Sweet Security delivers runtime threat detection analytics to hundreds of enterprise customers, ingesting 1TB of security events daily. Firebolt powers sub-second query latency across 350+ continuously updating tables, with workload isolation that keeps complex multi-join policy queries fast even under continuous ingestion.