cloudflare · andre-j3sus · Mar 18, 2025 · Mar 14, 2025
@@ -0,0 +1,23 @@
+---
+title: Leaked Credentials Insights in Cloudflare Radar
+description: Expanded security insights with new API endpoints for aggregated authentication request data
+products:
+  - radar
+date: 2025-03-18T14:00:00Z
+---
+
+[**Radar**](/radar/) has expanded its security insights, providing visibility into aggregate trends in authentication requests,
+including the detection of leaked credentials through [leaked credentials detection](/waf/detections/leaked-credentials/) scans.
+
+We have now introduced the following endpoints:
+
+- [`summary`](/api/resources/radar/subresources/leaked_credentials/subresources/summary/): Retrieves summaries of HTTP authentication requests distribution across two different dimensions.
+- [`timeseries_group`](/api/resources/radar/subresources/leaked_credentials/subresources/timeseries_groups/): Retrieves timeseries data for HTTP authentication requests distribution across two different dimensions.
+
+The following dimensions are available, displaying the distribution of HTTP authentication requests based on:
+
+- `compromised`: Credential status (clean vs. compromised).
+- `bot_class`: [Bot class](/radar/concepts/bot-classes) (human vs. bot).
+
+
+Dive deeper into leaked credential detection in this [blog post](https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/) and learn more about the expanded Radar security insights in our [blog post](https://blog.cloudflare.com/cloudflare-radar-ddos-leaked-credentials-bots).
@@ -145,6 +145,10 @@ The Internet Quality Index estimates connection performance under average utiliz
 
 The IQI methodology requires a minimum number of measurements to generate estimates. As a result, graphs for smaller countries and ASNs may display occasional gaps, especially during nighttime. These gaps do not indicate outages. The number of measurements underlying IQI does not necessarily correlate with the volume of traffic observed by Cloudflare in a specific country or ASN.
 
+## Leaked credentials
+
+[Leaked credentials detection](/waf/detections/leaked-credentials/) scans incoming HTTP requests for known authentication patterns from common web apps and any custom detection locations that were configured. Cloudflare Radar provides visibility into aggregate trends in authentication requests, including the detection of leaked credentials.
+
 ## Mobile operating systems
 
 The Mobile Operating Systems graph shows the distribution of mobile device requests by operating system, representing trends observed in Internet traffic originating globally or within a given location or autonomous system within the selected time range, based on aggregated data from our network. "Mobile device" includes phones and tablets only, and does not include other types of devices, such as those classified as desktops/laptops, smart TVs, or gaming consoles.

@@ -8,31 +8,115 @@ head:
     content: Overview
 ---
 
-import { Description, Feature, Plan } from "~/components"
+import {
+	CardGrid,
+	Description,
+	Feature,
+	LinkButton,
+	LinkTitleCard,
+	Plan,
+} from "~/components";
 
 <Description>
-
 Get access to Cloudflare's data on global Internet traffic.
 </Description>
 
-<Plan type="all" />
-
-[Cloudflare Radar](https://radar.cloudflare.com) is a hub that showcases global Internet traffic, attacks, and technology trends and insights. It is powered by data from Cloudflare’s global network, as well as aggregated and [anonymized](/1.1.1.1/privacy/public-dns-resolver/) data from Cloudflare’s [1.1.1.1 public DNS resolver](/1.1.1.1/).
+<Plan type="all"/>
 
-Using Radar's API you can access Cloudflare's data on global Internet traffic.
+[Cloudflare Radar](https://radar.cloudflare.com) is a hub that showcases global Internet traffic, attacks, and technology trends and insights. It is powered by data from [Cloudflare’s global network](https://www.cloudflare.com/network/), as well as aggregated and [anonymized data](/1.1.1.1/privacy/public-dns-resolver/) from Cloudflare’s [1.1.1.1 public DNS resolver](/1.1.1.1/).
 
-Radar's API is free, allowing academics, data sleuths and other web enthusiasts to investigate Internet usage across the globe.
+Using [Radar's API](/api/resources/radar/) you can access Cloudflare's data on global Internet traffic.
+Radar's API is free, allowing academics, technology professionals, and other web enthusiasts to investigate Internet usage across the globe.
 
 Data available via Radar API endpoints is made available under the [CC BY-NC 4.0](https://creativecommons.org/licenses/by-nc/4.0/) license.
 
