Nearly two-thirds of tested websites fail every bot test
DataDome reports malicious bot traffic jumped 124% year over year, while 65% of tested websites detected none of ten simulated bots.
DataDome’s 2026 bot report, covering trillions of requests from more than 75,000 sites between July 2025 and June 2026, found malicious bot activity up 124% versus 13.2% growth in human traffic. Bots and AI agents generated about 26.5% of requests, and web scraping accounted for 70.9% of bad bot traffic, while credential stuffing was flat year over year. Of 21,491 popular homepages tested, 65.3% detected none of 10 simulated bots and only 2.4% stopped or challenged every type. Monthly AI bot traffic to login pages rose more than eightfold in the first half of 2026; counted events are attempted actions, not confirmed breaches.
- Malicious bot traffic rose 124% from July 2025 to June 2026, versus 13.2% human growth.
- Bots and AI agents were about 26.5% of requests across more than 75,000 sites.
- Web scraping was 70.9% of bad bot traffic; credential stuffing was flat annually.
- 65.3% of 21,491 tested homepages detected none of 10 simulated bots.
- Monthly AI bot traffic to login pages rose more than eightfold in early 2026.
- Vendors
- DataDome
- Organizations
- DataDome
- Countries
- United StatesCanadaFrance
From the original article
3 min read at helpnetsecurity.com
Malicious bot activity increased 124% between July 2025 and June 2026, compared with 13. 2% growth in human traffic. Traffic from AI agents and large language model crawlers rose 82.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.