# A threat intelligence company has run its data layer on Datastreamer for 5+ years

Normalized, searchable social data, queried entirely by API.

5+ years in production · No interface logins in over 2 years · 100% API-driven

## At a glance

- **Customer:** Threat intelligence company
- **Sources:** Social data from established collectors
- **Volume:** Every document normalized and searchable
- **Delivery:** Searchable storage, queried by API
- **In production:** 5+ years

## About the customer

A threat intelligence company that has run on Datastreamer for 5+ years.

**Industry:** Threat Intelligence and Risk Monitoring

## The Story

Challenge, solution, results.

### The Challenge: Every source in a different shape

The company's analysts need to search large volumes of social content fast. Every collector delivers that content in its own format, and someone has to normalize it, structure it and make it searchable before it's useful.

That work never ends. Collectors change formats, fields come and go, and every change risks breaking the searches analysts depend on.

### The Solution: Normalized, structured and searchable

Social data from established collectors comes into Datastreamer, gets normalized and structured into one schema, and lands in searchable storage. The company's own platform queries it directly through the API.

The setup has run for 5+ years, through plenty of change on both sides, without the company having to rebuild it.

### The Results: A data layer nobody has to touch

The data layer runs in the background. Nobody at the company has needed to log in to the Datastreamer interface in 2+ years. Its engineers keep building their own product instead of maintaining ingestion.

## How the pipeline works

1. **Sources:** Social data from established collectors.
2. **Processing:** Normalization and structuring into one schema.
3. **Storage:** Searchable storage, indexed and ready to query.
4. **Delivery:** The company's platform queries it directly through the API.

## Ready to stop rebuilding ingestion?

Get every source normalized, structured and searchable, then work with it from your own platform.

[Talk to Sales](https://datastreamer.io/book-demo/) · [Read the Documentation](https://docs.datastreamer.io)

## Related

- [Risk Intelligence Case Study](https://datastreamer.io/risk-intelligence-case-study/)
- [Trend Prediction Case Study](https://datastreamer.io/trend-prediction-case-study/)
- [Threat Intelligence Data Pipelines](https://datastreamer.io/threat-intelligence-pipelines/)