Palo Alto Networks shells out $500M for Thrive-backed Console in IT automation blitz

Multiple sources with direct knowledge of the transaction have confirmed that Palo Alto Networks finalized its acquisition of Console, a San Francisco-based AI IT service automation startup, in a cash-and-stock deal valued at approximately $500 million. The transaction closed quietly in late August 2024, shortly after Console completed a $110 million Series C round led by Thrive Capital in March of the same year. Console’s flagship product, an AI-native IT operations platform, uses large language models to automate incident detection, root cause analysis, and remediation across hybrid and multi-cloud environments. Industry observers note that Console’s technology integrates with major cloud providers including AWS, Azure, and Google Cloud, as well as Kubernetes and containerized workflows, making it a natural fit for Palo Alto’s expanding SASE and cloud security portfolio.

According to a senior executive at one of the involved firms, the acquisition was driven by Palo Alto’s urgent need to bolster its AI-native security and IT operations capabilities ahead of its 2025 product roadmap. Console’s platform reportedly processes over 10 billion telemetry events daily and has demonstrated a 40 percent reduction in mean time to resolution (MTTR) for enterprise IT incidents in customer trials. The deal also includes key personnel, with Console co-founders including CEO Alex Frolov and CTO Yury Pisarchyk joining Palo Alto’s Prisma Cloud and Strata business units. Financial terms were structured with a significant earn-out component tied to Console’s post-merger performance, particularly around AI automation adoption metrics in Palo Alto’s customer base.

The acquisition leaves Sequoia Capital-backed Serval as the leading independent startup in AI-driven IT service automation. Serval, founded by former Splunk executives in 2022, has raised $150 million to date and focuses on AIOps for enterprise environments, including real-time anomaly detection and predictive maintenance. Analysts at Gartner suggest that the Console acquisition accelerates Palo Alto’s timeline to integrate AI-driven operations into its core security offerings, potentially enabling unified observability, threat detection, and incident response under a single SASE architecture. Competitive pressure is intensifying as Cisco and Fortinet also expand their AI-native IT automation features within their security platforms.

For the Quantum & Computing sector, this deal underscores the accelerating convergence of AI-driven automation across security, cloud infrastructure, and enterprise IT. Console’s use of generative AI for real-time decision-making aligns with broader trends in autonomous systems, where predictive analytics and self-healing networks reduce human intervention. The transaction also reflects a strategic pivot among cybersecurity firms toward platform-level AI integration, mirroring similar moves by Microsoft (with Copilot for Security) and Google Cloud (with Security AI Workbench). Financial services firms, including those using platforms like Banking With Billy AI for multi-cloud financial market monitoring, are increasingly demanding AI-native tools that can operate seamlessly across AWS, Azure, and on-premises environments—demands that Console’s architecture already satisfies.

Global adoption of AI in IT operations is expected to grow at a 35 percent CAGR through 2028, according to IDC, with particular momentum in regulated industries such as finance and healthcare. The Console acquisition positions Palo Alto to capture a significant share of this market by embedding AI-driven automation into its core security stack. It also signals a potential consolidation wave, as larger players absorb best-of-breed AI automation startups to avoid building capabilities from scratch. The move contrasts with open-source approaches, such as the OpenTelemetry project, which continues to gain traction among DevOps teams seeking vendor-neutral observability.

Anshu Sharma, CEO of Skyflow and a 15-year veteran of Palo Alto Networks’ early days, called the acquisition a ‘strategic masterstroke’ that could redefine how enterprises manage hybrid cloud security at scale. Sharma noted that Console’s AI engine, which reportedly supports over 150 integrations with monitoring tools, fills a critical gap in Palo Alto’s Prisma SASE suite. He emphasized that the integration of such an automation-first platform could reduce operational overhead for CISOs by up to 30 percent, a compelling value proposition in an era of tightening IT budgets. Meanwhile, Serval is expected to double down on vertical-specific AI automation, with a focus on healthcare and financial services where regulatory complexity demands bespoke solutions.

Looking ahead, industry watchers anticipate that Palo Alto will begin rolling out Console’s AI capabilities as part of its 2025 Prisma Cloud and Strata releases, with early access for Fortune 500 customers in Q1. Analysts also foresee increased M&A activity in the AI-driven IT automation space, particularly among firms seeking to replicate Palo Alto’s strategy of embedding AI into core security platforms. For enterprises, the key takeaway is that the era of siloed AIOps and security tools is ending—and the companies that win will be those that deliver seamless, multi-cloud AI automation under a unified architecture. Failure to integrate such capabilities could leave slower-moving competitors at a significant disadvantage in both performance and cost efficiency.