Report by DataDome
State of Bot & Agent Security Report, 2026
Key Findings
Total AI traffic increased 82.3% during the study period.
In H1 2026, AI agents generated 605.6 million requests to login pages, forms, carts, payment flows, and account-creation pages, with login pages accounting for 51.7% of those requests.
Between July 2025 and June 2026, malicious automated traffic grew more than nine times faster than human traffic.
Bad bot traffic increased 124% between July 2025 and June 2026.
Scraping accounts for 70.9% of bad bot traffic and increased 185.2% year over year.
Fake account creation grew 34.5%.
In the expanded scan, 65.3% of tested websites stopped none of the 10 bot types evaluated.
Only 2.4% of tested websites stopped all evaluated bot types, down from 8.4% in 2024 and 2.8% in 2025.
Scalping activity increased 290.7%.