating routine IT help desk tasks. The deal, valued at a substantial $500 million in a mix of cash and stock, underscores the growing demand for intelligent automation solutions within enterprise IT and security operations. The acquisition was officially announced on Tuesday, though the financial terms were not disclosed by the companies.
Console, founded in 2024, had a meteoric rise in the startup ecosystem, securing $29 million in funding across two rounds. Its journey began with a $6.2 million seed round led by Thrive Capital, followed by a $23 million Series A co-led by DST Global and Thrive Capital. This rapid fundraising success highlights the immense potential investors saw in Console’s vision of freeing IT teams from mundane, repetitive tasks through advanced AI. Prior to its acquisition, Console was valued at $157 million, according to PitchBook data, presenting a lucrative return for its early investors. Notably, the roster of investors included SV Angel, Abstract Ventures, and even Palo Alto Networks CEO Nikesh Arora himself, who participated as an angel investor, hinting at an early belief in Console’s disruptive technology. Palo Alto Networks has declined to comment on the specifics of the deal.
The strategic integration of Console into Palo Alto Networks’ existing ecosystem is expected to significantly enhance its Cortex platform. Cortex, already a formidable force in AI-driven threat detection and neutralization, will now gain what CEO Nikesh Arora described as "the arms and legs to deliver autonomous security outcomes across the entire enterprise." Console’s core strength lies in its "agentic functionality," which enables AI agents to interact with systems, understand context, and execute tasks autonomously. For security teams, this translates to the ability to investigate and resolve alerts using natural language commands, drastically reducing response times and freeing up human analysts for more complex strategic work. Imagine an AI agent capable of understanding a security alert, cross-referencing it with relevant logs, initiating containment protocols, and even drafting an initial incident report, all without human intervention. This is the promise Console brings to Palo Alto Networks.
The entrepreneurial spirit behind Console is embodied by its founder, Andrei Serban. His previous venture, Fuzzbuzz, a code-security platform, was also acquired by Rippling, demonstrating a consistent ability to identify market needs and build innovative solutions. Serban’s expertise in developer tools and security has now been channeled into automating IT operations. Console’s client list, which included prominent companies like Ramp, Flock Safety, and Scale AI, speaks to the broad applicability and effectiveness of its technology. The startup’s automation capabilities extended to a wide range of common IT help desk requests, from password resets and user provisioning for applications like Figma and Miro to performing routine troubleshooting, all executed without direct human oversight. This level of automation not only improves efficiency but also enhances the employee experience by providing faster resolution of IT issues.
The competitive landscape for IT service management (ITSM) automation is rapidly evolving, with AI playing an increasingly central role. Console was primarily positioned against startups like Serval, another formidable player in the ITSM space. Serval, which achieved a $1 billion valuation after raising a $75 million Series B round led by Sequoia Capital in December, initially focused on AI tech support but strategically expanded its offerings to encompass AI assistance for human resources, legal, and finance departments. Console’s acquisition by Palo Alto Networks leaves Serval as a prominent category leader to watch in the realm of startups automating IT service management, according to insights from an investor not involved with Serval. This consolidation within the AI-driven automation market suggests a maturing industry where larger players are actively acquiring innovative technologies to maintain their competitive edge.
This acquisition marks a significant milestone in Palo Alto Networks’ aggressive M&A strategy in 2026. Console represents the seventh acquisition by the cybersecurity behemoth this year alone, as tracked by PitchBook. This spree of acquisitions demonstrates a clear intent to rapidly expand its technological portfolio and consolidate its position as a leader across various cybersecurity domains. Other notable VC-backed companies that have recently joined the Palo Alto Networks family include Chronosphere, an observability platform backed by Greylock and Lux Capital, acquired for a staggering $3.35 billion, and Koi, a cyber startup supported by Battery and Team8, for $400 million. These acquisitions highlight Palo Alto Networks’ focus on acquiring companies with cutting-edge technology, particularly those leveraging AI and cloud-native architectures, to enhance its comprehensive security platform. The sheer volume and scale of these recent acquisitions signal a deliberate strategy to accelerate innovation and market penetration by integrating best-in-class solutions.
The impact of Console’s AI agentic technology on Palo Alto Networks’ Cortex platform is expected to be transformative. By infusing Cortex with Console’s ability to understand natural language requests and autonomously execute IT and security workflows, Palo Alto Networks is poised to deliver a truly end-to-end autonomous security experience. This could range from automated incident response and vulnerability patching to proactive system health monitoring and resource optimization. The notion of an AI agent capable of understanding a security analyst’s intent expressed in plain English and then executing a complex series of actions across various security tools is a significant leap forward. This not only enhances operational efficiency but also democratizes access to advanced security capabilities, allowing less experienced personnel to leverage powerful automation tools.
Furthermore, the acquisition aligns with the broader industry trend of leveraging AI to address the growing complexity and volume of cyber threats. As the attack surface expands with the proliferation of cloud environments and connected devices, traditional manual security approaches are becoming increasingly unsustainable. AI-powered automation, as exemplified by Console, offers a scalable and efficient solution to manage these challenges. The ability to automate routine tasks like alert triage, threat hunting, and remediation frees up highly skilled security professionals to focus on more strategic initiatives, such as threat intelligence, policy development, and incident preparedness.
The founder’s background is also noteworthy. Andrei Serban’s prior success with Fuzzbuzz, a platform focused on code security, indicates a deep understanding of the software development lifecycle and the security challenges inherent in it. This experience likely informed his approach to building Console, focusing on practical, real-world problems that IT and security teams face daily. The acquisition by Rippling of Fuzzbuzz also suggests Serban’s ability to build valuable companies that attract significant interest from larger players in the tech industry. His return to the acquisition market with Console further solidifies his reputation as a visionary entrepreneur.
The competitive dynamics between Console and Serval also offer a glimpse into the future of ITSM. Both companies recognized the potential of AI to revolutionize how IT services are delivered and managed. While Serval pursued a broader expansion into multiple enterprise functions, Console’s focus on deeply automating IT help desk tasks, and now its integration into a comprehensive security platform, highlights a more specialized, yet potentially more impactful, application of AI. The success of these startups has undoubtedly influenced the strategies of established ITSM providers, pushing them to invest more heavily in AI capabilities.
Palo Alto Networks’ consistent acquisition strategy reflects a proactive approach to staying ahead in the rapidly evolving cybersecurity landscape. By acquiring companies like Chronosphere, Koi, and now Console, they are not just expanding their product suite but also integrating innovative technologies and talented teams. This approach allows them to rapidly incorporate emerging trends and capabilities into their core offerings, rather than relying solely on internal R&D, which can be a slower process. The substantial valuations of these acquired companies, including Console’s $500 million price tag, indicate the high premium placed on advanced AI and cloud-native security solutions.
In conclusion, the acquisition of Console by Palo Alto Networks is a strategic masterstroke that promises to significantly enhance the latter’s autonomous security capabilities. The infusion of Console’s AI agentic technology into the Cortex platform will empower security teams with unprecedented levels of automation, enabling them to respond to threats more rapidly and efficiently. This move not only solidifies Palo Alto Networks’ position as a leader in the cybersecurity market but also signals a clear direction for the future of enterprise security, where AI-powered automation will play an increasingly critical role in defending against ever-evolving threats. The rapid success of Console, from its founding to a $500 million acquisition in just two years, is a testament to the power of innovative AI solutions in addressing pressing business needs and the significant investor appetite for such technologies.
