Palo Alto Networks Buys AI Startup Console for $500 Million

Palo Alto Networks has acquired Console, an AI-driven IT help desk automation startup, for approximately $500 million in cash and stock. The move signals a strategic push toward autonomous security operations by integrating agentic AI into the company's existing infrastructure.

Console specializes in AI-driven IT service management (ITSM), automating routine administrative tasks such as application access and password resets. The startup built a high-profile client base that included Scale AI, Ramp, and Flock Safety. Before the acquisition, Console had raised $29 million in funding, consisting of a $6.2 million seed round led by Thrive Capital and a $23 million Series A co-led by Thrive and DST Global. The company was founded by Andrei Serban, who previously founded Fuzzbuzz, which was acquired by Rippling.

The Shift to Agentic Security

This acquisition is part of a broader trend toward "agentic" security, where artificial intelligence evolves from merely detecting threats to autonomously resolving them using natural language. By absorbing Console's technology, Palo Alto Networks intends to integrate these capabilities into its Cortex platform. The goal is to provide the necessary infrastructure to deliver autonomous security outcomes across the entire enterprise.

A Year of Aggressive Expansion

The purchase of Console is the latest in a series of high-value acquisitions by Palo Alto Networks in 2026. The company has aggressively expanded its AI and observability footprint this year, including the $3.35 billion acquisition of Chronosphere and the purchase of Koi for approximately $400 million. These moves place Palo Alto Networks in direct competition with other AI-driven automation players, including the Sequoia-backed startup Serval.

Industry Implications

For the enterprise security market, this consolidation suggests a move away from manual intervention. By providing the execution layer for its platform, Palo Alto Networks aims to reduce the operational burden on security teams, allowing AI to handle the execution of security protocols rather than just alerting a human operator to a problem. This shift could accelerate the adoption of fully autonomous security operations centers (SOCs).

What to Watch

As Console's agentic AI is folded into Cortex, the industry will be watching for how these autonomous capabilities perform in complex, real-world security environments. While the integration promises efficiency, the transition from detection to autonomous resolution remains a high-stakes evolution for enterprise risk management. The success of this integration will likely determine if the industry can safely move toward a model where AI manages the full lifecycle of a security incident without human oversight.