AI Agent Web Traffic Grew 7,851% Year-Over-Year as Bots Now Outnumber Humans Online

Traffic from AI agents that actively browse the web — clicking links, filling out forms — grew 7,851% year over year, according to HUMAN Security's 2026 State of AI Traffic & Cyberthreat Benchmark Report. CloudFlare pegs the human/bot crossover at June 2026, with bots generating 57.5% of all webpage requests; Thales dates it even earlier, to sometime in 2023. CloudFlare's own CEO had predicted in March that bots wouldn't cross 50% until end of 2027 — they got there more than a year ahead of schedule.

The Internet's ad-impression, pageview-based business model was built on the assumption that the visitor is human. That assumption is now structurally wrong, and the measurement infrastructure hasn't caught up: no single provider tracks the whole web, bot-detection systems routinely misfire on real human traffic at rates of 7–15%, and agentic browsers that mimic human behavior slip past traditional filters entirely. Stripe reports 70% of its API commands now come from agents; Alpaca says agent-driven API calls jumped from single digits to 30% of monthly volume in one quarter. The economic footprint is still small — Pitchbook estimates roughly 1% of the $20 trillion in work plausibly automatable is actually flowing through agents today — but the infrastructure underneath the web is already being rewritten around them.