Bots Now Outnumber Humans Online. Here’s What It Means for Your Business

It was only a matter of time before bots outnumbered humans on the internet, but many experts thought the flesh and blood majority would stand for a few more years. They were wrong—and the impact on business owners could be significant. New data from Cloudflare shows the number of bots accessing websites over the past seven days outnumbers human web users, with about 57 percent of web traffic coming from bots, who are busy browsing, querying, summarizing, shopping, researching, and scraping, increasingly via AI agents. “Welp, that happened faster than I predicted,” wrote Cloudflare CEO Matthew Prince in a social media post. “Thought it would be end of 2027, then early 2027, but agentic traffic [is] growing so fast that bots have now passed human traffic online for the first time in the internet’s history.” For business owners, that could mark the beginning of a new phase in how to handle business online. Instead of using the internet to attract human customers, it could be time to consider whether to structure your site to attract bots, say some experts. “Stop building for the human eye and start building for the machine mind,” says Rajiv Garg, a professor at Emory University’s Goizueta School of Business. “If an AI agent can’t read your data, you don’t exist.” The hurdle with that approach, though, is just as human visitors might either be customers or hackers looking for a weakness, not all bot traffic is the same. Some bots are malicious. Some are crawling for search engines. And some are sent from AI agents on behalf of potential customers. The challenge for businesses — and their tech teams — is figuring out which bots are which. “There is no protocol to verify whether an AI agent is acting on behalf of a real person, whether it has been authorized to perform its actions, or whether it is benign or hostile,” says Zach Meltzer, CEO and founder of Miami-based VeryAI, a ‘proof of reality’ platform designed to verify human identity and prevent AI-driven fraud. “Platforms cannot differentiate between a personal AI assistant booking a flight for its owner and a bot farm scraping data. The current workaround — forcing agents to impersonate humans via browser automation — is inefficient for legitimate agents and trivially bypassed by malicious ones.” There are also cost issues with bot traffic that business owners need to consider. Automated traffic can chew up bandwidth and impact analytics without generating any revenue. That could result in higher than expected bills, which could hurt the bottom line of companies that have smaller infrastructure budgets. While customer acquisition is expensive, human visitors are more likely to result in a sale, a subscription, or a viewing of content. Additionally, as bot visitors increase, it becomes more difficult for business owners to connect web traffic with customer demand. Garg suggests that the era of winning customers with creative web design is coming to a close, and future online iterations should move away from visual interfaces and more toward lean sites that emphasize behind-the-scenes data exchanges. “The internet is shifting from a destination [that] humans visit to an invisible infrastructure that AI agents navigate for us,” he says. “Your tech budget needs to shift from beautiful UIs to robust bot interfaces. Don’t build a better website. Build an MCP (Model Context Protocol) server that lets the AI ecosystem seamlessly transact with your business.” For instance, one SaaS company, Monday.com, has created an AI agent-only sign-up flow on its website. It employs a reverse CAPTCHA system that it says only AI can get through. That could increase your business’s chances of AI chatbots recommending your site to users, much like today’s search engines do. The shift from primarily human users to primarily bots is one experts have been predicting for quite some time. Automated traffic across the internet grew almost eight times faster than human activity in 2025, according to the 2026 State of AI Traffic report from cybersecurity firm Human Security. Cloudflare calls it the next phase of the internet’s evolution, but cautions that it will create challenges that current IT infrastructure and cybersecurity were not designed to handle. “IT leaders now face fundamental questions about trust, visibility, and control that traditional architectures can’t answer,” the company said in a blog post. “The organizations that recognize this shift — and redesign their infrastructure accordingly — will shape how the internet evolves. Those that don’t will find themselves constantly outmaneuvered.” BY CHRIS MORRIS @MORRISATLARGE