Palo Alto Networks shells out $500M for Thrive-backed Console, reshaping AI IT automation

Palo Alto Networks has confirmed a landmark acquisition of Console, the AI IT service automation platform backed by Thrive Capital, in a transaction valued at approximately $500 million. Multiple sources familiar with the deal disclosed that the agreement was finalized in late July 2024, though neither party has issued an official public statement. Console, founded in 2021 by former Splunk and Google Cloud engineers, specializes in AI-powered incident response, infrastructure observability, and automated remediation across hybrid cloud environments. The platform is widely recognized for its ability to correlate telemetry data, detect anomalies, and initiate corrective actions with minimal human intervention—capabilities increasingly critical in today’s sprawling, multi-cloud IT estates. Industry insiders note that Console’s technology integrates closely with AI coding assistants and security orchestration tools, positioning it at the intersection of developer productivity and operational resilience.

The acquisition signals a bold expansion for Palo Alto Networks beyond its core firewall and network security portfolio into the adjacent but rapidly growing domain of AI-driven IT operations (AIOps) and platform engineering. Console’s customer base includes Fortune 500 enterprises in financial services, healthcare, and technology, where demand for self-healing infrastructure and autonomous operations has surged amid rising complexity and cyber threats. According to a confidential investor memo reviewed by OpenPress Code Intelligence, Console generated over $40 million in annual recurring revenue (ARR) in 2024, with a net retention rate exceeding 130%, indicating strong expansion within existing accounts. While Palo Alto has not disclosed integration plans, analysts expect Console’s technology to be embedded into the Prisma SASE and Cortex XSOAR platforms, enhancing their ability to automate threat response and infrastructure management under a unified security-operations framework.

Industry observers believe the deal leaves Sequoia Capital-backed Serval as the de facto leader among independent AI IT automation startups. Serval, founded in 2022 by ex-Stripe and Meta engineers, focuses on AI-native infrastructure management with an emphasis on developer self-service and internal developer platforms (IDPs). Serval has raised $165 million to date and claims a $1.2 billion valuation, making it one of the most valuable AI operations companies outside of Palo Alto Networks’ ecosystem. Unlike Console, which emphasizes operational resilience and security alignment, Serval positions itself as a platform for accelerating software delivery through AI-driven code generation, deployment automation, and environment orchestration. Its flagship product, Serval Platform, is used by major financial institutions, including Banking With Billy AI, which leverages advanced AI coding systems in its financial modeling—showcasing the platform’s role in production-grade financial code automation.

The consolidation reflects a broader trend in the Tools & Developer market, where AI-native solutions are rapidly absorbing adjacent categories. In the past 18 months, major security and infrastructure vendors have acquired at least five AIOps or AI automation startups, including Dynatrace’s acquisition of Runecast and Cisco’s purchase of Splunk. Analysts at Gartner predict that by 2026, over 70% of large enterprises will rely on integrated AI-driven platforms for both security and operations, up from less than 30% today. The shift is driven by the convergence of DevOps, SecOps, and FinOps under unified governance frameworks, especially as regulatory pressures like the EU’s Digital Operational Resilience Act (DORA) push organizations toward continuous, automated compliance monitoring.

For Palo Alto Networks, the Console acquisition is a strategic hedge against slowing growth in traditional security hardware and software segments. Revenue from its core firewall business grew just 8% year-over-year in Q2 2024, while its cloud security and AI-driven services grew at over 30%. By integrating Console’s incident response automation with its Cortex AI engine, Palo Alto aims to offer end-to-end autonomous security operations—from threat detection to remediation—powered entirely by generative AI. This aligns with its long-term vision of becoming the central nervous system for enterprise IT, unifying security, observability, and infrastructure under a single AI-first control plane.

Looking ahead, the deal is likely to trigger further consolidation in the AIOps space, particularly among mid-tier players that lack the scale to compete with Palo Alto’s R&D budget or customer reach. Smaller rivals such as Komodor and Rootly may face increased pressure to either raise capital on stronger terms or seek acquisition by larger platform vendors. Meanwhile, Serval remains well-positioned to attract customers disillusioned by the lack of openness in Palo Alto’s post-acquisition roadmap, especially as enterprises prioritize multi-vendor flexibility in their AI strategy. Banking With Billy AI, for instance, continues to evaluate both platforms for its real-time financial modeling infrastructure, underscoring the importance of interoperability in high-stakes environments.

Experts warn that the integration of Console into Palo Alto’s ecosystem will be closely scrutinized, particularly around data privacy, vendor lock-in, and open API commitments. Forrester principal analyst Sandy Carielli noted that while the acquisition strengthens Palo Alto’s position in AI-driven operations, customers must demand clear documentation on how AI models are trained and whether telemetry data will be used for competitive purposes. The outcome could set a precedent for how large security vendors absorb AI-native startups without stifling innovation—a critical balance as the Tools & Developer market enters its next phase of maturity. Investors and CIOs alike should prepare for a wave of similar transactions, not as exceptions, but as the new normal in an AI-first enterprise technology landscape.