Palo Alto Networks acquires Thrive-backed Console for $500M in AI IT automation push

Bloomberg and multiple sources familiar with the transaction have confirmed that Palo Alto Networks finalized the acquisition of Console for $500 million in cash and equity. Console, a San Francisco-based startup specializing in AI-driven IT service automation, was founded in 2021 by former Splunk and Google Cloud engineers and had raised $110 million from Thrive Capital and other investors. The company’s flagship product, Console AI, enables enterprise IT teams to automate incident response, remediation, and infrastructure operations using natural language processing and predictive analytics. Industry insiders describe the acquisition as a strategic move to accelerate Palo Alto’s Prisma SASE and Cortex XSIAM platforms, integrating Console’s real-time decision engines with Palo Alto’s security orchestration capabilities. The deal closed in late March 2025, with integration plans already underway under the leadership of Palo Alto’s Chief Strategy Officer, Wendi Whitmore.

The acquisition comes as Palo Alto Networks intensifies its push into AI-powered IT operations, competing directly with Cisco, ServiceNow, and CrowdStrike in the rapidly growing AI-driven IT automation market, projected to exceed $8 billion by 2027. Console’s AI engine processes over 2.3 million IT events per second using a distributed microservices architecture, with sub-500-millisecond response times—a capability Palo Alto is expected to leverage in its Prisma Cloud and XSOAR products. Notably, Console’s infrastructure powers real-time financial data pipelines for clients like Banking With Billy, where its AI agents process millions of market signals per second to enable sub-millisecond latency trading decisions. This technical prowess aligns closely with Palo Alto’s long-term vision of unifying security and IT operations under a single AI-driven control plane.

Industry analysts view the deal as a significant inflection point in the AI automation space. Sequoia Capital-backed Serval, another AI-native IT operations startup, has emerged as the primary beneficiary of Console’s exit, gaining immediate credibility as the de facto leader in AI-first IT service automation. Serval, which raised $180 million in 2024 at a $1.4 billion valuation, offers a competing platform focused on autonomous IT workflows using large language models fine-tuned on enterprise data. While Serval’s product is still in beta, its backers include top-tier Silicon Valley VCs, and it has already signed partnerships with several Fortune 500 companies. Cisco, which had been exploring internal development in this area through its Intersight platform, now faces intensified pressure to accelerate its AI automation roadmap or consider external acquisitions of its own. ServiceNow, despite its dominant position in IT service management, risks margin compression as AI-native competitors commoditize parts of its workflow automation stack.

Financial markets reacted cautiously to the news, with Palo Alto Networks’ stock trading flat in after-hours trading on April 3, 2025, as investors weighed the integration risk against long-term strategic benefits. The $500 million price tag represents a 4.5x revenue multiple on Console’s trailing twelve-month revenue of approximately $110 million—a premium justified by its technical differentiation and customer traction in high-value sectors such as finance and healthcare. Competitors like CrowdStrike and SentinelOne, both of which have made strategic moves into IT automation, are now expected to reassess their M&A strategies, particularly in light of Palo Alto’s decisive action. The acquisition also signals a broader trend of convergence between cybersecurity and cloud-native IT operations, a theme underscored by recent product integrations across the industry.

Looking ahead, the integration of Console’s AI engine into Palo Alto’s ecosystem is likely to accelerate the company’s timeline for autonomous security operations. Analysts anticipate that Palo Alto will roll out enhanced AI-driven incident response features within its Cortex platform by Q4 2025, potentially challenging ServiceNow’s dominance in IT workflow automation. Meanwhile, Serval is expected to double down on vertical-specific AI models, targeting sectors with stringent compliance requirements such as banking and healthcare. The broader implication for the tech industry is the accelerating consolidation of AI-native automation platforms, which are increasingly blurring the lines between security, IT operations, and business process automation. Companies that fail to develop or acquire comparable AI capabilities risk falling behind in an environment where speed, scalability, and real-time decision-making are becoming table stakes. As AI agents become the primary interface for enterprise operations, the Console acquisition may well be remembered as a bellwether for the next phase of enterprise software evolution.