Palo Alto Networks agreed to pay $500 million in cash and stock for Console, a two-year-old AI startup that automates IT help-desk tasks, its seventh acquisition of 2026.
返回
Palo Alto Networks' $500M Console deal deepens AI-ops M&A push
The cybersecurity giant is paying $500 million in cash and stock to fold Console, a two-year-old startup whose AI agents handle routine IT help-desk work, into its Cortex security platform — the latest in a seven-deal acquisition spree this year.
"Console gives Cortex the arms and legs to deliver autonomous security outcomes across the entire enterprise," Nikesh Arora, chairman and chief executive officer of Palo Alto Networks, said in a statement.
The deal, announced Tuesday, values Console at more than three times the $157 million valuation PitchBook recorded before the sale. The startup raised $29 million across two rounds — a $6.2 million seed led by Thrive Capital and a $23 million Series A co-led by DST Global and Thrive — with backers including SV Angel and Abstract Ventures, plus Arora himself as an angel investor.
The purchase is Palo Alto Networks' seventh acquisition of 2026, following the observability platform Chronosphere, taken out at a $3.35 billion valuation, and the $400 million cyber startup Koi. It leaves Serval, a rival that reached a $1 billion valuation after a $75 million Series B led by Sequoia last December, as the startup to watch in AI-driven IT service management, one investor not backing Serval told TechCrunch.
Console's Agentic Reach
Console, founded by Andrei Serban shortly after his code-security startup Fuzzbuzz was acquired by Rippling, automates password resets, grants access to apps such as Figma and Miro, and performs routine troubleshooting without direct human involvement. Its customers included Ramp, Flock Safety, and Scale AI. Inside Cortex, Console's agentic functions will let security teams investigate and resolve alerts using natural language, extending the platform beyond threat detection into remediation.
The move pushes Palo Alto Networks into territory long held by ServiceNow, whose IT service management suite dominates enterprise help desks, and by a wave of challengers building AI-native replacements. Console's automation of access grants and password resets targets the same mundane workload that ServiceNow and its startup rivals have sought to offload from human teams, making the acquisition a direct bet on agentic IT operations as a growth market.
The M&A Math
The price tag shows how much Palo Alto Networks will pay for early-stage AI automation. At $500 million, the deal returns roughly 17 times the $29 million Console raised, a multiple that reflects both the scarcity of agentic IT operations startups and the strategic premium of attaching automation to a security platform. Palo Alto Networks declined to comment on the terms.
For the broader market, the acquisition adds to a year of heavy M&A appetite for young AI firms, a dynamic that could lift valuations for comparable automation startups courting acquirers. Console's exit also hands a fast payday to Thrive, DST Global, and the seed investors who backed the company just over a year ago — a return that may draw more venture money into the IT automation niche.
The acquisition fits a pattern at Palo Alto Networks under Arora, who has used dealmaking to extend Cortex beyond its firewall roots into a broader security operations platform. Buying Console brings the automation layer that lets Cortex act on the threats it detects rather than merely flagging them for human analysts — a capability the company argues is essential as security teams face a shortage of staff to triage alerts.
The deal is expected to close subject to customary conditions. Palo Alto Networks has not disclosed a timeline for integrating Console into Cortex, though the company has said it will lean on acquisitions to round out its platform as rivals including CrowdStrike and Zscaler expand their own AI-driven security offerings. If the integration lands as planned, Console's technology could give Cortex a route into the broader IT operations market that ServiceNow and Serval now contest.
This article is for informational purposes only and does not constitute investment advice.
