Sep 9, 2026

Palo Alto Buys Console: Security Gets Its Agents

Back to blog

Some acquisitions look small beside the biggest AI deals, but they say a lot about where the market wants to go. On September 1, 2026, Palo Alto Networks announced that it had acquired Console, an AI-native platform for building operational workflows with agents. The following day, TechCrunch reported that the deal was worth $500 million in cash and stock, although official terms were not disclosed.

The interesting part is less the cheque than the destination for the technology: Cortex, Palo Alto Networks' security operations platform. The company wants to move beyond alerts, dashboards, and ticket queues toward a more aggressive idea: teams describe goals in natural language, while software gathers context, prioritizes work, and executes permitted actions.

Security analysts working with data across several screens
The Console acquisition points to a phase where SecOps is not only alert triage, but governed agentic execution. Image: Cheng Xin/Getty Images via TechCrunch

What was announced?

In the official release, Palo Alto Networks says it acquired Console to deepen Cortex's agentic capabilities. The key idea is direct: organizations should be able to apply AI-driven analysis and action across enterprise operations, resolving alerts, issues, and requests at machine speed.

Why was Console interesting?

Console was founded in 2024 to automate help desk and internal operations work. According to TechCrunch, it handled tasks such as password resets, granting access to apps like Figma or Miro, and routine troubleshooting without direct human involvement. That history matters because many security incidents get stuck precisely in the space between a technical alert and a concrete operational action.

Official Palo Alto Networks logo
Palo Alto Networks is buying operational execution, not just another layer of analysis. Image: Palo Alto Networks/PR Newswire

What changes for Cortex?

Nikesh Arora described the shift as "software-as-an-agent": instead of only helping humans work faster inside dashboards, the platform gets the arms and legs to deliver autonomous outcomes. SecurityWeek summarizes the plan as investigating signals, prioritizing work, and taking automatic action across enterprise environments.

Is the $500 million price confirmed?

Not officially. Palo Alto Networks did not disclose terms. The number comes from TechCrunch, citing two people with knowledge of the deal. Still, the scale works as a market signal: Console had raised $29 million and, according to the same report, was valued at $157 million before the sale. If the reported price is right, operational agents are no longer a side experiment.

Official Palo Alto Networks Cortex logo
Cortex is the announced destination for Console's technology. Image: Palo Alto Networks

What is the risk?

The risk is confusing autonomy with lack of control. An agent that resets access, changes configurations, or responds to incidents needs permissions, approvals, logs, limits, and reversibility. Network World notes that the technology connects identity, SaaS, security tools, and other enterprise systems. That reach is exactly what makes the promise useful and sensitive at the same time.

Why does it matter now?

Because 2026 is turning AI agents into targets and tools at the same time. Palo Alto Networks had already been buying pieces around observability, identity, and agent security; Console adds the execution layer. For companies, the question shifts from "do we have a copilot?" to "which actions do we let software execute, under what conditions, and with what evidence?"

That is the core of the acquisition. The next phase of cybersecurity will not only be better detection. It will be deciding precisely when a machine is allowed to act. Console gives Palo Alto Networks a way to test that frontier inside Cortex; customers will have to decide how much trust they are willing to turn into automation.

Comments (60)

Sign in to comment. Register