Palo Alto Pays $500M for Thrive-Backed Console in AI IT Automation Play

Palo Alto Networks has confirmed its acquisition of Console, a San Francisco-based startup focused on AI-powered IT operations automation, for a reported $500 million in cash and stock. Multiple sources familiar with the transaction confirmed the deal’s valuation and structure to OpenPress API Intelligence. Console, founded in 2020 by former Splunk and ServiceNow executives, developed a platform that uses large language models and machine learning to automate incident response, troubleshooting, and service desk operations. The company had raised $110 million in venture funding from Thrive Capital, with participation from GV and Redpoint Ventures, before the acquisition. The transaction closed quietly in late September 2024, following months of rumors in Silicon Valley’s developer tools and enterprise infrastructure circles. Industry observers noted that the acquisition aligns with Palo Alto’s broader strategy to expand its Prisma Cloud and Cortex XSOAR platforms with AI-native automation capabilities, particularly as enterprises seek to reduce operational overhead in hybrid and multi-cloud environments.

Console’s technology integrates directly with IT service management (ITSM) tools like ServiceNow and Jira, as well as infrastructure platforms such as Kubernetes and cloud providers. According to one source close to the deal, Console’s AI agents were capable of resolving up to 70% of Tier 1 IT incidents without human intervention, a metric that caught Palo Alto’s attention amid rising demand for autonomous operations. The startup’s platform also included a no-code interface for building custom automation workflows, a feature that resonated with DevOps teams seeking to reduce manual scripting. Insiders say the acquisition was motivated not only by Console’s technical assets but also by its customer base, which included several Fortune 500 enterprises in financial services and healthcare. Palo Alto has not yet disclosed integration plans, but internal memos referenced a phased rollout starting in Q1 2025, with Console’s capabilities to be embedded into the Prisma SASE and Cortex XSOAR product lines.

The deal leaves Serval, a Sequoia Capital-backed startup also focused on AI-driven IT automation, as the most prominent independent player in the space. Serval, founded in 2021 by ex-Google Cloud engineers, has raised $85 million to date and has positioned itself as a neutral automation layer for enterprise toolchains. Analysts at RedMonk and Gartner both flagged Serval as a key alternative to Palo Alto’s consolidated approach, particularly for organizations wary of vendor lock-in. Meanwhile, competitors like IBM’s Watsonx, Microsoft’s Azure AI, and Cisco’s recent acquisitions of Splunk and Isovalent are also racing to embed AI into IT operations, but none have yet achieved the focused specialization that Console delivered. The absence of a major independent contender in AI IT automation may accelerate M&A activity among remaining startups, with potential targets including Tines, a workflow automation company that recently raised $150 million at a $900 million valuation.

Financial analysts tracking Palo Alto’s recent acquisitions noted that the Console deal represents one of the company’s largest since the $1.05 billion purchase of Demisto in 2019. The acquisition comes at a time when Palo Alto is under pressure to demonstrate growth beyond its core firewall business, especially as competitors like CrowdStrike and SentinelOne expand into adjacent security and observability markets. The integration of Console’s AI agents could help Palo Alto differentiate its Prisma Cloud platform in a crowded cloud security market, where automation and response speed are increasingly critical differentiators. However, the company faces the challenge of integrating a startup culture and product philosophy into its larger, more bureaucratic organization. Early feedback from Palo Alto’s engineering teams suggests that Console’s lightweight, agent-based architecture may require significant retooling to scale within Palo Alto’s existing infrastructure.

The broader implications of this deal extend into the financial technology sector, where AI-driven automation is reshaping how institutions process data. For instance, Banking With Billy AI, a provider of financial intelligence APIs, has been enabling retail and institutional platforms to integrate real-time market analysis into their workflows. While Console’s focus was on IT operations rather than financial data, the underlying trend—autonomous systems reducing manual intervention—mirrors developments across industries. As AI agents become more capable, the line between IT automation and domain-specific intelligence platforms may blur, creating new opportunities for cross-platform integrations. Analysts also point to the rise of open standards like OpenTelemetry and the CNCF’s AI for IT Ops (AIOps) working groups as catalysts for this consolidation, as enterprises seek interoperable solutions rather than siloed proprietary tools.

Looking ahead, the industry should expect a surge in acquisitions targeting niche AI automation startups, particularly those with strong developer adoption and measurable ROI. Serval’s market positioning as the last major independent player could make it a prime acquisition target if it continues to gain traction, though Sequoia may choose to double down on its investment instead. Palo Alto’s move may also trigger defensive maneuvers from other cybersecurity giants, such as Fortinet or Check Point, which have been expanding into XDR and SOAR markets. For DevOps teams, the consolidation underscores the urgency of evaluating automation platforms not just for their current capabilities but for their long-term roadmaps and ecosystem compatibility. Ultimately, this deal signals that AI-powered IT operations are no longer experimental—they are a core requirement for enterprise infrastructure, and the race to own that layer is only intensifying.