-***
+<LinkButton
+	variant="primary"
+	href="/radar/get-started/"
+>
+	Get started
+</LinkButton>
+
+<LinkButton
+	variant="secondary"
+	href="https://radar.cloudflare.com/"
+>
+	Radar website
+</LinkButton>
+
+---
 
 ## Features
 
-<Feature header="Make your first API request" href="/radar/get-started/first-request/" cta="Make your first API request">
-Start learning how to use Radar's API by making your first request.
+<Feature
+	header="Make your first API request"
+	href="/radar/get-started/first-request/"
+	cta="Make your first API request"
+>
+	Start learning how to use Radar's API by making your first request.
 </Feature>
 
-<Feature header="Compare data" href="/radar/get-started/making-comparisons/" cta="Compare data">
-What to know before making comparisons between locations, [autonomous systems](https://www.cloudflare.com/en-gb/learning/network-layer/what-is-an-autonomous-system/) and more.
+<Feature
+	header="Compare data"
+	href="/radar/get-started/making-comparisons/"
+	cta="Compare data"
+>
+	What to know before making comparisons between locations, [autonomous
+	systems](https://www.cloudflare.com/en-gb/learning/network-layer/what-is-an-autonomous-system/), and more.
 </Feature>
+
+<Feature
+	header="URL Scanner"
+	href="/radar/investigate/url-scanner/"
+	cta="Use URL Scanner"
+>
+	Understand the security, performance, technology, and network details of a URL with a publicly shareable report.
+</Feature>
+
+---
+
+## More resources
+
+<CardGrid>
+
+	<LinkTitleCard
+		title="Investigate"
+		href="/radar/investigate/"
+		icon="document"
+	>
+		Explore the diverse data available in Cloudflare Radar, including NetFlows, HTTP requests, DNS queries, and much more.
+	</LinkTitleCard>
+
+	<LinkTitleCard
+		title="@CloudflareRadar"
+		href="https://x.com/cloudflareradar"
+		icon="x.com"
+	>
+		Follow @CloudflareRadar on X to learn about Internet trends, as seen by the Cloudflare global network.
+	</LinkTitleCard>
+
+	<LinkTitleCard
+		title="@cloudflareradar"
+		href="https://noc.social/@cloudflareradar"
+		icon="mastodon"
+	>
+		Follow @cloudflareradar on Mastodon to learn about Internet trends, as seen by the Cloudflare global network.
+	</LinkTitleCard>
+
+	<LinkTitleCard
+		title="@radar.cloudflare.com"
+		href="https://bsky.app/profile/radar.cloudflare.com"
+		icon="blueSky"
+	>
+		Follow @radar.cloudflare.com on Bluesky to learn about Internet trends, as seen by the Cloudflare global network.
+	</LinkTitleCard>
+
+	<LinkTitleCard
+		title="Cloudflare blog"
+		href="https://blog.cloudflare.com/tag/cloudflare-radar/"
+		icon="open-book"
+	>
+		Read articles about the latest trends and updates on Cloudflare Radar.
+	</LinkTitleCard>
+
+</CardGrid>
@@ -6,7 +6,7 @@ sidebar:
 
 ---
 
-To better understand Internet usage around the world, use Cloudflare's URL Scanner. With Cloudflare's URL Scanner, you have the ability to investigate the details of a domain, IP, URL, or ASN. Cloudflare's URL Scanner is available in the Security Center of the Cloudflare dashboard, [Cloudflare Radar](https://radar.cloudflare.com/scan) and the Cloudflare [API](/api/resources/url_scanner/subresources/scans/).
+To better understand Internet usage around the world, use Cloudflare's URL Scanner. With Cloudflare's URL Scanner, you have the ability to investigate the details of a domain, IP, URL, or ASN. Cloudflare's URL Scanner is available in the Security Center of the Cloudflare dashboard, [Cloudflare Radar](https://radar.cloudflare.com/scan), and the Cloudflare [API](/api/resources/url_scanner/).
 
 ## Use the API
 

@@ -5,6 +5,10 @@ productLink: "/radar/"
 productArea: Developer platform
 productAreaLink: /workers/platform/changelog/platform/
 entries:
+  - publish_date: "2025-03-18"
+    title: Add leaked credential checks endpoints
+    description: |-
+      * Added [leaked credential checks endpoints](/api/resources/radar/subresources/leaked_credentials/).
   - publish_date: "2025-02-27"
     title: Add DNS endpoints
     description: |-
-Original file line number
+Diff line change
@@ Expand Up / @@ -6,7 +6,7 @@ sidebar: @@
     ---
-    To better understand Internet usage around the world, use Cloudflare's URL Scanner. With Cloudflare's URL Scanner, you have the ability to investigate the details of a domain, IP, URL, or ASN. Cloudflare's URL Scanner is available in the Security Center of the Cloudflare dashboard, [Cloudflare Radar](https://radar.cloudflare.com/scan) and the Cloudflare [API](/api/resources/url_scanner/subresources/scans/).
+    To better understand Internet usage around the world, use Cloudflare's URL Scanner. With Cloudflare's URL Scanner, you have the ability to investigate the details of a domain, IP, URL, or ASN. Cloudflare's URL Scanner is available in the Security Center of the Cloudflare dashboard, [Cloudflare Radar](https://radar.cloudflare.com/scan), and the Cloudflare [API](/api/resources/url_scanner/).
     ## Use the API
@@ Expand Down @@