Cloudflare CEO Matthew Prince says agentic traffic is “growing so fast that bots have now passed human traffic online for the first time”
Bot (automated) vs. human HTTP requests are split 57.5 vs. 42.5 percent, according to the firm's latest data.
Tom's HardwareMark Tyson
Context & Ripple Effects
Cloudflare’s earlier coverage has centered on the widening imbalance between AI crawling and the referral traffic publishers receive: its CEO cited sharply worse crawl-to-visitor ratios for Google and especially OpenAI, while the company reported blocking hundreds of billions of AI-bot requests for customers.
The company has been building controls around that conflict, from free bot-auditing and blocking tools to AI Crawl Control for beehiiv publishers. The reported shift in request mix makes traffic classification a core operating issue rather than a publisher-side exception.
First-order effects
Sites behind Cloudflare face a network in which automated requests outnumber human ones, increasing the immediate importance of identifying, rate-limiting, or blocking unwanted crawlers and agents.
AI companies are under direct pressure to label crawlers by search, training, and agent use ahead of Cloudflare’s stated September 15 deadline, or risk being blocked by participating sites.
Second-order effects
Publishers and web platforms gain more leverage to set differentiated access rules for AI crawlers, but must weigh any control against potential discovery and distribution benefits.
Standards work such as PACT becomes more consequential for browser, cloud, and AI-platform partners because traffic policy increasingly depends on separating legitimate automation from abuse without treating all bots alike.
Third-order effects
If agentic requests continue to grow faster than human browsing, the web’s default economics may shift from open crawling toward authenticated, permissioned, and potentially paid machine access.
The durable industry question becomes whether common traffic-identity standards can support enforceable publisher controls; without them, large infrastructure providers may increasingly set de facto access rules.
The trend: This is a data point in the transition from a human-browsed web to an AI-mediated web where bot identity, authorization, and compensation determine access.
Welp, that happened faster than I predicted. Thought it would be end of 2027, then early 2027, but agentic traffic growing so fast that bots have now passed human traffic online for the first time in the Internet's history. https://radar.cloudflare.com/ ...
@eastdakota Well if a human asks Grok a question, Grok searches several or perhaps dozens of sites to generate a response. Plus all the other LLMs, multiplied by a bunch of user queries. I'm surprised humans are still 42% actually