Verify any claim · lenz.io
Claim analyzed
Tech“Automated bots account for more than 50% of global internet traffic.”
The conclusion
The claim is largely supported by Imperva/Thales' 2025 Bad Bot Report, which found automated bots made up 51% of global web traffic in 2024 — the first time bots surpassed humans. However, this figure comes from a single cybersecurity vendor with commercial incentives, and most sources citing it are echoing the same dataset rather than providing independent confirmation. The 50% threshold is crossed by just one percentage point, and the broad definition of "bots" includes legitimate crawlers and API calls, which may overstate the threat implied by the claim.
Caveats
- The >50% figure originates from a single proprietary dataset (Imperva/Thales Bad Bot Report) — most supporting sources are downstream echoes, not independent measurements.
- Imperva's definition of 'bot traffic' includes all automated activity such as legitimate crawlers, API calls, and monitoring tools, which inflates the figure beyond what most readers would consider malicious bots.
- No peer-reviewed or government-level independent measurement corroborates the >50% threshold; the margin above 50% is just one percentage point.
Sources
Sources used in the analysis
Automated bot traffic surpassed human-generated traffic for the first time in a decade, constituting 51% of all web traffic in 2024. This shift is largely attributed to the rise of AI and Large Language Models (LLMs), which have simplified the creation and scaling of bots for malicious purposes.
AI isn't just trending; it's reshaping internet traffic in real-time. As large language model (LLM) based apps like ChatGPT fuel demand for content, they're straining networks, intensifying scraping, and forcing organizations to rethink how they protect their assets while still reaching their audiences.
Humans now represent less than half of all traffic (49 percent in 2024), while malicious bots have surged to 37 percent, accounting for well over twice the traffic of benign bots (14 percent). This rise in malicious bot activity reflects a growing cybersecurity challenge.
According to the 2026 AI Bot Impact Report, bots now account for 52% of all global web traffic, outnumbering human visitors by approximately three to one. This isn't just a vanity metric—it is a resource crisis.
In a significant shift in global internet usage patterns, automated bot traffic has surpassed human-generated activity for the first time in a decade, according to the 2025 Imperva Bad Bot Report. The 12th annual research study reveals that bots now account for 51% of all web traffic, with malicious bots making up 37% of internet traffic - a concerning increase from 32% in 2023.
Recent reports estimate that bots generate roughly 51% of internet traffic, while human users account for about 49%. Within the bot category, a significant portion comes from malicious bots used for fraud, scraping, spam, and automated attacks, while a smaller share includes legitimate bots like search engine crawlers.
As of 2025, automated bots account for over 50% of all internet traffic, surpassing human-generated activity for the first time in a decade. This shift is largely attributed to the rise of AI and Large Language Models (LLMs), which have simplified the creation and scaling of bots for malicious purposes.
But in its 2025 Bad Bot Report, application security company Imperva claimed this is the first time traffic from bots became more prevalent than human traffic. The rise in bots is down to generative artificial intelligence (AI), Imperva said.
As per Cloudflare's Radar, AI bots became a visible share of HTML traffic. Cloudflare also measured how much “normal” web page traffic (HTML requests) came from AI bots. According to the report: AI bots averaged 4.2% of web page requests in 2025.
According to industry wide accessible data, Bots now represent nearly one-third of all global web traffic, with AI-driven bots reaching record levels and in some industries, surpassing human traffic.
In recent years, bot traffic has grown substantially. In 2023, bots accounted for approximately 49.6% of all internet traffic, up from 47.4% in 2022 and 42.3% in 2021. With the advent of LLM web scrapers this is poised to smash through 50% in 2024.
Expert review
How each expert evaluated the evidence and arguments
The support for “>50% of global internet traffic is bots” relies on Imperva/Thales' measurement that bots were 51% of all web traffic in 2024 (1), echoed by secondary summaries/visualizations that appear to re-report the same underlying dataset (3,5,8,6), while the main refutation (9) measures a narrower category (AI bots) and a narrower slice of traffic (HTML page requests) and thus does not logically contradict a claim about all automated bots across all web traffic. Given that the only direct, on-point quantitative evidence in the pool for total bot share is the Imperva/Thales figure (1) and nothing in the pool directly disproves it on the same scope, the claim is best judged mostly true but not conclusively established as “global internet traffic” beyond that vendor's methodology.
