Skip to content

Commit 5450cd8

Browse files
devandrepascoaandre-j3sus
authored andcommitted
[Radar] Mention new CT dataset in release notes, changelog and glossary (#24198)
* [Radar] Mention new CT endpoints in both release notes and changelog * [Radar] Add CT section to glossary * [Radar] Update changelog * [Radar] Update changelog * [Radar] Update changelog * [Radar] Update changelog * [Radar] Update changelog and release notes dates --------- Co-authored-by: Andre Jesus <[email protected]>
1 parent e612886 commit 5450cd8

File tree

7 files changed

+74
-18
lines changed

7 files changed

+74
-18
lines changed

src/content/changelog/radar/2025-02-04-radar-ai-insights.mdx

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -13,8 +13,8 @@ date: 2025-02-04
1313
Radar now provides [rankings for Internet services](/radar/glossary/#internet-services-ranking), including Generative AI platforms, based on anonymized 1.1.1.1 resolver data.
1414
Previously limited to the annual Year in Review, these insights are now available daily via the [API](/api/resources/radar/subresources/ranking/subresources/internet_services/), through the following endpoints:
1515

16-
- [`top`](/api/resources/radar/subresources/ranking/subresources/internet_services/methods/top/) show service popularity at a specific date.
17-
- [`timeseries_groups`](/api/resources/radar/subresources/ranking/subresources/internet_services/methods/timeseries_groups/) track ranking trends over time.
16+
- [`/ranking/internet_services/top`](/api/resources/radar/subresources/ranking/subresources/internet_services/methods/top/) show service popularity at a specific date.
17+
- [`/ranking/internet_services/timeseries_groups`](/api/resources/radar/subresources/ranking/subresources/internet_services/methods/timeseries_groups/) track ranking trends over time.
1818

1919
#### Robots.txt
2020

@@ -26,15 +26,15 @@ AI-focused user agents from [ai.robots.txt](https://github.com/ai-robots-txt/ai.
2626

2727
These insights are now available weekly via the [API](/api/resources/radar/subresources/robots_txt/), through the following endpoints:
2828

29-
- [`top/user_agents/directive`](/api/resources/radar/subresources/robots_txt/subresources/top/subresources/user_agents/methods/directive/) to get the top AI user agents by directive.
30-
- [`top/domain_categories`](/api/resources/radar/subresources/robots_txt/subresources/top/methods/domain_categories/) to get the top domain categories by robots.txt files.
29+
- [`/robots_txt/top/user_agents/directive`](/api/resources/radar/subresources/robots_txt/subresources/top/subresources/user_agents/methods/directive/) to get the top AI user agents by directive.
30+
- [`/robots_txt/top/domain_categories`](/api/resources/radar/subresources/robots_txt/subresources/top/methods/domain_categories/) to get the top domain categories by robots.txt files.
3131

3232
#### Workers AI
3333

3434
Radar now provides insights into public AI inference models from [Workers AI](/workers-ai/), tracking usage trends across **models** and **tasks**.
3535
These insights are now available via the [API](/api/resources/radar/subresources/ai/subresources/inference/), through the following endpoints:
3636

37-
- [`summary`](/api/resources/radar/subresources/ai/subresources/inference/subresources/summary/) to view aggregated `model` and `task` popularity.
38-
- [`timeseries_groups`](/api/resources/radar/subresources/ai/subresources/inference/subresources/timeseries_groups/) to track changes over time for `model` or `task`.
37+
- [`/ai/inference/summary/{dimension}`](/api/resources/radar/subresources/ai/subresources/inference/subresources/summary/) to view aggregated `model` and `task` popularity.
38+
- [`/ai/inference/timeseries_groups/{dimension}`](/api/resources/radar/subresources/ai/subresources/inference/subresources/timeseries_groups/) to track changes over time for `model` or `task`.
3939

4040
Learn more about the new Radar AI insights in our [blog post](https://blog.cloudflare.com/expanded-ai-insights-on-cloudflare-radar/).

src/content/changelog/radar/2025-02-27-radar-dns-insights.mdx

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,9 +11,9 @@ In addition to global, location, and ASN traffic trends, we are also providing p
1111

1212
Previously limited to the [`top`](/api/resources/radar/subresources/dns/subresources/top/) locations and ASes endpoints, we have now introduced the following endpoints:
1313

14-
- [`timeseries`](/api/resources/radar/subresources/dns/methods/timeseries/): Retrieves DNS query volume over time.
15-
- [`summary`](/api/resources/radar/subresources/dns/subresources/summary/): Retrieves summaries of DNS query distribution across ten different dimensions.
16-
- [`timeseries_group`](/api/resources/radar/subresources/dns/subresources/timeseries_groups/): Retrieves timeseries data for DNS query distribution across ten different dimensions.
14+
- [`/dns/timeseries`](/api/resources/radar/subresources/dns/methods/timeseries/): Retrieves DNS query volume over time.
15+
- [`/dns/summary/{dimension}`](/api/resources/radar/subresources/dns/subresources/summary/): Retrieves summaries of DNS query distribution across ten different dimensions.
16+
- [`/dns/timeseries_groups/{dimension}`](/api/resources/radar/subresources/dns/subresources/timeseries_groups/): Retrieves timeseries data for DNS query distribution across ten different dimensions.
1717

