Report by DataDome
2025 Global Bot Security Report
Key Findings
Nearly 6 in 10 domains in Latin America were completely exposed to bots.
Only 2.8% of websites were fully protected against bots in 2025, which is down from 8.4% in 2024.
In North America and Europe, over 60% of websites lack any bot protection.
In 2025, 5% of AI bot traffic reached checkout flows.
In Asia Pacific, just 1.6% are fully protected against bots.
LLM crawler traffic rose from 2.6% of verified bot traffic in January to over 10.1% by August.
88.9% of domains disallow GPTBot in their robots.txt files.
Government, Non-Profit, and Telecoms sectors have the weakest protection against bots.
LLM crawler traffic quadrupled across DataDome’s customer base in 2025.
Only 2% of domains with over 30M monthly visits were fully protected against bots.
Travel & Hospitality, Gambling, and Real Estate led the way with the highest combined rates of full and partial protection against bots.
DataDome alone detected nearly 1.7 billion requests from OpenAI crawlers in a single month.
In Latin America, 38.5% of websites were partially protected against bots.
In 2025, 23% of AI bot traffic reached login pages.
In 2025, anti-fingerprinting bots were only blocked by ~7% of websites.
In 2025, fake Chrome and curl bots were detected just 21% of the time.
Latin America had the highest share of protected websites against bots.
In Latin America, only 3.5% of websites were fully protected against bots.
Among enterprises with 10,001+ employees, just 2.2% had full protection against bots.
61% of enterprises with 10,001+ employees were completely unprotected against bots.
AI bot and crawler traffic now makes up more than 1 in 10 verified bot requests.