Console
A San Francisco AI-agent startup that automated IT help-desk tasks inside Slack, acquired by Palo Alto Networks for roughly $500M in September 2026 to power natural-language alert resolution inside Cortex.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Console, founded in 2024 by CEO Andrei Serban (a Thiel Fellow and Y Combinator alumnus) and headquartered in San Francisco, builds AI agents that resolve internal IT, HR, and finance requests inside Slack — handling tasks like password resets, software access approvals, and routine troubleshooting autonomously, escalating only more complex cases to human staff. The company said its agents resolve more than half of internal IT tickets without human intervention, with customers including Ramp, Flock Safety, and Scale AI.
Console raised $29 million across a $6.2 million seed round led by Thrive Capital in 2025 and a $23 million Series A co-led by DST Global and Thrive Capital, reaching a reported $157 million valuation before Palo Alto Networks acquired the company for approximately $500 million in September 2026. Palo Alto Networks plans to fold Console’s agentic technology into Cortex, its AI-driven detection and response platform, letting security teams investigate and resolve alerts using natural language — extending Console’s agent technology from general IT operations into security operations specifically.
Innovation Matrix Assessment
Expanded quickly from IT ticket resolution into HR and finance agents within about a year, and was folded into Palo Alto Networks' Cortex platform less than two years after founding.
Disclosed resolving 50%+ of internal IT tickets autonomously with named customers (Ramp, Flock Safety, Scale AI) is real operational evidence, though entirely in general IT operations rather than security operations.
Real named customers, two disclosed funding rounds, and a credible ~$500M acquisition by Palo Alto Networks within roughly two years of founding are strong, independently reported momentum signals.
The agentic, natural-language ticket-resolution approach is a genuine differentiator versus traditional help-desk workflows, though applying it specifically to security alert resolution via Cortex is new and unproven.
Strong efficacy evidence exists for IT-operations use, but zero independent evidence exists yet for security-specific efficacy inside Cortex, which is the use case this site evaluates.
Agentic automation of SOC alert triage and resolution is a fast-growing, durable priority as security teams face escalating alert volume and tooling complexity.
Why CISOs Should Care
As folded into Palo Alto Networks' Cortex platform, gives security operations teams a natural-language way to investigate and resolve alerts at machine speed, extending the same agentic approach Console used to automate IT help-desk tickets into the SOC.
What Makes It Different
Originated as a general IT-operations AI agent (resolving 50%+ of internal IT tickets autonomously inside Slack) rather than a security-native tool, and is now being purpose-extended into security alert resolution following its acquisition by Palo Alto Networks — a different starting point than most agentic-SOC vendors built security-first.
The Matrix Verdict
55/100 — INCREMENTAL INNOVATOR
An Incremental Innovator on this site's security-specific matrix: Console has real disclosed funding, named customers (Ramp, Flock Safety, Scale AI), and a credible $500M acquisition by Palo Alto Networks, but its track record is almost entirely in general IT-operations automation rather than security operations — the Cortex integration that would demonstrate security-specific efficacy is brand new as of this writing.
Editorial Note: Claims vs. Verified Findings
Customer names, ticket-resolution rate, and funding figures are drawn from company and press coverage prior to the acquisition; no independent data on Console's performance inside Palo Alto Networks' Cortex platform exists yet since the integration is new.
Sources
Alternatives to Console
Abnormal AI
AI-native behavioral security platform that analyzes sender identity and communication patterns, rather than message content alone, to stop…
7AI
7AI, founded by Cybereason's former CEO and CTO, deploys autonomous AI agents that triage, investigate, and correlate security…
Palo Alto Networks Cortex XSIAM
Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…
Fenix24
Chattanooga-based ransomware recovery specialist that has restored operations after 500+ real-world incidents, including 30 Fortune 500 companies.
Artemis Security
A New York AI-native SOC platform correlating identity, network and cloud signals into attack narratives, already counting Wix…
Torq
AI-native hyperautomation platform positioning itself as an 'agentic SOC,' using a multi-agent system to autonomously execute large volumes…