1818
For the `summary` and `timeseries_groups` endpoints, the following dimensions are available, displaying the distribution of DNS queries based on:
1919

src/content/changelog/radar/2025-03-18-radar-leaked-credentials-insights.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,8 +11,8 @@ including the detection of leaked credentials through [leaked credentials detect
1111

1212
We have now introduced the following endpoints:
1313

14-
- [`summary`](/api/resources/radar/subresources/leaked_credentials/subresources/summary/): Retrieves summaries of HTTP authentication requests distribution across two different dimensions.
15-
- [`timeseries_group`](/api/resources/radar/subresources/leaked_credentials/subresources/timeseries_groups/): Retrieves timeseries data for HTTP authentication requests distribution across two different dimensions.
14+
- [`/leaked_credential_checks/summary/{dimension}`](/api/resources/radar/subresources/leaked_credentials/subresources/summary/): Retrieves summaries of HTTP authentication requests distribution across two different dimensions.
15+
- [`/leaked_credential_checks/timeseries_groups/{dimension}`](/api/resources/radar/subresources/leaked_credentials/subresources/timeseries_groups/): Retrieves timeseries data for HTTP authentication requests distribution across two different dimensions.
1616

1717
The following dimensions are available, displaying the distribution of HTTP authentication requests based on:
1818

src/content/changelog/radar/2025-07-01-radar-bots-insights.mdx

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Bot & Crawler Insights in Cloudflare Radar
3-
description: Expanded visibility into crawler, referral, and bot activity with new Radar API endpoints.
3+
description: Expanded visibility into crawler, referral, and bot activity with new Radar API endpoints
44
products:
55
- radar
66
date: 2025-07-01
@@ -12,8 +12,8 @@ date: 2025-07-01
1212

1313
We have introduced the following endpoints:
1414

15-
- [`/bots/crawlers/summary`](/api/resources/radar/subresources/bots/subresources/web_crawlers/methods/summary/): Returns an overview of crawler HTTP request distributions across key dimensions.
16-
- [`/bots/crawlers/timeseries_group`](/api/resources/radar/subresources/bots/subresources/web_crawlers/methods/timeseries_groups/): Provides time-series data on crawler request distributions across the same dimensions.
15+
- [`/bots/crawlers/summary/{dimension}`](/api/resources/radar/subresources/bots/subresources/web_crawlers/methods/summary/): Returns an overview of crawler HTTP request distributions across key dimensions.
16+
- [`/bots/crawlers/timeseries_groups/{dimension}`](/api/resources/radar/subresources/bots/subresources/web_crawlers/methods/timeseries_groups/): Provides time-series data on crawler request distributions across the same dimensions.
1717

1818
These endpoints allow analysis across the following dimensions:
1919

@@ -26,10 +26,10 @@ These endpoints allow analysis across the following dimensions:
2626
In addition to crawler-specific insights, Radar now provides a broader set of bot endpoints:
2727

2828
- [`/bots/`](/api/resources/radar/subresources/bots/): Lists all bots.
29-
- [`/bots/:bot_slug`](/api/resources/radar/subresources/bots/methods/get/): Returns detailed metadata for a specific bot.
29+
- [`/bots/{bot_slug}`](/api/resources/radar/subresources/bots/methods/get/): Returns detailed metadata for a specific bot.
3030
- [`/bots/timeseries`](/api/resources/radar/subresources/bots/methods/timeseries/): Time-series data for bot activity.
31-
- [`/bots/summary`](/api/resources/radar/subresources/bots/methods/summary/): Returns an overview of bot HTTP request distributions across key dimensions.
32-
- [`/bots/timeseries_groups`](/api/resources/radar/subresources/bots/methods/timeseries_groups/): Provides time-series data on bot request distributions across the same dimensions.
31+
- [`/bots/summary/{dimension}`](/api/resources/radar/subresources/bots/methods/summary/): Returns an overview of bot HTTP request distributions across key dimensions.
32+
- [`/bots/timeseries_groups/{dimension}`](/api/resources/radar/subresources/bots/methods/timeseries_groups/): Provides time-series data on bot request distributions across the same dimensions.
3333

