AI agent traffic hits 25 billion requests in Q3 2026
DataDome reports massive surge in automated traffic, with Meta bots accounting for nearly half of all AI agent requests recorded.
Key points
- AI agent traffic grew 41.5% quarter over quarter to nearly 25 billion requests in Q3 2026.
- Meta’s Muse and indexing bots accounted for nearly half of all AI agent traffic recorded.
- Agentic browser traffic, including cloud-based agents, tripled in September 2026.
Automated traffic from artificial intelligence agents surged to nearly 25 billion requests during the third quarter of 2026, according to DataDome’s AI Traffic Report Q3 2026. This represents a 41.5% increase from the previous quarter, with Meta’s new AI tools driving a significant portion of the load.
Meta’s Muse agent generated 29.1 million requests in its first twelve days of full availability, from September 22 to October 3. In a sample of that traffic, 99.3% of requests originated from cloud and content delivery network infrastructure, rather than individual user devices.
Bot traffic composition
Meta-ExternalAgent and Meta-WebIndexer combined for 12.4 billion requests in Q3, representing 49.7% of all AI agent traffic DataDome recorded. Meta-WebIndexer overtook Meta-ExternalAgent in September, a shift interpreted as continued investment in AI answer generation by Meta.
ClaudeBot ranked fourth for the quarter, surpassing GPTBot. OpenAI, Anthropic, and Amazon each use distinct bots for training data, indexing, and retrieval, allowing website owners to manage access to each individually.
Agentic browser trends
Agentic browser traffic, defined as AI agents browsing via regular browser interfaces, rose from 12.5 million requests in August to 58.2 million in September. Excluding Muse, this traffic more than tripled to 38.7 million requests. ChatGPT’s cloud browser generated the most traffic in this category.
Muse operates inside a dedicated cloud virtual machine containing a browser. DataDome classified it as agentic browser traffic because it is browser-driven. Its daily patterns matched human user activity rather than scheduled crawls. Muse accounted for 33% of September’s total agentic traffic.
Defender's checklist
Website administrators should review their robots.txt configurations, as companies do not always clarify how each bot interprets these rules. Each additional bot introduces another access setting to manage. Publishers can use distinct bot names to refuse model training while remaining accessible to AI search services.
Operational impact
Organizations should assess whether their current bot-management policies remain effective given the rapid shift in traffic sources. Teams usually need to verify that capacity plans account for unpredictable spikes from new AI agents. Review access controls to ensure critical data is not exposed to automated scraping. Internal stakeholders, including IT and security leads, must be informed of these changes to adjust monitoring thresholds. Determine which AI agents are authorized to interact with your public-facing assets.
Background: AI agents
An AI agent is a software system that perceives its environment, makes decisions, and takes actions to achieve specific goals without constant human input. Unlike passive tools, agents execute tasks, browse data, and interact with other systems autonomously.
Read the full guide: AI Agents Defined: Autonomy, Risk, and Real-World Use
What to do and how to stay safe: Meta
- Audit your server logs for unknown AI user agents and compare them against your allowlist.
- Review robots.txt rules to ensure they explicitly block or permit specific AI bots.
- Monitor for unusual traffic patterns that mimic human behavior but originate from cloud infrastructure.
- Once the vendor provides an update, test access controls against known AI agent identifiers.
Step-by-step guide: Implementing AI Usage Policies at Work: A Step-by-Step Framework
General security guidance from the InfoSec Ledger newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
How much AI agent traffic did Meta generate in Q3 2026?
Meta-ExternalAgent and Meta-WebIndexer generated a combined 12.4 billion requests, accounting for 49.7% of AI agent traffic.
Did Muse traffic come from individual users?
No, in a sample of Muse traffic, 99.3% of requests came from cloud and CDN infrastructure.
How did agentic browser traffic change in September 2026?
Agentic browser traffic rose from 12.5 million requests in August to 58.2 million in September.
