GCPEvidence: Low40/100

NYC Cyber Command builds SRE-backed threat-management/analytics platform on Google Cloud

Use case typeRisk assessmentUpdated Jun 13, 2026

New York City Cyber Command (NYC3) built a security log aggregation platform on Google Cloud to keep city security systems available 24/7 and support risk alerts, visualization, and analytics for 100+ city agencies. The organization adapted Google’s Site Reliability Engineering model, created an internal SRE team, and trained/cross-trained engineers across development, networking, and operations to improve reliability and supportability. NYC3’s internally developed Juggernaut threat-management system parses real-time cybersecurity data from disparate sources and alerts the team when something seems amiss.

Published
June 2026

Reported outcomes

Strategic outcomes

New product / capabilityBuilt a security log aggregation platformNew product / capabilityDeveloped a real-time threat-management systemScale & capacitySupported security operations across agenciesInnovation & cultureAdopted the SRE operating model
Why do we believe this deployment?Customer identity, provider attribution, maturity, and source checks
Customer
New York City Cyber Command
Provider
GCP
Maturity
Unknown

No explicit deployment-stage evidence found.

Customer identity supportedSource describes one deploymentMaturity evidence evaluated

Primary read

Use case focus

Showing 3 of 4

  • 1Site Reliability Engineering
  • 2Cybersecurity Analytics
  • 3Threat Detection and Response
  • Keep cloud-based security systems available 24/7 for cyber defense operations across 100+ city agencies.
  • Handle sophisticated cyber threats, demand spikes, and data-loss risk while maintaining timely alerts and analytics.
  • Improve reliability and supportability for a high-velocity security data pipeline without linear team growth.
  • Adopted Google’s Site Reliability Engineering model and established an internal SRE team.
  • Built and operated a security log aggregation platform and the Juggernaut threat-management system on Google Cloud.
  • Used CI/CD practices, cross-training, error-budget thinking, and automated SLO/alert management to improve resilience and scalability.
  • Established the first known public-sector customer to model Google’s SRE practice.
  • Kept NYC security systems available 24/7 and improved the quality of data delivered to users.
  • Reduced production incidents and data losses while increasing throughput and decreasing average compute cost per logged event.
Architecture

NYC3 built a security log aggregation platform and the internally developed Juggernaut threat-management system on Google Cloud. The platform ingests real-time cybersecurity data from multiple sources, provides alerts/visualization/analytics, and is operated using Google SRE practices, CI/CD, and an internal SRE team.

Sources & evidence1
Evidence: Low40/100Evidence strength
  • Customer explicitly identified
  • Primary source available
  • Technical implementation details available
Type: Customer StoryPublished: Jun 7, 2026Publisher: Google CloudEvidence: PrimaryConfidence: High

AI-generated summary. Verify important details with the linked sources before relying on this case.

Explore related AI use cases

Was this useful?

Community

Comments

No published comments yet.