The internet, once envisioned as a network connecting people, is increasingly populated by machines. A new report from cybersecurity firm Human Security finds that automated traffic – generated by software systems and artificial intelligence rather than human users – has officially surpassed human activity online. This shift, driven by the rapid proliferation of AI chatbots and automated tools, marks a fundamental change in the architecture of the digital world, raising questions about trust, security and the very nature of online interaction.
The findings, detailed in the 2026 State of AI Traffic report released Thursday, show that automated traffic grew almost eight times faster than human activity in 2025. This isn’t simply a matter of increased website visits; it represents a fundamental shift in how the internet is used and accessed.
“The internet as a whole was created with this very basic notion that there’s a human being on the other side of the computer screen, and that notion is very rapidly being replaced,” explained Stu Solomon, CEO of Human Security, in a statement to CNBC. The implications of this change are far-reaching, impacting everything from search engine results to cybersecurity protocols.
The Rise of the Machines: AI Traffic Explodes
The surge in automated traffic is directly linked to the widespread adoption of large language models (LLMs) like OpenAI’s ChatGPT, Anthropic’s Claude, and Google’s Gemini. According to the Human Security report, AI traffic increased by 187% between January and December 2025 alone. These LLMs are not just used for conversational chatbots; they power a growing number of automated tasks, from content creation to data analysis.
This increase isn’t limited to simple chatbot interactions. The report highlights a dramatic rise in “agentic activity” – actions performed autonomously by AI agents like OpenClaw. While agentic volume was minimal in 2024, Human Security observed an almost 8,000% increase in 2025. This suggests AI is moving beyond simply responding to prompts and is beginning to proactively engage with the internet on its own.
However, quantifying this shift isn’t straightforward. Filippo Menczer, a professor of Informatics and Computer Science at Indiana University, cautioned that estimating bot traffic relies on analyzing “agent strings” – self-identified labels from web crawlers – which can be unreliable. “They depend on what sample you get. They are depending on where you’re getting the data, where the measurements are coming from,” Menczer told CNBC.
Beyond Bots: Automated Features and Everyday AI
The rise of automated traffic isn’t solely attributable to malicious bots or sophisticated AI agents. Many everyday online features contribute to the growing volume of machine-generated activity. Google’s AI Overview and autofill functions, for example, are forms of automated traffic, as are search engine crawlers that index web pages.
Solomon emphasized that “this notion of machine lousy, human good just is not realistic.” He argues that we must adapt to a world where machines act on our behalf and establish a “level of trust that’s persistent over time.” This requires a nuanced understanding of the different types of automated traffic and their potential impact.
What Does This Mean for the Future of the Internet?
The implications of a bot-dominated internet are significant. Security concerns are paramount, as malicious actors can leverage automated tools to launch sophisticated attacks. The integrity of online information is as well at risk, as bots can be used to spread misinformation and manipulate public opinion. Cloudflare CEO Matthew Prince predicted at SXSW last week that AI bots would exceed human traffic by 2027, citing the “insatiable need for data” driving generative AI. Prior to the generative AI boom, Prince estimated bot traffic accounted for roughly 20% of all internet activity, largely driven by Google’s web crawler.
The Human Security report, based on data from its Human Defense Platform which processed over one quadrillion interactions, serves as a crucial benchmark in understanding this evolving landscape. The industry has been tracking the increase in automated traffic since the launch of ChatGPT in 2022, but the latest data suggests the pace of change is accelerating.
The shift towards a machine-dominated internet isn’t necessarily negative. Automated systems can improve efficiency, personalize experiences, and unlock new possibilities. However, it necessitates a re-evaluation of how we secure the internet, verify information, and maintain trust in the digital world.
Looking ahead, the focus will likely be on developing more sophisticated methods for distinguishing between legitimate and malicious automated traffic. Further research into agentic AI and its potential impact is also crucial. The next major update from Human Security, expected in the first quarter of 2027, will provide a more comprehensive assessment of these trends.
What do you believe about the increasing presence of bots online? Share your thoughts in the comments below.
