Dead Internet Theory Becomes Measurable Fact as AI Agents Flood the Web
Cloudflare, Thales, and HUMAN Security all confirm automated traffic has crossed the halfway mark, with AI agents that click, fill forms, and transact growing nearly 8,000 percent year over year
July 24, 2026 – 6:46 pm
Image by: Canva
TL;DR
Bots now generate most web traffic as AI agent activity surges nearly 8,000%, upending ad models and analytics built for humans. Bots now outnumber humans on the internet for the first time in the web’s history.
Cloudflare, the security firm that sits in front of millions of websites, states automated traffic crossed the 50 percent threshold in June and now accounts for nearly 58 percent of all webpage requests. A separate report from cybersecurity firm HUMAN Security found that traffic from AI agents that actively click links and fill out forms grew by a staggering nearly 8,000 percent in the past year alone.
These findings are not isolated incidents. Thales, the French defense and technology group, revealed in its Bad Bot Report that bot traffic hit 53 percent in 2025, with 40 percent of all web activity classified as malicious. Cloudflare CEO Matthew Prince had predicted this crossover wouldn’t occur until late 2027, but agentic AI programs browsing on behalf of assistants like ChatGPT and Gemini accelerated the shift by over a year.
Implications for Businesses
The implications are profound for any company reliant on human visitors:
- Stripe reports that 70 percent of the commands used to access its API now come from agents.
- Alpaca, an API brokerage firm, noted that agent-driven calls grew from single digits to 30 percent of monthly volume in a single quarter.
Cloudflare launched Precursor this month—a tool that tracks entire browsing sessions rather than single checkpoints—acknowledging traditional bot detection methods based on CAPTCHAs are now inadequate.
A New Era for the Web
The scale of this shift is difficult to quantify precisely due to the fragmented nature of web traffic and the elusive nature of agentic browsers designed to mimic human behavior. A study from the University of Bamberg found existing bot-detection systems misidentify real traffic at rates ranging between seven and 15 percent, before considering cases where agents evade detection entirely.
Cloudflare, Mozilla, Google, and Microsoft are developing PACT, a privacy-first protocol aimed at verifying traffic legitimacy without tracking users—a sign the industry recognizes its current tools are becoming obsolete.
The web’s traditional business model, reliant on ad impressions, conversion funnels, and analytics assuming human visitors, is being challenged by a class of traffic it was never designed to handle. Cloudflare has set a September deadline for AI crawlers to pay publishers or face blocking from ad-supported pages—the most aggressive attempt yet to make the emerging machine economy compensate humans for their content. A PitchBook report estimates only about one percent of the roughly $20 trillion in work addressable by AI agents is currently processed through them, suggesting this flood is just beginning.