The claim relies heavily on Imperva's Bad Bot Report (a vendor with commercial interest in highlighting bot threats), which is echoed by multiple downstream sources (Sources 1, 3, 5, 6, 7, 8) that are not truly independent — they all cite the same proprietary dataset, creating an illusion of convergence rather than genuine corroboration. Critical missing context includes: (1) Cloudflare's Radar 2025 data (Source 9) — a platform with direct visibility into a massive share of global traffic — found AI bots at only 4.2% of HTML web page requests, a figure far below 50%; (2) Source 10 independently estimates bots at "nearly one-third" of global traffic, also well below 50%; (3) the Imperva methodology counts all automated traffic including legitimate crawlers, API calls, and monitoring tools, which inflates the "bot" category relative to how the claim is likely interpreted by a general audience; (4) Source 4's claim that bots outnumber humans "three to one" is mathematically inconsistent with a 51/49 split, exposing reliability issues in the supporting source ecosystem. The claim may be directionally accurate (bots are a very large and growing share of traffic) but the specific ">50%" threshold is contested by credible, methodologically distinct sources, and the framing omits the vendor-interest caveat and the significant measurement disagreement across methodologies.
The most reliable, directly on-point evidence in this pool is Thales/Imperva's 2025 Bad Bot Report summary (Source 1, Thales) and Statista's chart (Source 3), both reporting bots at ~51% of global web traffic in 2024, but Statista and most other “independent” articles (Sources 5, 6, 8, 7) are largely derivative of the same Imperva dataset rather than independent measurement; the Cloudflare-related item (Source 9) is weaker (blog interpreting Cloudflare) and not comparable because it discusses AI bots' share of HTML requests, not total bot traffic. Weighing source reliability and independence, the best-supported conclusion is that bots exceeded 50% of web traffic (per Imperva/Thales, echoed by reputable aggregators), but the evidence is heavily dependent on a single vendor's methodology and not corroborated by an equally authoritative independent global measurement, so the claim is mostly true rather than unequivocally true.
Expert summary
What do you think of the claim?
The arguments
Two AI advocates debated this claim using the research gathered.
Multiple independent summaries of Imperva/Thales' Bad Bot Report converge on the same global benchmark: automated bots constituted 51% of all web traffic in 2024, meaning bots exceeded humans and therefore surpassed the 50% threshold (Source 1, Thales; Source 5, IDM Magazine; Source 8, Malwarebytes). This is reinforced by downstream aggregations and visualizations reporting humans at 49% and bots at 51% (malicious 37% + benign 14%) (Source 3, Statista) and by later estimates placing bots at ~51% or even 52% of global web traffic (Source 6, Anura; Source 4, KNOWLEDGE_BASE), so the claim that bots account for more than half of global internet traffic is supported by the preponderance of cited evidence.
Your "multiple independent sources" are not independent at all — Source 5 (IDM Magazine), Source 8 (Malwarebytes), Source 6 (Anura), and Source 3 (Statista) all trace back to the same single proprietary dataset: Imperva's Bad Bot Report, meaning you are citing one vendor's commercially motivated study through multiple echo chambers, not a convergence of independent evidence. More critically, you completely ignore Source 9 (The Cyber Skills), which cites Cloudflare's own Radar 2025 Year in Review — a platform with direct, real-time visibility into a massive share of global internet traffic — finding AI bots at only 4.2% of web page requests, and Source 10 (Equimedia), which independently estimates bots at "nearly one-third" of traffic, both of which fundamentally undermine the 50% threshold your entire argument depends on.
The claim rests almost entirely on a single proprietary report — Imperva's 2025 Bad Bot Report — which is a vendor with a direct commercial interest in overstating bot threat levels, and critically, Source 9 (The Cyber Skills), citing Cloudflare's authoritative Radar 2025 Year in Review, directly contradicts this figure by finding that AI bots accounted for only 4.2% of web page requests in 2025, while Source 10 (Equimedia) independently estimates bots at "nearly one-third" of global web traffic — far below the 50% threshold. Furthermore, Source 4 (KNOWLEDGE_BASE) — a shared hosting company's blog — inflates the figure even further to 52% and claims bots outnumber humans "three to one," a mathematical impossibility if humans are at 49%, exposing the unreliability and internal inconsistency of the sources propping up this claim.
You're conflating categories: Cloudflare's 4.2% figure in Source 9 is explicitly about AI bots' share of HTML page requests in 2025, not total global web traffic from all automated bots, so it doesn't contradict the 51% all-traffic benchmark reported by Thales/Imperva (Source 1) and independently echoed by Statista's human-49%/bot-51% split (Source 3). And your “single vendor” critique ignores that multiple downstream, separately published summaries and visualizations converge on the same 2024 >50% result (Source 1, Source 3, Source 5, Source 8), while Source 10's vague “nearly one-third” is non-quantified and context-light compared to those specific global estimates, and Source 4's sloppy “three to one” phrasing doesn't negate the core >50% claim supported elsewhere.