Agentic AI traffic growth hits 7,851% as bots reach checkout flows

The surge in agentic AI traffic growth signals a shift from bots that merely read content to agents that execute transactions, directly impacting streaming subscription and billing workflows. For media companies, this blur between automated discovery and automated fraud means traffic quality is no longer just a security concern but a core revenue risk. The ecosystem must move away from binary blocking toward a unified trust layer that evaluates intent in real-time. As these agents increasingly handle identity and session management, streaming platforms will need to monitor whether their authentication friction is deterring legitimate AI assistants or failing to stop sophisticated credential abuse.

Human Security has positioned itself at the center of a rapidly expanding bot-management market as agentic AI traffic growth reshapes how media and retail platforms evaluate automated visitors. The company's 2025 Bot Defender report, which documented the 7,851% year-over-year surge, builds on earlier findings that Human Security identified a 178% increase in AI-powered bot traffic across its global customer base in 2024, with media and entertainment among the hardest-hit verticals. That trajectory has drawn analyst attention: Forrester's Sandy Carielli has noted that traditional bot-detection approaches relying on JavaScript challenges and CAPTCHAs are increasingly ineffective against LLM-driven agents that can reason through interactive obstacles, pushing vendors toward behavioral and intent-based signals.

The business implications extend beyond security budgets into ad-tech and revenue operations. Forrester's 2025 predictions report warned that agentic AI would force CMOs to rethink attribution models as autonomous agents begin completing purchases without human click-through events, directly challenging last-click attribution frameworks that dominate digital advertising. Joanna O'Connell, Forrester's VP and principal analyst, has argued that marketing teams must collaborate with security and fraud teams to distinguish between beneficial AI shopping agents and malicious scrapers, a convergence Human Security's report explicitly recommends. Meanwhile, the Interactive Advertising Bureau published guidance in early 2025 on how publishers should handle AI crawler access to content, signaling that the industry recognizes automated traffic as both a monetization opportunity and a brand-safety risk.

On the technical side, Human Security's detection methodology relies on behavioral biometrics and device fingerprinting rather than simple IP reputation, a distinction that matters as agentic bots increasingly mimic human browsing patterns. Arkose Labs reported in its 2025 Bot Manager Global Report that AI-driven attacks on account creation and login pages grew 315% year over year, corroborating Human Security's finding that authentication endpoints are primary targets. DataDome, a competing bot-management vendor, published research showing that generative AI bots accounted for 12% of all automated traffic by mid-2025, up from near zero in 2023, and noted that streaming and OTT platforms were disproportionately targeted for credential-stuffing campaigns. These converging data points from multiple vendors suggest the 7,851% figure from Human Security reflects a genuine industry-wide inflection rather than an outlier measurement. For organizations looking to secure their infrastructure against these threats, managing agentic AI security risks has become a critical priority.