Palo Alto Networks Acquires Console for About 500 Million USD, Folding AI Agents into Cortex

Security giant Palo Alto Networks has acquired Console, a startup whose AI agents take over routine IT operations work. The official announcement did not disclose terms, but the deal is reported to be worth roughly 500 million USD (about 79.5 billion yen) in cash and stock. Founded just two years ago, the company automated the password resets and access changes that staff used to handle by hand, and it now becomes part of Cortex, Palo Alto Networks' security operations platform.

※1 USD = 159 JPY

A Price More Than Triple Its Last Valuation

Console was founded in 2024. Its funding history consists of only two rounds: a 6.2 million USD (about 1 billion yen) seed and a 23 million USD (about 3.7 billion yen) Series A, for a total of 29 million USD (about 4.6 billion yen). Thrive Capital led the seed, while DST Global and Thrive co-led the Series A.

The company was valued at 157 million USD (about 25 billion yen) before the sale, so a roughly 500 million USD exit delivered investors more than triple their marks in a short window. Backers include SV Angel and Abstract Ventures, but the notable name is Palo Alto Networks CEO Nikesh Arora, who had put in his own money as an angel investor. The buyer's chief executive was already personally on the cap table.

Agents Trained on Help Desk Chores, Redeployed to Security

Console's focus was the everyday intake work of an IT department: resetting passwords, granting access to tools such as Figma and Miro, provisioning and deactivating accounts during onboarding and offboarding, and running first-pass triage on tickets that amount to "it stopped working." None of these calls are hard on their own, but the volume steadily eats into a team's hours. Console handled them without a person in the loop, and its customers included Ramp, Flock Safety, and Scale AI.

Palo Alto Networks plans to fold that capability into Cortex, the platform that uses AI to detect and neutralize threats automatically. According to the company, security teams will be able to investigate and resolve alerts in natural language, giving Cortex the arms and legs it needs to actually act on what it detects.

The logic is straightforward. Finding an alert and then reaching into internal systems to close it out are two different technical problems. Palo Alto Networks has spent years on the first; Console sharpened the second on help desk work. Without the latter, a detection platform stops at "we found something, please review it." Buying that piece fills the gap.

The Seventh Acquisition of 2026

By PitchBook's count, Console is the seventh company Palo Alto Networks has acquired in 2026. Others taken in this year include Chronosphere, the observability platform backed by Greylock and Lux Capital, at a 3.35 billion USD (about 533 billion yen) valuation, and Koi, a security startup backed by Battery and Team8, for 400 million USD (about 63.6 billion yen).

Seven deals in a year is a clear signal that the company would rather buy capabilities and stitch them together than wait for internal development. Agent tooling is a space where small startups tend to move first, and leaving them alone means a rival picks them up. Five hundred million USD looks steep for a single piece of technology, but as the cost of widening what Cortex can do, it adds up.

Serval Is Left Standing as the One to Watch

Console's main rival was Serval, another company automating IT service management. Serval raised a 75 million USD (about 11.9 billion yen) Series B led by Sequoia last December at a 1 billion USD (about 159 billion yen) valuation. It started as an AI tech support tool and quickly extended into HR, legal, and finance requests.

One investor expects that with Console off the board, Serval becomes the category leader to watch. Both were aiming at the internal request handling market that ServiceNow has held for years. The push from AI agent startups into that incumbent workflow layer is now accelerating through both acquisitions and funding rounds.

Summary

The Console deal is one example of the yardstick for AI agents shifting from what they can answer to what they can execute. Roughly 500 million USD is more than triple the last valuation, but viewed as a component that automates the work after detection, the urgency makes sense. The contest over IT service management automation now looks set to widen into a three-way affair between ServiceNow as the incumbent, independents such as Serval, and the security majors.