For the first time in history, automated bot traffic on the network surpassed the number of human users online.

Bots have surpassed humans in web traffic volume.

According to Cloudflare Radar, 57.5 % of all HTTP requests for HTML pages are generated by automated agents, while only 42.5 % come from real users.

The rise is driven by agent AI. At SXSW in March, Matthew Prince showed that one person visits about five sites, whereas an AI agent can “browse” up to 5,000 pages over the same period. HUMAN Security forecasts that AI traffic will grow eight times faster than human traffic by 2026.

Business model reassessment. For investors and companies dependent on audience attention (advertising, e‑commerce), this signals a need to rethink monetization: most media assets are designed for people, not bots.

Cloudflare as the “winner” of change. In 2025 the company launched Pay Per Crawl—a fee for AI parsers accessing content—blocked over 416 billion bot requests, and introduced Markdown‑for‑Agents for machine reading.

Platform shift. Prince compares the move to agent AI with the transition from desktop PCs to mobile: the difference is only speed—it now happens in months instead of decades.

Threat from malicious bots. The Thales 2026 Bad Bot Report records a twelve‑fold increase in AI attacks in 2025; 40 % of all traffic is now considered bot‑generated. HUMAN Security notes that distinguishing “harmless” from “malicious” agents is almost impossible—there’s only a 0.5 % difference.

Problems for advertisers. Bots do not create real page views, session times, or conversions that underpin programmatic ad bidding. If an AI assistant visits thousands of URLs on behalf of a user, those actions are not counted as human interaction.

Need for change. Companies operating on CPM/CPC and based on pre‑2025 assumptions about user behavior must urgently adapt their evaluation models.

Future infrastructure. Forbes believes the leaders in the next cycle will be companies building trust mechanisms for machines: agent identification, intent verification, and content delivery via API rather than blanket bot blocking.

What this means for business

Key takeaways

1. Bots already dominate traffic—57 % of requests come from automated agents.
2. Agent AI is growing exponentially, surpassing traditional scrapers and search robots.
3. Cloudflare leads with new monetization models and bot‑traffic protection.
4. Traditional ad metrics need revision: session time, page views, and conversions no longer reflect real engagement.
5. Future infrastructure will hinge on machine trust—agent identification, intent verification, and API access to content will become key competitive advantages.

Thus, internet companies must quickly adapt to a new reality where bots are not just “assistants” but full participants in the digital market.