Skip to content

Project

Cloudflare Radar

Cloudflare Radar is a free platform publishing data on global Internet traffic, security threats, routing anomalies, and bot activity trends.

Known aliases

  • Cloudflare Radar bots directory
  • Cloudflare Radar route leak detection
  • Radar

Current stories

buildOne report1 publisher

Cloudflare starts measuring Verified bots against robots.txt and 429 responses over time

Cloudflare has introduced a system that scores Verified bots on robots.txt compliance and on whether they slow down after an HTTP 429. It reports the result as a trust band, and Cloudflare says it will share scores on Radar later.

Reality

Evidence35
Adoption10
Hype gap+10
Incentives60
Confidence65
buildOne report1 publisher

Propaganda trackers saw no dip when Yandex's automated traffic fell about 94%

Cloudflare Radar shows Yandex's automated traffic fell sharply after the strikes, but researchers saw no matching drop in known propaganda networks. Cloudflare counts crawlers, scanners and malware as bots, so the dip cannot be read as a count of political accounts.

Publishers:mezha.net

Reality

Evidence58
Adoption70
Hype gap+65
Incentives
Not scored
Confidence50
buildOne report1 publisher

One site's Next.js logs show OpenAI's crawlers running JavaScript from September 25

OAI-SearchBot and GPTBot began rendering JavaScript on September 25, 2026, according to IP-verified logs from a Japanese Next.js marketplace. OpenAI has not announced it, so the case rests on prefetch URLs that only a JavaScript run can produce.

Publishers:dev.to

Reality

Evidence45
Adoption
Not scored
Hype gap+15
Incentives30
Confidence40
buildOne report1 publisher

AI-agent requests on Cloudflare's network grew more than 1,700% in a year

Cloudflare says AI-agent requests on its network grew more than 1,700% in a year as non-human traffic passed half the total. It now wants sites to identify and price agents as customers, after advising last year that new domains block AI training crawlers.

Reality

Evidence35
Adoption50
Hype gap+25
Incentives85
Confidence40
buildOne report1 publisher

Cloudflare's new AI training opt-out is backed by network-level enforcement Apple, Google and Microsoft have agreed to honor

Fewer than 1% of Cloudflare sites block search crawlers while 17% block training. A single mixed-use crawler used to collapse those two into one decision, and the new setting splits it for three named operators.

Reality

Evidence55
Adoption35
Hype gap+20
Incentives70
Confidence60
buildOne report1 publisher

HTTP/2 gives a lossy mobile link one TCP connection to stall instead of six

A dev.to guide walks Laravel apps from HTTP/1.1 to HTTP/3 on nginx, and the part worth reading twice is its admission that the middle step can hurt, because one connection carrying 40 streams stalls on one lost packet.

Publishers:dev.to

Reality

Evidence62
Adoption75
Hype gap+5
Incentives50
Confidence66
buildOne report1 publisher

Cloudflare splits search from training by publishing a no-training line in your robots.txt

Cloudflare's Disallow AI Training control lets Googlebot and Applebot keep indexing a site while a directive Cloudflare writes into robots.txt tells them not to train on it. Bingbot is expected to honor it in early 2027.

Publishers:dev.to

Reality

Evidence30
Adoption25
Hype gap+25
Incentives70
Confidence35
securityOne report1 publisher

Raptor Train burns through roughly 3,500 consumer devices a day to hold 60,000 online

Black Lotus Labs assesses the botnet as Chinese state work under Flax Typhoon, assembled from SOHO routers, NVRs, NAS boxes and IP cameras whose 17-day average lifespan makes the infrastructure disposable by design.

Publishers:lumen.com

Reality

Evidence58
Adoption62
Hype gap+15
Incentives68
Confidence57
buildOne report1 publisher

Stringifying toDataURL is one of several cheap anti-detect browser checks a buyer can run

CHEQ and Cloudflare both published their detection methods this year. Read next to the anti-detect vendor blogs, they show that a buyer outside the vendor can falsify about two things and has to take the rest on trust.

Publishers:dev.to

Reality

Evidence47
Adoption38
Hype gap+8
Incentives74
Confidence52
buildOne report1 publisher

Cloudflare attaches a status and a rejection reason to every BotBase submission

The bot submission form moves into Application Security and grows a history tab, which means the entry describing your crawler becomes a record you are expected to keep matching your traffic rather than a form you filed once.

Reality

Evidence47
Adoption20
Hype gap+12
Incentives72
Confidence56
buildOne report1 publisher

Route leak prevention moves into the protocol, and two Tier-1s are stripping the signal

Cloudflare says its RFC 9234 tracking found two large Tier-1 networks removing the Only to Customer attribute from routes they forward, blanking the leak signal for everyone behind them.

Reality

Evidence55
Adoption25
Hype gap+12
Incentives55
Confidence50