Release Date: September 27th, 2026
This release introduces two new enhancements designed to broaden deployment flexibility and strengthen simulation validation.
In This Release:
- DDoS Validation to GCP Environments, Fully Native
- Attack Vector Visibility, Down to Every Simulation
Native Google Cloud Platform Deployment (Log Ingestion) Enhancement
Enables RADAR to validate DDoS mitigation coverage for targets protected by Google's WAF and API Management, using log-based ingestion rather than traffic mirroring.
This capability allows an interface to be configured to ingest the logs delivered to a Google Pub/Sub, which the RADAR Detector reads directly to perform simulation validation and analysis.
For more information on how this solution works, navigate to: How to Assign Network Interfaces.
Why It Matters:
RADAR™ now reads the diagnostic logs already produced by Google Cloud services fronted by Application Load Balancers and Apigee, bringing them into continuous, independent validation alongside the rest of the attack surface, with no tap, mirror, or added infrastructure.
Until now, these services were difficult to validate independently, leaving a gap in coverage for organizations relying on Google's WAF and API Management.
How to Access It:
- In the left-hand menu, navigate to Setup.
- Click Network Interfaces.
- Select the relevant interface to configure for the GCP log solution.
- Under Traffic Source dropdown, select Logs.
Full Attack Vector Visibility Enhancement
The new Attack Vectors page provides direct visibility into the DDoS attack vectors RADAR has enabled for simulations.
Security teams can now see the full library of attack vectors, organized by RADAR attack vector categories and OSI layer, along with the simulation rate applied to each one and the exact date each vector was last tested.
Why It Matters:
Security teams gain a direct, verifiable record of which attack vectors are enabled, the rate applied to each, and when they were last run.
This visibility strengthens audit readiness: when preparing evidence for DORA, NIS2, or SEC resilience testing requirements, a live, per-vector record of enabled attack vectors can be referenced directly, instead of being reconstructed after the fact.
How to Access It:
- In the left-hand menu, select Environments.
- Select Attack Vectors.
- Attack vectors are organized by category. Selecting a category opens a table listing the attack vectors within it.
- Each row displays the attack vector's name, category, rate, and the date it was last simulated, along with a button linking to the Knowledge Base article covering the technical details of that attack.
Questions about any of these updates?
Reach out to your Customer Success Manager or contact our support team - we're here to help you get the most out of every release.