Palo Alto Networks has acquired Console, an AI-native platform that will strengthen Cortex by enabling AI-driven security workflows to investigate, prioritize, and remediate threats at machine speed.
The acquisition comes as security teams face rising alert volumes, increasingly automated attacks, and pressure to reduce the time required to detect and contain threats.
Palo Alto Networks said Console’s technology will help organizations use natural-language instructions to create AI agents that can analyze enterprise data, coordinate tasks, and take action across security and IT environments.
The Console is built on the idea that users should be able to define an operational objective. At the same time, AI software handles the technical steps required to complete it.
Palo Alto Networks Acquires Console
In a security operations center, this could include examining an alert, gathering context from endpoint, cloud, identity, and network systems, assessing the severity of the activity, and initiating a response workflow. Palo Alto Networks plans to incorporate Console’s capabilities into Cortex, its security operations portfolio.
The company said the combined platform will help analysts move beyond traditional dashboard-driven operations, where teams manually review alerts and create tickets before taking action.
Nikesh Arora, Chairman and CEO of Palo Alto Networks, said security operations must shift from helping analysts work faster to enabling autonomous security outcomes. He said Console will allow customers to interact directly with enterprise data and create agentic workflows in natural language.
The company described this approach as “software-as-an-agent,” where AI systems can perform operational tasks with the context, permissions, and automation needed to execute security actions.
Rather than functioning only as a copilot that suggests next steps, an agentic system can be configured to complete defined tasks, such as enriching alerts, correlating events, opening or closing cases, isolating endpoints, or triggering remediation processes.
For enterprises, the key challenge will be applying these capabilities safely. Autonomous security agents require controlled access to sensitive systems, detailed logging, human approval for high-impact actions, and safeguards against inaccurate reasoning or unauthorized activity.
Palo Alto Networks said Console will support faster adoption and stronger governance of agentic operations. Andrei Serban, Console’s co-founder and CEO, said the company’s customers have already used agents to reduce operational overhead and improve business processes.
Joining Palo Alto Networks gives Console access to a broader cybersecurity platform, threat intelligence resources, and a global enterprise customer base.
Palo Alto Networks serves more than 70,000 customers and operates across network security, cloud security, security operations, AI, and identity. Its Unit 42 threat intelligence organization will likely provide an important source of context for future AI-driven workflows.
The company cautioned that the benefits of the acquisition depend on successfully integrating Console’s operations and technology into its existing portfolio. It also noted that referenced future services or features may not yet be generally available to customers.
Prevent incidents due to slow investigations. Power your Tier 1 with threat intelligence from 15K SOCs: Integrate TI Lookup in your SOC
The post Palo Alto Networks Acquires Console to Build AI Agents for Autonomous Security Operations appeared first on Cyber Security News.