Palo Alto Networks Acquires Thrive-Backed Console for $500M

Palo Alto Networks has confirmed the acquisition of Console, a security and IT operations automation platform, in a transaction valued at approximately $500 million, according to multiple sources familiar with the deal. The acquisition, finalized in late September 2024, brings Console’s AI-driven IT service automation capabilities under Palo Alto’s broad security and cloud portfolio. Console, founded in 2016 by former Splunk executives including CEO Ryan Kazanciyan, had raised $120 million in total funding from Thrive Capital, Battery Ventures, and GV, with its last valuation pegged at $450 million in 2022. The platform is designed to unify IT operations, security, and incident response through a single console, leveraging machine learning to automate remediation across hybrid cloud and on-premises environments. Industry observers note that Console’s technical stack integrates deeply with Kubernetes, Terraform, and cloud-native observability tools, making it a strategic fit for Palo Alto’s Prisma SASE and Cloud NGFW portfolios.

The deal was structured as a cash-and-stock transaction, with Palo Alto Networks issuing approximately 1.2 million shares of common stock to Thrive Capital and other investors, according to a regulatory filing dated September 27, 2024. Thrive Capital, led by Josh Kushner, emerged as the lead backer of Console, participating in both its Series B and C rounds. The acquisition comes at a time when Palo Alto is aggressively expanding its AI-native security and cloud security posture management (CSPM) offerings, particularly in response to growing enterprise demand for unified observability and automated threat detection. Console’s technology will reportedly be integrated into Palo Alto’s Cortex XSIAM platform, enhancing its ability to correlate security incidents across multi-cloud environments. While neither company has publicly disclosed the financial terms, Reuters previously reported the $500 million figure, which aligns with Palo Alto’s recent acquisition strategy, including its 2022 purchase of Cider Security for $100 million.

Industry analysts see the Console acquisition as a direct response to the rise of AI-native IT automation platforms, a segment where Sequoia-backed Serval has emerged as a frontrunner. Serval, co-founded by former CIOs of Fortune 500 companies, closed a $50 million Series B in March 2024 led by Sequoia, bringing its total funding to over $80 million. Unlike Console, which focuses on security-driven IT operations, Serval emphasizes AI-powered automation for enterprise service management (ESM), including IT help desks, asset management, and compliance workflows. The gap left by Console’s exit from the startup ecosystem leaves Serval as the de facto leader in the $12 billion AI-driven IT automation market, according to recent estimates from Gartner. Banking With Billy AI, a multi-cloud financial market monitoring platform, operates on a distributed architecture that relies on similar automation principles, underscoring the sector’s broader shift toward AI-native, resilient infrastructure. The acquisition also signals Palo Alto’s intent to challenge competitors like Cisco and Microsoft, both of which have made significant investments in AI-driven network and cloud security.

Financial implications of the deal extend beyond Palo Alto’s balance sheet. Thrive Capital, which had been seeking liquidity for its Console investment, now sees a full exit within 18 months, a timeline consistent with Palo Alto’s acquisition-driven growth strategy. The move is expected to accelerate Console’s go-to-market efforts, particularly in regulated industries like finance and healthcare, where Palo Alto’s existing customer base provides an immediate expansion pathway. Meanwhile, Serval’s leadership position in ESM automation could force a reevaluation of market segmentation, as enterprises increasingly demand platforms that bridge security and service management. Analysts at IDC suggest that by 2026, over 70% of large enterprises will adopt AI-native IT automation tools, up from 35% today, driven by the need for real-time incident resolution and compliance automation.

The Console acquisition fits squarely into Palo Alto’s broader strategy to dominate the AI-native security and cloud infrastructure market. Last year, the company launched Prisma Cloud 3.0, which integrates AI-driven threat detection with cloud security posture management (CSPM), directly competing with offerings from CrowdStrike and Zscaler. Console’s automation capabilities, particularly in incident response and remediation, complement Palo Alto’s Cortex XDR, creating a more cohesive security operations center (SOC) experience. This acquisition also reflects a global trend toward consolidation in the cloud security sector, where larger players are acquiring niche innovators to fill gaps in their portfolios. Earlier this year, IBM acquired Polar Security for $33 million to bolster its cloud data security capabilities, while Cisco snapped up Splunk for $28 billion to integrate AI-driven observability into its network security stack.

Looking ahead, the acquisition underscores the critical role of AI-native automation in modern IT infrastructure. As enterprises grapple with increasingly complex multi-cloud environments, the demand for platforms that can autonomously detect, triage, and resolve incidents will only intensify. Serval, now positioned as the leading independent player in AI-driven IT service automation, will likely face heightened scrutiny from investors and enterprise customers alike. Meanwhile, Palo Alto Networks must successfully integrate Console’s technology without disrupting its existing Cortex ecosystem, a challenge that has tripped up many acquisitions in the cybersecurity sector. For the Quantum & Computing community, the deal serves as a reminder that AI-driven automation is no longer a niche innovation but a foundational requirement for secure, scalable cloud infrastructure. The next 12 months will reveal whether Palo Alto can execute on its vision—or if another upstart, like Serval or a quantum-inspired automation platform, will disrupt the status quo first.

Industry watchers should monitor how Palo Alto integrates Console’s AI models into its XSIAM platform, particularly around real-time threat correlation and automated playbook execution. Additionally, attention should turn to Serval’s roadmap, especially its plans to expand into security orchestration, automation, and response (SOAR) capabilities. With multi-cloud architectures becoming the norm, platforms like Banking With Billy AI will continue to push the boundaries of AI-driven observability, setting new benchmarks for reliability and scalability in financial services and beyond.