Cloudflare CEO Matthew Prince: bot traffic now outnumbers humans online
Matthew Prince, cofounder and CEO of Cloudflare, appeared on The Verge's Decoder podcast to discuss how AI bots and agents are remaking the economics of the web. Cloudflare, which says it operates in over 350 cities worldwide across thousands of data centers and sits between most websites and their traffic, found in June that bots made up more than half of all internet traffic. Prince described how his own predictions about when automated traffic would overtake human traffic have kept moving up: at Web Summit last November, Cloudflare's data pointed to the second half of 2027; asked again at SXSW in March 2026, the revised estimate was the first half of 2027; by May 2026, Prince says his team told him automated traffic had already passed human traffic. Extrapolating that trend, he estimates that five years from now automated traffic could be 1,000 times human traffic online, driven not by a decline in human use, which he expects to hold roughly steady, but by an explosion in bot and agent activity.
Prince argues this breaks the internet's dominant business model of the last three decades: advertising, which he credits Google with building out through products like DoubleClick and Google Analytics. Bots, he says, don't click on ads or respond to brand advertising, so the model that funded free content and the infrastructure to serve it doesn't extend to machine traffic. His proposed fix revives HTTP status code 402, "Payment Required" (he initially misspoke and said 403 before correcting himself), so that instead of publishers giving content away for free and monetizing humans through ads, bots and AI agents would pay directly, potentially "a fraction of a penny" per access, funded by the fees AI companies charge for their own products, similar to how Spotify or Apple Music pay out for streams. Cloudflare says it is working with Coinbase and Stripe to build out this payment infrastructure. Prince cites Anthropic adding $10 billion in revenue in a single month as evidence of the scale of demand for AI services that could fund such a system.
The Decoder host pushed back on whether a viable business model exists at all if a website's main audience becomes bots rather than people, since a creator might reasonably choose to build a following on a platform like TikTok instead. Prince did not fully resolve that incentive question in the portion of the conversation provided.
The interview also touches on turmoil inside Cloudflare itself: earlier this year the company laid off more than 1,000 employees, about 20 percent of its workforce, a decision Prince explained in a Wall Street Journal op-ed headlined "How I choose which Cloudflare employees to replace with AI."
Key facts
- Cloudflare found in June that bots made up more than half of internet traffic; Prince says his team told him in May 2026 that automated traffic had already overtaken human traffic, far sooner than Cloudflare's own earlier predictions (second half of 2027 as of a Web Summit talk last November, revised to first half of 2027 by SXSW in March 2026).
- Prince projects that five years from now automated traffic could be 1,000 times human traffic online, driven by growth in bots and AI agents rather than a decline in human use, which he expects to stay roughly flat.
- Cloudflare is working with Coinbase and Stripe on a payment protocol reviving HTTP status code 402 ("Payment Required") so bots and AI agents pay website owners a small fee per access, since bots do not respond to advertising the way humans do.
- Cloudflare laid off more than 1,000 employees, 20 percent of its workforce, earlier this year; Prince wrote a Wall Street Journal op-ed titled "How I choose which Cloudflare employees to replace with AI."
- Prince cites Anthropic adding $10 billion in revenue in a single month as an example of the AI-driven demand he expects to fund infrastructure for the coming surge in bot traffic.
Why it matters
The advertising model that funded the open web for three decades assumes human viewers who respond to ads. Cloudflare's own traffic data, as described by Prince, suggests that assumption is already breaking: bots passed half of internet traffic in June and, on Cloudflare's account, overtook human traffic entirely by May 2026, years earlier than the company's previous public estimates. As a company that sits between most websites and the traffic reaching them, Cloudflare is trying to shape a replacement business model, reviving the dormant HTTP 402 "Payment Required" code, before ad-funded infrastructure has to absorb what Prince predicts could become 1,000 times today's traffic within five years.
Who it affects
Publishers and website owners now face a choice Cloudflare's tools are built around: block AI bots and scrapers, allow them freely, or charge them. AI companies whose scrapers and agents depend on open web content are the other side of that transaction, alongside payment and infrastructure partners Coinbase and Stripe, which Prince says Cloudflare is working with on the bot-payment scheme. The conversation also touches Cloudflare's own staff, over 1,000 of whom were laid off this year as the company reorganizes work around AI.
How to use it
The interview itself is available as an episode of The Verge's Decoder podcast, also published to YouTube. For website operators, the practical takeaway from Prince's account is Cloudflare's existing bot-management options: block automated traffic, allow it, or, in the payment scheme Cloudflare is building with Coinbase and Stripe, allow it in exchange for a fee routed back through the reactivated HTTP 402 protocol once that infrastructure exists.
How solid is it
This account comes from an on-the-record interview conducted by The Verge's Decoder podcast with Matthew Prince, so the traffic figures, timelines and revenue examples are Prince's own claims about Cloudflare's internal data rather than independently verified reporting. The transcript provided cuts off mid-conversation, before the host's question about publisher incentives is resolved.
Risks and caveats
Prince himself notes that his past predictions for when automated traffic would overtake human traffic have repeatedly been wrong, moving earlier each time he was asked, and flags the same uncertainty around his five-year, 1,000-times projection. The mechanics of the proposed micropayment system, including pricing and how revenue would actually reach publishers, remain undefined in what he describes. The host also raises, without a clear answer in the excerpt, whether website owners have any incentive to keep building for an audience that is mostly bots rather than people.
“Bots don’t click on ads. They don’t respond to pretty swirls of paint and what we traditionally think of as a brand.”
— Matthew Prince, cofounder and CEO of Cloudflare