Case Study

A risk intelligence platform runs 200 to 300 posts a second without touching its pipeline

About 400 GB of real-time social content a day, straight into automated threat detection.

200 to 300
posts a second
About 400 GB
a day
Live since early 2025
barely changed

At a glance

Customer
Risk intelligence platform
Sources
Real-time public social content
Volume
200 to 300 posts a second, about 17M a day
Delivery
Straight into its automated threat scanning
In production
Since early 2025
About the customer

A risk intelligence platform. Its customers pay it to detect threats early.

Industry: Threat Intelligence and Risk Monitoring

The Story

Challenge, solution, results.

The Challenge

Detection depends on the feed

The company sells early warning. Its customers pay it to spot threats before they turn into incidents, and that depends on a constant stream of public social content arriving in real time.

At that volume, collection is an engineering job of its own: rate limits, provider outages, format changes, backlogs to clear. None of that is what its customers pay for, and they won't wait while a feed is down.

The Solution

One pipeline, barely changed

One pipeline brings in 200 to 300 social posts a second, roughly 400 GB of content a day, and hands it straight to the company's automated scanning. No one watches the feed by hand.

The pipeline went live in early 2025 and has barely needed a change since. Volume has kept growing month over month, and the pipeline has kept up.

The Results

Wider coverage, faster alerts

The data powers alerts to the company's customers, risk scores and analyst reports. With collection off its plate, it gained wider coverage and faster alerts, and that has helped it win new clients. Its engineers spend their time on detection, the part its customers actually buy.

How It Works

How the pipeline works

1
Source
Real-time public social content, about 17M posts a day.
2
Collection
Continuous, around the clock.
3
Processing
Normalization and language detection.
4
Delivery
In real time, into the company's automated threat scanning.
Get Started

Ready to power your own detection program?

Get a real-time feed into your detection without building or maintaining the collection.

Used by market-leading intelligence platforms. Supported by a dedicated success team.