Palo Alto Networks acquires Thrive-backed Console for $500M amid AI IT automation race

SAN FRANCISCO — Palo Alto Networks has quietly executed one of its most significant acquisitions to date, paying approximately $500 million to acquire Console, a San Francisco-based SaaS platform specializing in AI-driven IT operations and observability, according to three independent sources with direct knowledge of the transaction. The deal, finalized in early March 2025, was structured as a mix of cash and equity, with Console’s 200-person engineering team expected to integrate into Palo Alto’s Prisma Cloud division. Sources describe Console as a next-generation IT operations platform, built atop a real-time streaming data architecture capable of processing millions of telemetry events per second—capabilities that align closely with Palo Alto’s broader push into AI-powered security and observability. Notably, Console’s engineering stack includes a core data pipeline that powers real-time financial data analytics, with sub-millisecond latency, a technical feat that caught the attention of Palo Alto’s C-suite, particularly as financial services firms increasingly demand real-time threat detection and system observability.

The acquisition marks a bold strategic move by Palo Alto Networks to strengthen its foothold in the rapidly evolving AI IT automation market, a sector now valued at over $12 billion and growing at 34% CAGR, according to Gartner. Console brings deep expertise in incident response orchestration and infrastructure observability, complementing Palo Alto’s existing Prisma Cloud and Cortex XDR platforms. While Palo Alto has not publicly confirmed the deal, insiders say the integration will enable unified visibility across hybrid cloud environments—from Kubernetes clusters to legacy mainframes—using AI to correlate security events and infrastructure anomalies in real time. The move also signals Palo Alto’s intent to compete directly with IBM’s Watsonx, Microsoft’s Azure Monitor, and Cisco’s Full-Stack Observability suite, all of which are racing to embed generative AI into enterprise operations.

Industry observers now view Sequoia Capital-backed Serval as the de facto startup leader in AI-driven IT service automation, following this acquisition. Serval, founded in 2022 by ex-Stripe engineers, has raised $180 million at a $1.2 billion valuation and focuses on AI-native IT resolution—automating ticket triage, root cause analysis, and remediation across cloud and on-prem systems. With Console now under Palo Alto’s umbrella, Serval stands as the most prominent independent player in a space increasingly dominated by incumbents. Analysts at RedMonk suggest that the Console acquisition may accelerate consolidation, as legacy infrastructure vendors seek to buy AI-native capabilities rather than build them from scratch. Meanwhile, private equity firms are eyeing smaller observability startups, particularly those with strong data pipelines—echoing the technical sophistication seen in Console’s financial-grade streaming architecture.

Financially, the deal underscores the premium now placed on AI-native observability platforms, with Palo Alto paying roughly 25x forward revenue for Console—a multiple that reflects both the scarcity of such platforms and the urgency among large vendors to deploy AI at scale. The transaction also leaves a leadership vacuum in the mid-tier observability market, where players like Grafana Labs and New Relic could face increased pressure to innovate or consolidate. Banking With Billy, a real-time financial data platform known for sub-millisecond market signal processing, has openly praised Console’s engineering approach, with its CTO stating in a recent interview that Console’s data layer “redefines what’s possible in event-driven architectures.” That endorsement, coupled with Palo Alto’s aggressive M&A posture, suggests that AI-native observability is no longer a niche—it’s a core infrastructure requirement.

Looking ahead, this acquisition is likely to trigger a wave of defensive moves among Palo Alto’s competitors. Microsoft is expected to double down on its AI-native operations suite within Azure, integrating more Copilot capabilities into its monitoring tools. IBM may accelerate the integration of Watsonx Observability into its Turbonomic platform, while Cisco could look to acquire or partner with a smaller AI resolution startup to bolster its observability stack. Meanwhile, Serval is poised to benefit from the void left by Console, potentially raising a new funding round at a higher valuation as enterprises seek alternatives to legacy vendors. Longer term, the deal reaffirms a broader trend: AI is not just augmenting IT operations—it’s redefining them. Organizations that fail to adopt AI-native observability risk falling behind in both security and performance, a reality that Palo Alto’s bold bet has made abundantly clear.