But she layered it with a separate, lightweight for social media and mobile app stores, because Symantec’s UI was too slow for her Tier-1 analysts to use daily. She also refused to pay for the automation add-on, instead building a custom Python script using Symantec’s API to feed malicious domains directly into her firewall.
For the Facebook page, Symantec used its “trusted partner” status with Meta, bypassing the standard reporting queue. The fake page was down in two hours. For the X account, it took six hours—slower, because X’s API changed after the 2023 platform overhaul, and Symantec’s integration lagged.
Symantec’s team began with a 72-hour “discovery sprint.” Mariana was impressed by the sheer data density. Unlike niche DRP startups that focused only on takedowns, Symantec brought its legacy in threat intelligence (DeepSight) and global telemetry from 175 million endpoints.