Bots Run the Internet. Now Someone Has to Run Them.

§ 01 Executive Snapshot

• What: Bots now generate over half of all web traffic, presenting new challenges for security and payments.
• Who: Automated systems, Human Security, Cloudflare, Mastercard.
• Why it matters: The rise of bots necessitates a reevaluation of web security and payment infrastructures as traditional models fail to accommodate non-human actors.

§ 02 Key Developments

• Automated systems account for 57.4% of all web requests worldwide, with North America reaching 68.6%.
• Agentic AI traffic grew 7,851% year over year, with retail and eCommerce accounting for 46.6% of all agentic traffic.
• Carding volume surged 250% since 2022, while post-login account takeover attempts quadrupled.
• 59% of firms face bot-driven fraud as an active threat, leading to a loss of 3.1% of annual revenue due to identity gaps.
• Human Security found that 2.3% of all agentic activity occurs at checkout, without human confirmation.

§ 03 Strategic Context

• The traditional web security model was designed for human users, leaving a gap for automated systems that now dominate web traffic.
• The increasing prevalence of agentic AI highlights a significant shift in online behavior that challenges existing identity verification and payment systems.

§ 04 Strategic Implications

• Immediate consequences include the need for companies to adapt their security measures to differentiate between legitimate and malicious automation.
• Long-term implications involve developing new payment infrastructures that can accommodate machine transactions while managing fraud risks.

§ 05 Risks & Constraints

• Regulatory challenges arise as existing identity and payment systems are ill-equipped to handle the nuances of non-human actors.
• The rapid evolution of bot behavior may outpace the ability of companies to implement effective security measures, potentially leading to increased fraud.

§ 06 Watchlist / Forward Signals

• Watch for the rollout of new payment infrastructures tailored for agentic commerce, as payment networks respond to the growing demand.
• Future developments in AI-driven fraud detection and identity verification will be critical in determining the success of security adaptations in the digital landscape.