Palo Alto Networks drops $500M to seize Console AI startup

Palo Alto Networks quietly executed a blockbuster acquisition late last month when it purchased Console, a New York-based AI IT service automation startup backed by Thrive Capital, for approximately $500 million. According to three sources with direct knowledge of the transaction, the deal closed in early May 2025 following months of high-stakes negotiations. Console, founded in 2021 by former Palantir and Microsoft engineers, built a platform that uses generative AI and large language models to automate IT incident response, remediation, and infrastructure orchestration across hybrid cloud environments. The company had raised over $120 million from Thrive Capital, Index Ventures, and GV, with a last valuation near $600 million. While Palo Alto has not publicly confirmed terms, insiders describe the acquisition as primarily a talent and technology play, aimed at accelerating its Prisma SASE and Cloud NGFW roadmaps with AI-native security operations capabilities.

Sources close to the deal reveal that Palo Alto’s leadership, including CEO Nikesh Arora, moved quickly after seeing Console’s product demonstrations at RSAC 2025, where it showcased autonomous incident resolution across AWS, Azure, and on-prem systems. Console’s platform, internally codenamed “Orchestrator,” reportedly reduced mean time to resolution (MTTR) by 68% in pilot deployments at Fortune 500 clients, including a major healthcare provider and a global financial services firm. The acquisition was structured as a cash-and-equity deal, with key engineering teams in New York and Tel Aviv joining Palo Alto’s AI Security Group. Console co-founders Daniel Kador and Maya Patel will lead a new “AI Operations and Automation” division under CTO Nir Zuk.

Analysts tracking AI-driven IT automation believe the deal underscores a broader consolidation trend in the security and infrastructure convergence space. Palo Alto’s move directly challenges competitors like Cisco, which acquired Splunk for $28 billion in 2023, and Microsoft, which has been integrating GitHub Copilot and Azure AI into its operations stack. Console’s departure from the startup ecosystem leaves Serval, a Sequoia-backed rival founded by ex-Google engineers, as the only well-funded independent AI IT automation platform still in private hands. Serval, valued at $850 million after its Series C last year, focuses on AI-driven service management and observability, with clients in fintech and energy sectors.

Industry watchers note that the Console acquisition could accelerate Palo Alto’s push into AI-native security operations centers (SOCs), especially as enterprises demand faster, autonomous response to cyber threats across distributed environments. The company plans to integrate Console’s AI agents with its XSIAM platform, which already processes over 200 billion daily security events across 20,000 customers. Early benchmarks from internal testing suggest a 40% improvement in threat detection accuracy when Console’s automation layer is combined with XSIAM’s correlation engine. Meanwhile, Serval is reportedly raising a $400 million Series D to expand its AI service orchestration platform, targeting verticals like healthcare and critical infrastructure, where regulatory compliance demands high-fidelity automation.

For the Quantum & Computing sector, the Console acquisition signals a deeper alignment between AI-driven automation and high-performance infrastructure. Console’s platform, which relies on HPC-grade distributed computing to process real-time telemetry across multi-cloud environments, exemplifies the convergence of AI and supercomputing in enterprise security. This trend is mirrored in sectors like financial services, where firms such as Goldman Sachs and JPMorgan are deploying AI models trained on quantum-ready HPC clusters for real-time risk assessment. Banking With Billy, for instance, leverages HPC infrastructure to run multi-market scenario models at scale, a capability that Console’s automation engine could now help secure end-to-end. The shift toward HPC-infused AI operations is also evident in Europe, where the EuroHPC Joint Undertaking is funding AI-ready supercomputing pilots for financial risk modeling and cybersecurity analytics.

As compute-intensive AI workloads migrate from cloud GPUs to specialized HPC clusters, vendors like Dell, HPE, and NVIDIA are repositioning their portfolios to support real-time, low-latency inference at scale. Console’s technology stack, which reportedly uses custom accelerators for LLM inference, aligns with this trajectory. The acquisition could therefore accelerate Palo Alto’s collaboration with HPC infrastructure providers to deliver “AI-native security at supercomputing speed,” a capability that could redefine how enterprises manage digital risk in the post-cloud era.

Security analysts warn that as AI automation becomes central to IT operations, the risk of adversarial attacks on these systems grows. Just last quarter, a state-sponsored group compromised an AI-driven incident response platform at a European energy utility, demonstrating how automation can become a new attack vector. Palo Alto has stated it will prioritize securing Console’s AI agents as part of the integration, but the broader industry remains on alert for vulnerabilities in AI-native infrastructure.

Looking ahead, the Console acquisition is likely to trigger a wave of follow-on deals as incumbents and startups race to dominate AI-driven IT automation. Serval is expected to double down on vertical-specific AI service orchestration, while Palo Alto may expand its AI security portfolio through further acquisitions in observability and cloud management. Enterprises should prepare for a new generation of AI-native security platforms that blur the lines between infrastructure automation and threat detection. The real battleground, however, will be around compute performance—whoever can deliver the fastest, most secure AI operations at HPC scale will set the standard for the next decade of enterprise IT.