Bot Traffic

Magazine collage showing a server log printout with highlighted bot user-agent strings overlaid on a stylized rising bar chart, in muted retro print colors.

Agent Traffic Grew 7,851%. Most Analytics Still Counts It as Buyer Intent.

HUMAN Security's 2026 State of AI Traffic report measured automated traffic growth at 23.51% in 2025 against 3.10% for humans, with agentic browsers up 7,851% year over year. Most marketing analytics still credits those sessions as buyer intent, which silently inflates CPA on every campaign

Sealed steel storefront door beside a glowing red back door labeled myshopify.com, with a dark dashboard chart showing a 500-per-hour traffic spike.

Every Shopify Store Has a .myshopify.com Back Door. Bots Are Hitting It at 500 Carts an Hour.

Shopify routes every store's default *.myshopify.com subdomain through its own Enterprise Cloudflare account, which bypasses any WAF, hCaptcha, or bot-blocking app a merchant configures on their custom domain. One DTC store reported over 500 fake cart additions per hour through this back door in late April 2026.