AI bots surpass humans in web traffic for first time

For the first time, automated agents and bots outnumbered humans in a slice of the web large enough to matter for publishers, advertisers and security teams. Cloudflare said 57.4% of requests to selected sites it hosts were automated bot requests, compared with 42.6% from human users, a shift that turns a long-running trend into a clear threshold crossing.

The change matters far beyond a traffic chart. Matthew Prince, Cloudflare’s co-founder and chief executive, said AI services do not browse the way people do: one agent can sweep through thousands of pages while a person may visit only a few. That scale can warp analytics, inflate server load, weaken ad-driven business models and force site operators to spend more on filtering, bot management and cybersecurity just to separate readers from machines.

Prince said the crossover came faster than he expected. In March, speaking at SXSW in Austin, Texas, he had predicted bot traffic would exceed human traffic by 2027. He later said bot traffic had passed human traffic online for the first time in the internet’s history, while also calling Cloudflare’s data “a bit messy” and saying the internet was “clearly on the other side now.” The company’s figures come from Radar, which tracks a large slice of global web traffic, and Cloudflare says it is used by roughly one-fifth of websites.

The business response is already taking shape. Cloudflare launched Pay Per Crawl in 2025, a product that lets publishers charge AI crawlers for access to content, a signal that more of the web’s economic value is being negotiated between content owners and automated systems. That shift is likely to push more websites toward paywalls, stricter bot controls and more frequent CAPTCHA checks for ordinary users, all in the name of keeping machine traffic from overwhelming human access.

Other industry data suggest Cloudflare’s crossover fits a broader pattern. Thales-owned Imperva said automated traffic accounted for 51% of all web traffic in 2024, with malicious bots making up 37% of internet traffic. HUMAN Security said AI-driven traffic nearly tripled in 2025, grew eight times faster than human traffic and saw agentic AI traffic jump 7,851% year over year. More than 95% of that AI-driven traffic was concentrated in retail and e-commerce, streaming and media, and travel and hospitality, the very sectors where distorted demand signals and scraped content can hit revenue fastest.