ServiceRadar V2 documentation

Orientation for building ServiceRadar extensions — WebAssembly checker plugins, browser-module dashboards, and native agent add-ons.

Build, package, and ship ServiceRadar WebAssembly checker plugins in Go (TinyGo) with the official serviceradar-sdk-go module.

Build ServiceRadar WebAssembly checker plugins in idiomatic Rust with the serviceradar-sdk-rust crate, targeting the same V2 plugin contract as the Go SDK.

Build signed browser-module dashboards that ServiceRadar imports, verifies, and renders with SRQL data, settings, navigation, theme, and map libraries supplied by the host.

Reference for the project templates shipped by `@carverauto/serviceradar-cli`. Each template is a runnable starting point — pick the one closest to what you're building, scaffold, then iterate.

How package authors describe logs and events so ServiceRadar can render them without producer-specific UI code.

What a ServiceRadar WebAssembly plugin package contains, how it is signed, and what you can expect to find on a plugin page before installation.

Author, build, sign, and ship native ServiceRadar agent add-ons — compiled Go/Rust binaries the agent supervises out-of-process, with the addon.yaml manifest, go-plugin protocol, and signed-bundle pipeline.

The reference Go native add-on that validates the go-plugin add-on contract end to end. Start here when building an agent-sidecar add-on in Go.

The reference Rust native add-on. The first Rust consumer of the native add-on framework and the template for agent-sidecar add-ons built with the rust/addon-sdk crate.

A Rust agent-sidecar add-on that receives PowerDNS protobuf telemetry, maps RPZ policy hits to OCSF DNS Activity events, and forwards them through the authenticated ServiceRadar agent path.

A privileged Rust systemd-service add-on providing passive host fingerprinting (p0f/JA4), DPI, eBPF process attribution, and flow visibility, delivered as a signed pushed-artifact.

A root-owned Rust systemd-service add-on that collects node-local CRI/container workload metadata for Kubernetes pod, namespace, container, image, and runtime identity enrichment.

An opt-in, root-owned Go systemd-timer add-on that emits CycloneDX JSON package SBOM data for ServiceRadar agent ingest.

A root-owned Go systemd-timer add-on that scans developer and package-manager artifacts for exposure and writes sanitized findings to a spool for non-root agent ingest.

A Rust ephemeral-helper add-on that provides per-session RDP desktop support for the compiled-in remote-access feature. Staged as a signed artifact and invoked on demand.

The in-agent remote access suite (SSH, app/TCP forwarding, file transfer/SFTP, desktop, recording) exposed through the native add-on feature-set contract as a compiled-in, config-toggle add-on.