Bots overtake humans in web traffic, Cloudflare confirms

Bots overtake humans in online traffic for first time
© RusPhotoBank

For the first time in internet history, bots have overtaken humans in online traffic volume. Cloudflare co-founder and CEO Matthew Prince made the announcement, admitting the tipping point arrived sooner than he anticipated. He had expected automated traffic to surpass human traffic only in 2027, but says the internet has already 'clearly moved to the other side' of that milestone.

This isn't limited to conventional search crawlers, indexers, or malicious bots. Cloudflare reports a sharp rise in what it calls 'agent traffic' — systems acting on behalf of users. These agents scan product pages, compare prices, hunt for airline tickets, execute multi-step tasks, gather data for AI models, assist with food orders, interact with customer support, and are increasingly handling jobs once done by humans.

Cloudflare data shows bots now generate around 57.5% of all HTTP requests, with humans accounting for approximately 42.5%. However, the company stresses a key point: this refers to website requests, not time spent online. People still dominate usage in apps, streaming, social networks, and infinite feeds — but automated agents produce many more rapid page hits.

Prince notes the data is 'a bit noisy,' making it hard to identify the exact crossover date. But the direction is clear: the internet is no longer a place where only humans visit websites. An increasing share of web activity consists of programs scanning and processing content for users, businesses, or AI systems.

Cloudflare also highlighted country-level differences. Gibraltar recorded the highest bot traffic share at 92.1%, followed by Singapore and Iran at roughly 76.4%. Some of this can be attributed to a high density of data centers and hosting infrastructure relative to the population; in Iran, it's tied to widespread use of VPNs, automated workarounds, and scraping.

The rise of agent traffic is reshaping the internet economy. Sites used to be optimized for people who click, read, and purchase. Now they must increasingly cater to AI agents seeking information, prices, and actions. This forces website owners to ask new questions: How to distinguish helpful agents from harmful ones? How to protect content? And how to monetize in a world where more and more requests come from digital proxies rather than humans?