# A risk intelligence platform runs 200 to 300 posts a second without touching its pipeline

About 400 GB of real-time social content a day, straight into automated threat detection.

200 to 300 posts a second · About 400 GB a day · Live since early 2025, barely changed

## At a glance

- **Customer:** Risk intelligence platform
- **Sources:** Real-time public social content
- **Volume:** 200 to 300 posts a second, about 17M a day
- **Delivery:** Straight into its automated threat scanning
- **In production:** Since early 2025

## About the customer

A risk intelligence platform. Its customers pay it to detect threats early.

**Industry:** Threat Intelligence and Risk Monitoring

## The Story

Challenge, solution, results.

### The Challenge: Detection depends on the feed

The company sells early warning. Its customers pay it to spot threats before they turn into incidents, and that depends on a constant stream of public social content arriving in real time.

At that volume, collection is an engineering job of its own: rate limits, provider outages, format changes, backlogs to clear. None of that is what its customers pay for, and they won't wait while a feed is down.

### The Solution: One pipeline, barely changed

One pipeline brings in 200 to 300 social posts a second, roughly 400 GB of content a day, and hands it straight to the company's automated scanning. No one watches the feed by hand.

The pipeline went live in early 2025 and has barely needed a change since. Volume has kept growing month over month, and the pipeline has kept up.

### The Results: Wider coverage, faster alerts

The data powers alerts to the company's customers, risk scores and analyst reports. With collection off its plate, it gained wider coverage and faster alerts, and that has helped it win new clients. Its engineers spend their time on detection, the part its customers actually buy.

## How the pipeline works

1. **Source:** Real-time public social content, about 17M posts a day.
2. **Collection:** Continuous, around the clock.
3. **Processing:** Normalization and language detection.
4. **Delivery:** In real time, into the company's automated threat scanning.

## Ready to power your own detection program?

Get a real-time feed into your detection without building or maintaining the collection.

[Talk to Sales](https://datastreamer.io/book-demo/) · [Read the Documentation](https://docs.datastreamer.io)

## Related

- [Threat Intelligence Case Study](https://datastreamer.io/threat-intelligence-case-study/)
- [Real-Time Alerts Case Study](https://datastreamer.io/real-time-alerts-case-study/)
- [Data Pipelines for Risk Intelligence Platforms](https://datastreamer.io/risk-intelligence-platforms/)