Is Your Website Traffic Real? Bots Now Drive 57% of Web Traffic

Cloudflare’s CEO Matthew Prince announced on June 3 that automated traffic, or “bots”, now accounts for a majority of web requests. According to Cloudflare’s Radar data, bots make up about 57.5% of HTTP requests for HTML pages, while human users account for roughly 42.5%.

The internet was largely built on the assumption that humans control devices and browse sites. That assumption underpins digital advertising, search results, and many online business models.

Bots range from harmless crawlers (search engines) to aggressive scrapers, price-comparison agents, and malicious automation used for fraud or account takeover.

The rapid rise is linked to generative AI and “agentic” systems that can visit hundreds or thousands of sites autonomously, far outpacing human browsing.

Faster than expected
Prince said the crossover to majority-bot traffic arrived about 18 months earlier than he’d predicted. At SXSW in March, he’d forecast bots would overtake humans in 2027; now it’s already happened. He illustrated the gap: a human shopping for a camera might visit five websites, while an AI agent could visit a thousand in moments.

Industry implications

Advertising today faces a growing challenge as marketers pay for impressions and clicks that may increasingly come from bots, complicating both ad targeting and ROI calculations. At the same time, web infrastructure providers like Cloudflare, which protect and accelerate websites, must adapt to heavier automated loads that strain performance and security. The rise of AI agents crawling and republishing content at scale also raises questions of search and fairness, since small publishers and local sites could experience shifts in traffic and discoverability.

What local businesses should consider

For local businesses, this means taking proactive steps to safeguard their digital presence. Monitoring unusual traffic spikes and setting rules to block abusive bots through web firewalls or CAPTCHAs can help maintain site integrity. Verifying ad and analytics traffic is equally important to avoid paying for or optimizing toward non-human visits. Keeping content structured with clear metadata and sitemaps ensures that legitimate crawlers index Philippine businesses correctly, preserving visibility in search. Finally, using services like Cloudflare or other CDN/WAF providers can absorb traffic surges and filter malicious automation, offering a stronger defense against the evolving digital landscape.

A broader change
Security firms also report automated traffic growing far faster than human usage. As AI agents become more capable and autonomous, the web’s character is shifting from a human-centered space to one shared with and at times dominated by machine actors.