3434
These endpoints support filtering and breakdowns by:
3535

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
---
2+
title: Certificate Transparency Insights in Cloudflare Radar
3+
description: New Certificate Transparency (CT) insights in Cloudflare Radar, with new API endpoints for certificate issuance trends
4+
products:
5+
- radar
6+
date: 2025-08-06
7+
---
8+
9+
[**Radar**](/radar/) now introduces Certificate Transparency (CT) insights, providing visibility into certificate issuance trends based on Certificate Transparency logs currently monitored by Cloudflare.
10+
11+
The following API endpoints are now available:
12+
13+
- [`/ct/timeseries`](/api/resources/radar/subresources/ct/methods/timeseries/): Retrieves certificate issuance time series.
14+
- [`/ct/summary/{dimension}`](/api/resources/radar/subresources/ct/methods/summary/): Retrieves certificate distribution by dimension.
15+
- [`/ct/timeseries_groups/{dimension}`](/api/resources/radar/subresources/ct/methods/timeseries_groups/): Retrieves time series of certificate distribution by dimension.
16+
- [`/ct/authorities`](/api/resources/radar/subresources/ct/subresources/authorities/methods/list/): Lists certification authorities.
17+
- [`/ct/authorities/{ca_slug}`](/api/resources/radar/subresources/ct/subresources/authorities/methods/get/): Retrieves details about a Certification Authority (CA). CA information is derived from the [Common CA Database (CCADB)](https://www.ccadb.org/).
18+
- [`/ct/logs`](/api/resources/radar/subresources/ct/subresources/logs/methods/list/): Lists CT logs.
19+
- [`/ct/logs/{log_slug}`](/api/resources/radar/subresources/ct/subresources/logs/methods/get/): Retrieves details about a CT log. CT log information is derived from the [Google Chrome log list](https://googlechrome.github.io/CertificateTransparency/log_lists.html).
20+
21+
For the `summary` and `timeseries_groups` endpoints, the following dimensions are available (and also usable as filters):
22+
23+
- `ca`: Certification Authority (certificate issuer)
24+
- `ca_owner`: Certification Authority Owner
25+
- `duration`: Certificate validity duration (between NotBefore and NotAfter dates)
26+
- `entry_type`: Entry type (certificate vs. pre-certificate)
27+
- `expiration_status`: Expiration status (valid vs. expired)
28+
- `has_ips`: Presence of IP addresses in certificate [Subject Alternative Names (SANs)](https://developers.cloudflare.com/ssl/origin-configuration/origin-ca/#hostname-and-wildcard-coverage)
29+
- `has_wildcards`: Presence of wildcard DNS names in certificate SANs
30+
- `log`: CT log name
31+
- `log_api`: CT log API ([RFC6962](https://datatracker.ietf.org/doc/html/rfc6962) vs. [Static](https://c2sp.org/static-ct-api))
32+
- `log_operator`: CT log operator
33+
- `public_key_algorithm`: Public key algorithm of certificate's key
34+
- `signature_algorithm`: Signature algorithm used by CA to sign certificate
35+
- `tld`: Top-level domain for DNS names found in certificates SANs
36+
- `validation_level`: [Validation level](https://www.cloudflare.com/learning/ssl/types-of-ssl-certificates/)
37+
38+
Check out the new Certificate Transparency insights in the [new Radar page](https://radar.cloudflare.com/certificate-transparency).

src/content/docs/radar/glossary.mdx

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -95,6 +95,20 @@ In Cloudflare Radar, you can view all certificates issued for a given domain by
9595

9696
You can review the certificates issued for your domain name to ensure that there have been no incorrect or fraudulent issuances of certificates associated with your domains. You can also sign up to receive alerts from our certificate transparency monitor in the [Cloudflare Dashboard](https://dash.cloudflare.com/).
9797

98+
## Certificate Transparency
99+
100+
[Certificate Transparency (CT)](https://certificate.transparency.dev/) is an Internet security standard for monitoring and auditing the issuance of digital certificates issued by Certification Authorities (CAs).
101+
CT helps detect misissued or malicious certificates by requiring CAs to publicly log all certificates they issue in append-only, verifiable logs.
102+
These logs are monitored by various entities, including browsers and security researchers, to ensure transparency and trust in the certificate ecosystem.
103+
104+
Key entities in CT include:
105+
- **CAs:** Organizations that issue certificates.
106+
- **CT Logs:** Public, append-only logs where issued certificates are recorded.
107+
- **Monitors:** Parties that check logs for correctness.
108+
109+
The data available in Cloudflare Radar is derived from the CT logs currently monitored by Cloudflare.
110+
This enables visibility into certificate issuance trends, distributions, and metadata across the web.
111+
98112
## Connection characteristics
99113

100114
Share of inbound connections to Cloudflare from mail transfer agents with the given characteristics. “IP Version” breaks down connections made over IPv4 and IPv6. “Encryption” breaks down connections made over an encrypted connection using TLS, and those made over an unencrypted connection, in the clear. Data for these metrics comes from Cloudflare’s email routing service.

src/content/release-notes/radar.yaml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,12 @@ productLink: "/radar/"
55
productArea: Developer platform
66
productAreaLink: /workers/platform/changelog/platform/
77
entries:
8+
- publish_date: "2025-08-06"
9+
title: Add Certificate Transparency (CT) endpoints
10+
description: |-
11+
* Added [CT endpoints](/api/resources/radar/subresources/ct/).
812
- publish_date: "2025-07-01"
9-
title: Add Bots and Web Crawlers Endpoints
13+
title: Add Bots and Web Crawlers endpoints
1014
description: |-
1115
* Added new [bots endpoints](/api/resources/radar/subresources/bots/), replacing the deprecated verified bots
1216
endpoints. Use the following replacements:

0 commit comments

Comments
 (0)