Two people with knowledge of the deal say Palo Alto Networks paid $500 million in cash and stock for Console, a startup that didn’t exist three years ago. The companies announced the acquisition Tuesday and said nothing about the price.
That’s the part worth sitting with. Console raised $29 million total across two rounds since its founding in 2024, and PitchBook had it valued at $157 million before the sale.
So the exit price is roughly triple the last mark, on a company that automates password resets.
Who cashed out
Thrive Capital led a $6.2 million seed. DST Global and Thrive co-led a $23 million Series A. SV Angel and Abstract Ventures were in too.
And so was Nikesh Arora, the CEO of Palo Alto Networks, who put in money as an angel investor. His company then bought the thing he’d personally backed. Palo Alto Networks declined to comment.
I’m not saying the deal is improper. I am saying that when a buyer’s chief executive is on the cap table of the target, the absence of disclosed terms starts to feel like a choice rather than an oversight.
What Console actually does
Strip away the framing and Console is IT help desk automation. It resets passwords. It grants access to apps like Figma and Miro. It runs routine troubleshooting without a human in the loop.
Customers included Ramp, Flock Safety and Scale AI. That’s a credible list for a two-year-old company, and it’s the sort of customer roster that gets you acquired at a premium.
Palo Alto Networks plans to fold Console into Cortex, its platform that uses AI to detect and neutralize threats automatically. The pitch is that security teams will investigate and resolve alerts in natural language.
Arora put it this way in a statement: Console gives Cortex “the arms and legs to deliver autonomous security outcomes across the entire enterprise.”
The founder had done this before
Andrei Serban founded Console shortly after Rippling acquired his previous startup, code-security platform Fuzzbuzz. Second-time founders raise faster and exit faster, and this is a fairly clean example of the pattern.
Two years, two rounds, $500 million.
Serval is the one to watch now
Console’s main competitor was Serval, another company going after ServiceNow. Serval hit a $1 billion valuation after a $75 million Series B led by Sequoia last December.
Serval started as an AI tech support tool and pushed into HR, legal and finance. With Console gone, one investor who isn’t backing Serval said the acquisition leaves Serval as the category leader to watch among startups automating IT service management.
Which is a polite way of saying the field just got thinner.
Seven deals and counting
Console is Palo Alto Networks’ seventh acquisition in 2026, per PitchBook. The cybersecurity company also picked up Chronosphere, the Greylock and Lux Capital-backed observability platform, at a $3.35 billion valuation, and Koi, a cyber startup backed by Battery and Team8, for $400 million.
Put $500 million next to that $400 million Koi price and the shape of the strategy gets clearer. Palo Alto Networks isn’t buying market share here. It’s buying agent plumbing, one team at a time, and paying startup-scale prices for each piece rather than one enormous number.
If you’re a founder building agentic automation for enterprise workflows, the read is straightforward: the buyers are active, they’re paying well above the last private mark and they aren’t waiting for you to reach Series C.
