Dead internet theory becomes measurable fact as AI agents flood the web

Bots now outnumber humans on the internet for the first time in the web’s history. Cloudflare, the security firm that sits in front of millions of websites, says automated traffic crossed the 50 percent threshold in June and now accounts for nearly 58 percent of all webpage requests. A separate report from cybersecurity firm HUMAN Security found that traffic from AI agents that actively click links and fill out forms grew nearly 8,000 percent in the past year alone.

The finding is not an outlier. Thales, the French defence and technology group, published its own Bad Bot Report showing bot traffic hit 53 percent in 2025, with 40 percent of all web activity classified as malicious. Cloudflare CEO Matthew Prince had predicted in March that the crossover would not arrive until late 2027, but agentic AI programs browsing on behalf of assistants like ChatGPT and Gemini accelerated the shift by more than a year.

The implications run deep for any company built around human visitors. Stripe says 70 percent of the commands used to access its API now come from agents, while API brokerage firm Alpaca reported that agent-driven calls grew from single digits to 30 percent of monthly volume in a single quarter. Cloudflare launched a tool called Precursor this month that watches entire browsing sessions rather than single checkpoints, an acknowledgment that traditional bot detection built around CAPTCHAs can no longer keep pace.

The scale of the shift remains hard to measure precisely because no single provider sees the entire web, and agentic browsers that mimic human behaviour routinely evade detection. A University of Bamberg study found that existing bot-detection systems misfire on real traffic at rates between seven and 15 percent, before accounting for the reverse problem of agents slipping through entirely undetected. Cloudflare, Mozilla, Google, and Microsoft are now developing a privacy-first protocol called PACT to verify traffic legitimacy without tracking users, a sign that the industry recognises its current tools are falling behind.

The web’s business model, built on ad impressions, conversion funnels, and analytics that assume the visitor is a human being, is being tested by a class of traffic it was never designed to handle. Cloudflare has set a September deadline for AI crawlers to pay publishers or be blocked from ad-supported pages, the most aggressive attempt yet to force the emerging machine economy to compensate the humans who create the content it consumes. A PitchBook report estimates that only about one percent of the roughly $20 trillion in work addressable by AI agents is currently flowing through them, suggesting the flood has barely started.