Palo Alto Networks Acquires Console to Bring Autonomous AI Agents to Security Operations

Palo Alto Networks has acquired Console, an AI-native platform designed to deliver agentic capabilities across enterprise operations, as the cybersecurity giant advances plans to automate security investigation, prioritization, and response workflows.

The acquisition, announced September 1, 2026, will deepen agentic AI capabilities within Palo Alto Networks’ Cortex security operations platform.

The company said Console’s technology is intended to help security teams analyze alerts, resolve operational issues, and execute requests at machine speed through AI-driven workflows.

Palo Alto Networks Acquires Console to Bring Autonomous AI Agents

Console enables organizations to express operational goals in natural language and use AI agents to handle the underlying complexity.

Palo Alto Networks said the technology will support a shift away from traditional security operations models that rely heavily on dashboards, manual ticket queues, and repetitive analyst work.

“Security operations can no longer be about managing dashboards and queuing tickets just to help humans work faster,” said Nikesh Arora, chairman and CEO of Palo Alto Networks.

“By bringing Console into Palo Alto Networks, our customers can have a direct conversation with data and build agentic workflows in natural language that helps alert and remediate issues automatically.”

The company described the strategy as “software-as-an-agent,” in which intelligent software can perform actions rather than merely provide recommendations or visualizations.

In a security operations context, that could mean agents gathering context from multiple tools, determining alert priority, recommending containment measures, and potentially automating approved remediation activities.

Palo Alto Networks plans to integrate Console into Cortex, its security operations portfolio.

Palo Alto Networks has acquired Console, an AI-native platform that will strengthen Cortex by enabling AI-driven security workflows to investigate, prioritize, and remediate threats at machine speed.

The acquisition comes as security teams face rising alert volumes, increasingly automated attacks, and pressure to reduce the time required to detect and contain threats.

Palo Alto Networks said Console’s technology will help organizations use natural-language instructions to create AI agents that can analyze enterprise data, coordinate tasks, and take action across security and IT environments.

The Console is built on the idea that users should be able to define an operational objective. At the same time, AI software handles the technical steps required to complete it.

Palo Alto Networks Acquires Console

In a security operations center, this could include examining an alert, gathering context from endpoint, cloud, identity, and network systems, assessing the severity of the activity, and initiating a response workflow. Palo Alto Networks plans to incorporate Console’s capabilities into Cortex , its security operations portfolio.

The company said the combined platform will help analysts move beyond traditional dashboard-driven operations, where teams manually review alerts and create tickets before taking action.

Nikesh Arora, Chairman and CEO of Palo Alto Networks, said security operations must shift from helping analysts work faster to enabling autonomous security outcomes . He said Console will allow customers to interact directly with enterprise data and create agentic workflows in natural language.

The company described this approach as “software-as-an-agent,” where AI systems can perform operational tasks with the context, permissions, and automation needed to execute security actions.