• Palo Alto Networks is paying about $500 million, in cash and stock, for Console, according to people familiar with the deal cited by TechCrunch; neither company has disclosed official terms.
• Console, founded in 2024 by Andrei Serban, built an AI agent that automated IT help-desk tasks — password resets, app-access provisioning to tools like Figma and Miro, and routine troubleshooting — competing primarily with Serval as rival ServiceNow challengers.
• Console raised just $29 million total — a $6.2 million Thrive Capital-led seed in June 2025 and a $23 million Series A co-led by DST Global and Thrive Capital — before the reported $500 million sale roughly 15 months later.
• Palo Alto Networks CEO Nikesh Arora was a personal angel investor in Console before his own company acquired it — an overlap neither company has addressed publicly.
• The deal is Palo Alto Networks' seventh acquisition of 2026 and leaves Sequoia-backed Serval, valued at $1 billion, as the largest still-independent player chasing the same AI IT-service-automation category.

Palo Alto Networks, the Santa Clara, California cybersecurity vendor, said this week it has acquired Console, an AI agent startup founded in 2024 that automated IT help-desk tasks like password resets and app-access provisioning, in a deal reported at roughly $500 million in cash and stock, according to people familiar with the transaction cited by TechCrunch. The price marks up Console's last tracked valuation more than threefold in about 15 months and delivers a personal payday to Palo Alto Networks chairman and CEO Nikesh Arora, who invested in Console as an angel before his company bought it — a detail with governance stakes beyond the deal's technology rationale.

The bet

Palo Alto Networks is betting it can repurpose Console's IT-automation agent for security use inside Cortex, turning a tool built to resolve help-desk tickets into one that handles security alerts. Arora framed the move as a shift toward "software-as-an-agent," per the company's announcement, saying the acquisition gives Cortex "the arms and legs to deliver autonomous security outcomes" — a forward-looking plan for the technology, not a description of what Console sold before the deal. Console's own pitch, per Serban, was letting people "express an operational goal" while software handled the execution complexity of IT tasks like access provisioning and troubleshooting.

The traction

Console's commercial footprint was thin but notable: customers reportedly included corporate-card company Ramp, security-camera firm Flock Safety, and AI lab Scale AI, which used Console's agent for internal IT help-desk automation, per TechCrunch. Founded in 2024, Console raised just $29 million total — a $6.2 million seed led by Thrive Capital in June 2025, then a $23 million Series A co-led by DST Global and Thrive Capital. That is a small balance sheet for a $500 million exit, underscoring how much of the price reflects the customer roster and agent architecture rather than capital deployed.

The terms — and the conflict

Neither company disclosed official deal terms; the roughly $500 million cash-and-stock figure comes from people familiar with the transaction, cited by TechCrunch, marking up Console's last PitchBook-tracked valuation of $157 million by about 3x. Notably, Arora was himself a Console angel investor alongside SV Angel and Abstract Ventures, per TechCrunch — meaning the executive whose company approved the acquisition held a personal financial stake in the target beforehand. Neither company has addressed that overlap publicly; it is worth watching for governance disclosure once transaction terms are filed.

The competitive read

The deal removes one of two venture-backed leaders chasing AI IT-service automation — the ServiceNow challenger category — and leaves Serval, backed by Sequoia, as the largest still-independent player, according to industry watchers cited by TechCrunch. Serval raised a $75 million Series B led by Sequoia in December 2025 at a reported $1 billion valuation — roughly double Console's reported sale price despite the two competing for the same IT-buyer budgets. Console's exit well below that valuation suggests its team chose Cortex distribution, and a shot at a security-platform second act, over an independent run at Serval's price umbrella.

Why now

Console is Palo Alto Networks' seventh acquisition of 2026, following the $3.35 billion purchase of observability company Chronosphere and the $400 million purchase of Koi, both announced earlier this year. The company disclosed the Console deal alongside fiscal Q4 earnings, in which it beat quarterly estimates on AI-related demand, according to CNBC's September 1, 2026 report. The pattern reads as a deliberate roll-up: Palo Alto Networks is buying point solutions — observability, supply-chain security, and now an IT-automation agent it plans to adapt for security use — rather than building each capability internally.

The verdict

This is a small, fast, and — for Palo Alto Networks' own chief executive — personally lucrative bet dressed up as a platform milestone. Console proved its agent could handle IT help-desk tasks at a handful of named customers on just $29 million raised; whether that same architecture can be retooled to handle security alerts inside Cortex is an unproven bet, not a demonstrated one. Watch whether Palo Alto Networks discloses the Arora conflict in its filings, and whether the Cortex integration — rather than the IT-automation product Console actually sold — is what ultimately justifies the $500 million price.