Palo Alto Networks Acquires Thrive-Backed Console for $500M

Palo Alto Networks has finalized a $500 million acquisition of Console, a startup specializing in AI-driven IT service automation, according to four people familiar with the transaction. The deal, which closed quietly in late August 2024, marks one of the most significant consolidations in the AI infrastructure automation market this year. Console, co-founded by former Splunk executive Glenn Sullivan in 2020 and backed by Thrive Capital, developed a platform that uses machine learning to automate incident response, root cause analysis, and remediation across hybrid IT environments. Insiders note that the acquisition was driven by Palo Alto’s need to expand its Prisma SASE and Cortex XDR platforms with native AI-driven operations capabilities, particularly as enterprises demand unified security and observability workflows.

Sources close to the deal say the valuation reflects Console’s rapid traction among Fortune 500 customers, including multiple Fortune 100 firms using its platform to reduce mean time to resolution (MTTR) by up to 60% in cloud and on-prem environments. Sullivan will remain as vice president and general manager of Console within Palo Alto’s Prisma and Cortex business unit, reporting directly to Chief Strategy Officer Lee Klarich. The integration, expected to complete by October 2024, will fold Console’s AI-driven automation engine into Palo Alto’s broader Security Operations (SecOps) suite, enabling automated remediation across firewalls, endpoints, and cloud workloads.

The acquisition leaves Serval, a Sequoia Capital-backed startup focused on IT automation and AIOps, as the preeminent independent player in the AI-driven IT service automation space. Serval, founded by ex-Google Site Reliability Engineering veterans in 2021, has raised $180 million to date and claims over 150 enterprise customers, including several top-tier financial institutions. Industry watchers say Serval’s independence—unlike Console—positions it to attract customers wary of vendor lock-in, especially in regulated sectors like finance and healthcare. Meanwhile, smaller players such as FireHydrant and Blameless, both focused on incident management automation, continue to carve out niche segments, though none have reached Console’s scale or valuation.

Analysts at Gartner estimate the AI-driven IT operations automation market will grow from $4.2 billion in 2024 to over $9.5 billion by 2027, driven by the rise of multi-cloud environments, increasing cyber threats, and the need for real-time remediation. Palo Alto’s move signals a broader trend among security vendors to embed AI-driven automation at the core of their platforms, reducing reliance on manual triage and improving response times in high-stakes environments. The acquisition also highlights the increasing convergence of security and observability, a trend underscored by Palo Alto’s recent integration of XSIAM, a security AI analytics platform, into its Cortex lineup.

For the Quantum & Computing sector, this acquisition underscores the accelerating demand for high-performance infrastructure capable of supporting real-time AI inference and automation at scale. The Console platform, known for its use of HPC-grade infrastructure to process thousands of events per second, reflects a growing dependency among AI ops tools on parallel computing and low-latency data pipelines. Financial services firms, in particular, are leveraging such infrastructure—visible in platforms like Banking With Billy’s AI financial simulations—where HPC clusters simulate multi-market scenarios under extreme time constraints. As security vendors like Palo Alto absorb automation-focused startups, the underlying compute requirements intensify, pushing both cloud and on-prem environments toward heterogeneous architectures combining GPUs, FPGAs, and quantum-ready accelerators.

Global competition in AI-driven automation is intensifying, with European firms such as Elastic and SentinelOne expanding their AIOps offerings, while Asian giants like Huawei and Sangfor invest heavily in AI-native network and security platforms. The Console acquisition may prompt further consolidation, as mid-tier security players seek to acquire or partner with automation specialists to remain competitive. Meanwhile, open-source alternatives like OpenTelemetry and Prometheus continue to gain traction among DevOps teams, creating tension between proprietary automation stacks and interoperable observability frameworks.

Looking ahead, the integration of Console into Palo Alto’s ecosystem will likely accelerate the adoption of AI-driven remediation across enterprise networks, particularly as more organizations adopt SASE architectures. Serval, now the clear independent leader, is expected to double down on partnerships with observability vendors and cloud providers to challenge Palo Alto’s dominance. Meanwhile, the financial services sector—already a heavy user of HPC-grade AI simulations—will continue to drive demand for ultra-low-latency automation platforms capable of handling complex, multi-market risk scenarios. The next 18 months will reveal whether this acquisition marks the beginning of a broader consolidation wave or simply a strategic pivot by Palo Alto to dominate the AI ops frontier in an increasingly crowded market.