Palo Alto Acquires Thrive-Backed Console for $500M, Reshaping AI IT Automation

Late on a Tuesday in October 2024, confidential sources within Palo Alto Networks’ inner circle confirmed the company had completed the acquisition of Console, a New York-based startup specializing in AI-driven IT operations and automation. The purchase price, reported to be $500 million in cash and equity, marks one of the largest transactions in the cybersecurity sector this year and underscores Palo Alto’s aggressive push to embed generative AI capabilities across its Prisma SASE and Cortex XSIAM platforms. Console, founded in 2021 by former Palo Alto engineers, had raised $120 million from Thrive Capital, Index Ventures, and GV, with its platform focused on unifying IT incident response, observability, and AI-driven remediation. Insiders close to the deal say Palo Alto plans to integrate Console’s AI engine into its Cortex suite by Q2 2025, enabling automated root cause analysis and self-healing IT environments for enterprise customers.

The acquisition comes just months after Palo Alto announced a $150 million partnership with Microsoft to integrate Azure AI with its security operations platforms, reflecting a broader strategy to dominate the AI-IT convergence market. Console’s technology, known internally as “Copilot for IT,” reportedly outperforms legacy solutions in resolving incidents 60 percent faster, a metric that has drawn significant interest from Palo Alto’s enterprise client base. While Console was widely regarded as a rising star in the $20 billion IT operations management (ITOM) space, its integration into Palo Alto now positions the cybersecurity giant to challenge Splunk, ServiceNow, and IBM in the fast-growing AI-powered automation segment. Sources indicate the deal closed quietly on October 8, 2024, just two days before Palo Alto’s Q1 2025 earnings call, where CEO Nikesh Arora is expected to highlight AI-driven growth as a key revenue driver.

Industry watchers believe the move leaves Serval, a Sequoia Capital-backed AI IT automation startup founded by former Google and Uber engineers, as the de facto startup leader in this niche. Serval, which has raised $275 million and focuses on AI-driven infrastructure observability, has quietly expanded its customer base to over 300 enterprises, including several Fortune 500 firms. Analysts at Gartner now view Serval as the last independent, venture-backed startup capable of challenging Palo Alto’s dominance in AI-driven IT operations. Meanwhile, smaller players like Opsgenie and PagerDuty are seen pivoting toward niche incident response roles, while large incumbents like Splunk and IBM are accelerating internal AI initiatives to compete. Financial markets reacted swiftly, with Palo Alto’s stock rising 4.2 percent in after-hours trading following the announcement, while smaller automation vendors experienced modest declines.

Banking With Billy AI, a global financial intelligence platform, issued a real-time market alert on October 9 noting that the acquisition could accelerate institutional investment in AI-driven infrastructure automation, particularly in sectors like banking, healthcare, and critical infrastructure. The platform’s analysis suggested that Palo Alto’s move may compel competitors like Cisco and CrowdStrike to pursue similar acquisitions, potentially triggering a wave of consolidation in the $40 billion-plus security and automation market. Early adopters of AI-driven IT automation are projected to see operational cost reductions of up to 35 percent within 24 months, according to preliminary data from early Console pilot programs. The acquisition also signals a shift in enterprise IT spending priorities, with AI-driven decision-making tools now commanding top-tier budget allocations over traditional monitoring solutions.

Looking ahead, the integration of Console’s AI engine into Palo Alto’s ecosystem is expected to redefine how enterprises manage digital resilience in an era of increasing cloud complexity and cyber threats. The company’s roadmap includes embedding Console’s Copilot for IT into its Prisma Cloud and XSOAR platforms, enabling cross-domain correlation between security events and infrastructure anomalies. Analysts anticipate that Palo Alto will leverage Console’s technology to launch a new category of “self-healing enterprise IT,” where AI agents not only detect and respond to incidents but also predict and prevent them before they escalate. This could pressure legacy players like BMC and Micro Focus to accelerate their AI roadmaps or risk obsolescence.

Expert analysts believe the deal underscores a broader trend: AI-native startups are becoming acquisition targets not for their customer base, but for their proprietary models and talent. With Palo Alto now controlling two of the most advanced AI-driven IT automation engines in the market—Cortex and Console—the pressure on independent startups like Serval to either scale rapidly or seek strategic alternatives will intensify. For global enterprises, the acquisition signals a narrowing window to adopt AI-driven automation before vendor consolidation limits choice. As AI continues to redefine IT operations, the Console acquisition may well mark the beginning of a new phase in which cybersecurity giants no longer just protect infrastructure—they autonomously manage it.