Palo Alto Networks buys Console for Cortex

Palo Alto Networks announced on September 1 that it has acquired Console, an AI-native platform that lets operators describe an operational objective in plain language and hands the analysis and execution to AI agents. Financial terms were not disclosed. Console’s technology folds into Cortex, Palo Alto’s security-operations platform, letting security teams investigate alerts, prioritize work, and take action across an enterprise environment without hand-building each workflow.

The pitch is that a team can state an objective, such as resolving a class of recurring alerts, and Console’s agents handle the investigation and remediation steps that would otherwise need a human analyst working a runbook. That is the same shift toward outcome-described-not-scripted automation that vendors across the security-tooling market are racing to ship, since the harder problem was never generating an action but deciding when an agent is trusted to take it.

Console is Palo Alto’s latest bolt-on to Cortex rather than an organic build, following the same buy-not-build pattern as Cyera’s acquisition of Oasis Security and Okta’s purchase of Permiso Security earlier this year. Security vendors are converging on the same conclusion: agentic operations is worth owning now, and the fastest way to own it is to acquire a team that already built it rather than wait out an internal roadmap. For operators evaluating Cortex or a competing SOC platform, the practical question is how fast Console’s natural-language layer actually reaches production rather than staying a roadmap slide, a caution that applies as much to JetStream’s newly announced per-action agent authorization layer as it does here.