For the first time in the history of the modern internet, automated bots are generating more web traffic than human beings. New data from Cloudflare, one of the largest infrastructure and security companies on the web, shows that machines have quietly crossed a threshold many experts did not expect to see for years.
According to Cloudflare, bots accounted for roughly 57.5% of all requests made to web pages, compared with about 42.5% coming from real people. That is a roughly 60/40 split tilted toward automated software, a striking inversion of how most of us imagine the internet works. When you picture the web, you probably picture people: someone reading an article, scrolling a feed, or searching for a recipe. Increasingly, the traffic flowing across the internet is not people at all.
What is driving the flip
The single biggest factor, according to Cloudflare, is the explosion of artificial intelligence. The company points specifically to the rise of so-called “agentic” AI, programs that do not just answer questions but actively browse, scrape, click, and take actions on the web on their own. These automated agents crawl pages, gather data to train and feed AI models, and increasingly carry out tasks that a human would once have done manually.
Cloudflare CEO Matthew Prince said the surge in this kind of automated activity pushed the crossover point forward dramatically. By his account, the moment bots would overtake humans arrived roughly 18 months ahead of his own earlier prediction, which had pegged the milestone for late 2027. In other words, the AI boom did not just change what happens online, it accelerated the timeline on which machines came to dominate web traffic.
Not all of it is harmless
It would be a mistake to assume all of this bot traffic is benign. Cloudflare reports that bots are now behind about 94% of all login attempts across the sites it protects. That figure is a window into the sheer scale of automated activity hammering websites at every moment, including credential-stuffing attacks, account-takeover attempts, and other malicious behavior in which software rapidly tries to break into accounts using stolen or guessed information.
For the companies that run websites, this means a growing share of their infrastructure, bandwidth, and security spending is devoted not to serving human visitors but to managing, filtering, and defending against machines. For ordinary users, it helps explain the constant drumbeat of security prompts, two-factor codes, and “prove you are human” checks that have become a routine part of life online.
What the numbers do and do not mean
It is worth being precise about what Cloudflare measured. These figures describe traffic to web pages, the requests made to load HTML content. They do not capture all internet activity. Streaming video, online gaming, and the traffic generated by mobile apps are not part of this particular measurement, and those categories remain enormous. So while bots now out-request humans on the open web, the claim is narrower than “machines have taken over the entire internet.”
Still, the symbolism is hard to ignore. The web was built as a human medium, a place for people to publish, read, and connect. The fact that automated software now generates the majority of requests to web pages marks a genuine shift in what the internet primarily is and who, or what, it primarily serves.
A change few users chose
Perhaps the most pointed takeaway is how little say everyday people had in this transformation. The shift toward an internet dominated by bots was driven largely by corporate AI development and the race to build ever more capable automated systems. The websites people visit are increasingly shaped by, and built to withstand, automated traffic, much of it generated by a handful of powerful technology companies and their AI tools.
Cloudflare’s data is a snapshot of a fast-moving moment, and the balance between humans and machines may keep shifting as AI tools spread further. But the milestone is clear: on the open web, the machines now outnumber us. The question going forward is whether the internet can remain a useful, trustworthy space for the people it was built for, even as automated systems take up more and more of the road.