Palo Alto Networks bought a two-year-old company with $29 million in venture funding for roughly $500 million this week. The more consequential effect of the deal may be what it did to a competitor that was not part of it.
On September 1, Palo Alto Networks announced it had acquired Console, an AI-native platform whose agents resolve routine IT help desk work -- password resets, provisioning access to tools like Figma and Miro, basic troubleshooting -- without a human in the loop. Neither company disclosed terms. A day later, TechCrunch reporter Marina Temkin reported that the price was approximately $500 million in cash and stock, citing two people with knowledge of the deal. Palo Alto Networks declined to comment on the figure.
If that number holds, it is a remarkable outcome. Console was founded in 2024 and raised $29 million across two rounds: a $6.2 million seed led by Thrive Capital and a $23 million Series A co-led by DST Global and Thrive. PitchBook put its pre-sale valuation at $157 million -- meaning the reported price is roughly triple its last private mark and more than seventeen times total capital raised. Backers including SV Angel and Abstract Ventures got a fast return. So did one individual angel investor: Nikesh Arora, chairman and CEO of Palo Alto Networks, the company that bought it.
What Console Actually Built
Console was founded by Andrei Serban, who started it shortly after his previous company, the code-security platform Fuzzbuzz, was acquired by Rippling. Its pitch was narrow and concrete: give IT teams an agent that closes tickets rather than routes them. Customers included Ramp, Flock Safety and Scale AI.
Palo Alto Networks is not buying a help desk product. It is folding Console into Cortex, its AI-driven security operations platform, and repointing the same agentic machinery at security alerts instead of IT requests. The logic is that triaging a suspicious login and provisioning a Figma seat are structurally similar problems: interpret intent, check permissions, act across systems, log everything.
"Security operations can no longer be about managing dashboards and queuing tickets just to help humans work faster," Arora said in the announcement. "By bringing Console into Palo Alto Networks, our customers can have a direct conversation with data and build agentic workflows in natural language that helps alert and remediate issues automatically. This is the shift to software-as-an-agent, giving our platform the arms and legs to deliver autonomous security outcomes across the entire enterprise."
Serban framed the sale as a scale problem solved. "We built Console around a simple idea: people should be able to express an operational goal, and intelligent software should handle the complexity required to achieve it," he said in the same release. Joining Palo Alto Networks, he added, would make agentic operations "faster to adopt, safer to govern, and far more consequential."
Console is Palo Alto Networks' seventh acquisition of 2026, according to PitchBook. The others include the Greylock- and Lux Capital-backed observability platform Chronosphere, acquired at a $3.35 billion valuation, and the security startup Koi, backed by Battery and Team8, for $400 million.
Why This Matters
The immediate read on this deal is consolidation. The more useful read is what consolidation does to the survivors.
Console's principal startup competitor was Serval, a Sequoia-backed company attacking the same market from the same angle. Serval raised a $47 million Series A in October 2025 and, less than three months later, a $75 million Series B led by Sequoia at a $1 billion valuation -- $127 million raised since August 2025. In its own account of the round, the company said revenue grew 500 percent in ninety days, headcount more than tripled, and multiple customers replaced incumbent IT service management systems outright. Sequoia reportedly compared the customer signal to what it saw in ServiceNow sixteen years ago.
With Console absorbed into a $100-billion-plus security vendor, Serval is now the last well-funded independent in AI-native IT service management. One investor, who is not a Serval backer, told TechCrunch that the acquisition leaves Serval as the category-leader-to-watch among startups automating IT service management.
That position cuts both ways. Being the only credible independent concentrates enterprise demand, talent and follow-on capital. It also makes you the sole remaining target -- and the sole remaining name every incumbent's product team benchmarks against.
There is a second signal buried in the price. Palo Alto Networks did not pay $500 million for revenue; a company two years old with $29 million raised does not have much. It paid for an agentic execution layer and the team that built it, then immediately repurposed it from IT into security. That is a bet that the scarce asset in enterprise AI is not the model but the plumbing that lets an agent safely take action inside a permissioned corporate environment. On that theory, category boundaries between IT automation, security operations and workflow tooling are already dissolving. Serval has been arguing the same thing from the other direction, expanding from IT into HR, finance and legal.
The Arora angle deserves a flag rather than an accusation. A CEO holding a personal stake in a company his employer acquires is a governance question boards are entitled to ask about, and one Palo Alto Networks has not publicly addressed. The stake was disclosed by TechCrunch, not the company.
What to Watch
Three things. First, whether Palo Alto Networks retains Console's IT customers -- Ramp, notably, appears on both Console's and Serval's customer lists -- or lets them churn while it retools the product for the security operations center. Second, whether Serval raises again at a step-up that reflects its new solitude, and at what multiple. Third, whether ServiceNow, the incumbent both startups were built to displace, finally answers with an acquisition of its own. Two of the three plausible targets are now gone.
“This is the shift to software-as-an-agent, giving our platform the arms and legs to deliver autonomous security outcomes across the entire enterprise.”— Nikesh Arora, Chairman and CEO, Palo Alto Networks