Security and Compliance
Comcast's cybersecurity teams depended on multiple siloed security analytics tools that did not elastically scale or give threat hunters, compliance teams, and business units a shared, current view of security data.
Reported impact
Comcast now hunts threats across more than 10 PB of retained security data, runs large IOC sweeps in under 30 minutes, gives business units near-real-time compliance visibility, and uses shared security records to lower false positives and improve risk posture.
Comcast made Snowflake the core of a cloud-native security data fabric so cybersecurity, compliance, data science, and executive teams could work from common records instead of siloed tools. Security telemetry from multiple sources is joined, cleaned, and written into a common schema in Snowflake, where the platform holds 10 PB of data with over a year of hot retention for threat hunting and controls assurance. That shared lake lets threat hunters search petabyte-scale history, supports time-series ML for threat detection, and feeds dashboards that expose KPIs, KRIs, and compliance posture to business units in near real time. The architecture also enabled sweeps of more than 50,000 indicators of compromise across the 10-PB lake in under 30 minutes and helped one business unit raise endpoint-detection coverage to 95% in three days. By giving every stakeholder access to the same governed security data, Comcast reduced false positives and built a more proactive compliance culture.
Security data from multiple analysis tools is joined, cleaned, and deposited into a common Snowflake schema with year-plus hot retention. Threat hunters, data scientists, compliance teams, executives, and business units then query the same governed store for investigations, machine-learning analysis, controls assurance, and self-service risk dashboards.
Automated sweeps of over 50,000 indicators of compromise (IOCs) across the 10-PB security data lake can now be completed in under 30 minutes.
Business units now have near real-time visibility into their compliance and risk posture and can be much more proactive.
Snowflake’s security data lake is now an integral component of Comcast’s security data fabric.
the Comcast security data lake built on Snowflake’s elastic engine in the cloud stores over 10 petabytes (PBs) of data with hot retention for over a year.
within three days increased their coverage to 95%
Review how this reference was scored and trace each normalized claim back to its documented source.
Scoring methodology
Customer Reference Value measures usefulness as a customer reference. Evidence Confidence measures the quality and traceability of available evidence, not independent verification.
Traceability
Field coverage shows which facts each source supports. Dates are shown only when documented by the source.
Related
Snowflake Sample Modified · Oct 9, 2026 Orchid Security analyze identity access across huge enterprise application estates fast enough to expose unmanaged accounts, support remediation, and keep pace with AI-driven identity complexity. 1M+ Number of user identities analyzed to reduce security risks Dynamic Tables · Metabase · Snowflake 
Databricks Sample Jul 7, 2026 Bally's Bally's needed a better way to support omnichannel gaming personalization, compliant analytics, and faster market launches because legacy technology fragmented customer and operational data, which slowed… 10x serverless compute Databricks Data + AI Platform · Delta Lake · Lakeflow Jobs 
Baidu AI Cloud Sample May 15, 2025 Huaxiyun Huaxiyun and its Xinjiang media customers needed a faster, more reliable way to review huge volumes of broadcast and video content because manual review was expensive, slow, and prone to missing risky or noncompliant… Review efficiency improved 90%. Content Review Platform · Offline Face Recognition SDK · VCR 