Analysis
The Register's July 12 column makes an argument that's more structural than it first sounds: AI crawlers, scraping bots and increasingly autonomous browsing agents have become such a dominant share of traffic on many websites that human visitors are, in a meaningful sense, becoming the minority presence -- rats in the walls of a house built for someone else.
The practical consequence is that site operators are reworking core infrastructure decisions specifically around managing non-human traffic: rate-limiting strategies, content-access gating, and increasingly aggressive bot-detection systems designed to distinguish training-data scrapers, search-indexing crawlers and agent-driven browsing tools -- like the agentic capability OpenAI folded into ChatGPT after discontinuing its standalone Atlas browser -- from genuine human visitors.
The theme connects directly to two other stories in this same news cycle: VentureBeat's slopsquatting research, which documents a new AI-specific software supply-chain attack vector, and CISA's own disclosed gap in incident-response readiness for cloud and code-repository exposures. All three point toward the same underlying pattern -- infrastructure, security and content-access assumptions built for a predominantly human web are increasingly mismatched to how the web actually gets used and abused today.
The commercial question underneath all of this is the one most publishers haven't fully answered yet: if a majority of a site's traffic is non-human and largely non-monetizable through conventional display advertising, the fundamental business model of large parts of the open web -- built on human eyeballs and ad impressions -- needs active rethinking, not just better bot-defense tooling bolted onto the existing model.
For founders building content, publishing or media businesses, the shift argues for treating AI-traffic monetization -- licensing content access to AI labs directly, building agent-friendly paid APIs, or gating premium content behind authentication that filters bot traffic by design -- as a first-order product and business-model decision, not an afterthought defensive measure. For infrastructure and security founders, bot-traffic management for an AI-dominated web is a genuinely underserved category with real, growing demand from any site operator dealing with this shift in real time.
The bear case: framing this as an existential crisis for the human web risks overstating a trend that may simply require better technical tooling to manage, rather than a wholesale rethink of how the internet works -- bot traffic has always existed, and the industry has adapted to prior waves of automated traffic before. What to watch next: whether major publishers begin disclosing bot-versus-human traffic splits more transparently, and whether AI labs move toward paying for content access at scale rather than relying on scraping that operators are increasingly motivated to block.
