Balu Alto Networks acquires Consol for $500 million: technical support agents join cybersecurity platforms
Listen to this article
Read by Anchor
Balu Alto Networks signed an acquisition deal for the start-up Consol, which specializes in technical support agents, for a total value of up to $500 million split between cash and stock. The start-up, founded in 2024 and using AI agents to automate technical support and IT office tasks, had raised $29 million in two funding rounds led by Thrive Capital and DST Global, and was valued at about $157 million before the sale, giving its investors rapid returns.
The deal is intended to strengthen the Cortex platform of the cyber-security giant, integrating intelligent agent capabilities to enable security teams to investigate and remediate alerts through natural-language interfaces. CEO Nikesh Aurora of Balu Alto described the move as giving the platform the executive arms and legs to achieve autonomous security outcomes in corporate work environments. Consol is the company's seventh acquisition in 2026, following a growth trajectory that included prior deals such as the $3.35 billion purchase of the monitoring platform Chronosphere and the roughly $400 million acquisition of the cyber firm Q.
Engineer Andre Serban founded Consol after selling his previous venture FazBiz, which specialized in code-security, to Rippleing. Over two years, the company succeeded in attracting enterprise customers such as Scale AI, RAMP and Floc Safety, relying on its agents' ability to automate routine tasks without direct human intervention, such as resetting passwords, granting access rights to collaborative apps like Figma and Miro, and diagnosing and fixing common technical failures.
Merging technical support desks into cyber-security platforms redraws the enterprise software landscape, turning incident response from mere monitoring into direct operational actions.This shift puts independent start-ups in a decisive contest with integrated platform giants; while Consol left the independent competition arena through the merger, Serval leads the IT-services automation scene as the main rival to the ServiceNow platform, having reached a $1 billion valuation backed by Sequoia and expanding its smart services to include legal, HR and finance functions.
This trajectory clearly influences the choices of technology leaders and CISO-type managers in organizations across the Gulf, Egypt and the Levant. Merging identity-management and access-license capabilities with threat-response systems means that institutions will no longer treat support-ticket tools as a separate layer, but as part of a unified security architecture, prompting a reassessment of annual subscription costs and a trade-off between buying comprehensive security suites or relying on specialized, independent solutions.
The shift toward executive agents moves technical-support roles and security-operations-center analysts from manual processing to policy management and privilege auditing.This change requires acquiring new skills in directing agents and monitoring their programmatic interactions, with a need to tighten internal controls to ensure that unauthorized access permissions are not granted during automated processing in sensitive environments.