Cloudflare Radar says 34.1% of global HTTP traffic now comes from bots. Cloudflare CEO Matthew Prince said that, at the current pace, bot traffic could overtake human traffic as early as 2027. That is still a projection, not a confirmed outcome.
The number points to a shift in how the internet is being used. A single page view is often matched by many automated programs scanning, copying, and analyzing the same page in parallel. Cloudflare also makes a clear distinction here: bot traffic is not the same as malicious traffic. The total includes search engine spiders, network monitoring tools, API integration services, and attack programs, so the dataset works better as a trend signal than as a crime count.
AI crawlers are now the second-largest bot segment
Within bot traffic, AI crawlers are growing quickly. Cloudflare says AI crawlers account for about 22% of all bot traffic, making them the second-largest category after search engine crawlers. These programs are used to collect web content for model training or to support real-time AI answers.
The market share inside that segment is also shifting. According to Cloudflare, Meta-ExternalAgent holds about 16.3%, ahead of GPTBot; ClaudeBot stands at roughly 11.6%; and Applebot posted 140% monthly growth, rising from about 2.97% to 7.15%. The report notes that figures can vary across datasets, so they should be read as directional signals rather than precise rankings.
By function, training-oriented crawlers make up about 51.5% of all AI crawler activity. More than half of this traffic is being used to gather material for future model training instead of serving immediate user queries.
Content economics and security operations are both being affected
Prince’s forecast rests on one core metric: bot traffic is growing about 8 times faster than human traffic. If that gap persists, the bot share of total traffic will keep rising. For AI companies, crawlers are an automated supply line for training data. For publishers and content platforms, the meaning of traffic is changing, because machines can read and extract content without generating ad impressions the way people do.
Security teams are dealing with a different version of the same shift. The report says that when 94% of login attempts come from bots, older review methods built around human behavior stop being effective. Cloudflare also lists device traffic at 55.4% for mobile and 44.6% for desktop. That framework is starting to look incomplete as machine traffic becomes a major class of internet usage on its own.