Most of your visitors are machines. One of them came to buy.

On a Wednesday in June 2026, without an announcement, a press conference or a single line in your analytics, your website's audience changed species. Cloudflare's measurement network — which sits in front of roughly a fifth of the web — reported that 57.3% of the world's HTTP requests for HTML content were coming from machines, and 42.7% from people. Cloudflare's own CEO had told an audience in March that this crossover would happen in 2027. It arrived early.

Most of those machines don't matter to you. Two-thirds of AI traffic is training crawlers hoovering up text for the next model — background weather. But a small, violently fast-growing slice is something genuinely new: an AI agent standing at your door, right now, on behalf of a specific person who is trying to get something done. That agent has a budget, a deadline and no patience. And it doesn't see your website the way you do.

This piece is about that visitor. Everything in it is checkable, every number links to its source, and the practical part at the end costs nothing and takes twenty minutes. Nothing to install, nothing to buy.

1. The number that changed the audience

Here is the crossover, drawn to scale. It is the first time in the history of the web that this bar has looked like this.

Resist the first instinct. The instinct says: machines are eating my website, put up a wall. A great many businesses acted on that instinct somewhere between 2023 and 2025, usually by flipping one switch in a dashboard, and most of them have no idea what that switch actually did. Because by 2026 the word "bot" had stopped meaning one thing.

2. Three machines knock. Only one of them is a customer.

On 1 July 2026 Cloudflare quietly did the most useful thing anyone has done for site owners in years: it stopped treating AI traffic as a single category and split it into three behaviours you can control separately. Their definitions, verbatim:

Read the middle column again. That is not a scraper. That is a person — a facilities manager pricing a fit-out, a parent finding a paediatric dentist, an ops lead shortlisting three studios — who has delegated the looking. The agent is the customer's hands.

The reason it goes undiscovered is structural. A blocked agent produces no bounce, no form abandonment, no angry email. Your analytics record nothing, because nothing loaded. The failure is perfectly silent, which is the worst property a failure can have.

3. The category that grew 7,851%

HUMAN Security analysed more than a quadrillion digital interactions for its 2026 benchmark on AI traffic, published in April. The headline everyone repeated was that automated traffic is growing about eight times faster than human traffic — automation up 23.51% year over year against 3.10% for people. That is not the interesting number.

This is the interesting number:

Now the detail that breaks most published advice. That agent traffic is not arriving as a polite crawler with a documented user-agent. It is arriving inside a browser. In May 2026, agentic browsers made up the overwhelming majority of agent activity:

An agentic browser is a real browser. It runs JavaScript, holds cookies, carries the user's session, and looks — to most of your tooling — like a slightly odd Chrome. It is not fetching your robots.txt and asking permission, because it is not a crawler; it is a person's browser with a machine at the wheel. Every checklist that ends at "add these user-agents to robots.txt" stops one step short of the visitor that matters.

4. What it actually does once it's inside

Here is where the hype and the data part company, and this article is going to side with the data even though it makes for a smaller story. Agents are not swarming your checkout. In May 2026, three quarters of everything agents did on the web was looking:

So: 2.4% is a rounding error, and anyone telling you that agents are about to become your main sales channel is selling something. But look at what 76.4% means. The agent is doing the shortlisting. It is the research phase — the exact phase where a business gets included or quietly dropped, three days before anyone talks to a human. You are not being bought from by a robot. You are being screened by one.

And screening is where you can still lose without ever knowing you were in the running.

5. They fail more often than the demos suggest

Every launch video shows an agent booking a flight in one clean pass. Then researchers put agents on real, live, unmodified websites, and the numbers collapse. Online-Mind2Web is the benchmark that did this honestly: 300 tasks across 136 live sites, graded by humans.

Now put those two facts next to each other. Roughly two in five agent attempts fail on live websites, and roughly one in eleven agent requests is being blocked outright before it starts. Both of those failures are silent on your end.

A human who can't find your price gets annoyed, maybe calls. An agent that can't find your price returns to its user with two competitors and a sentence about how it couldn't confirm yours. You are not rejected. You are omitted, which is worse, because there is nothing to fix if you never learn it happened.

6. The part almost nobody tells you: it isn't looking at your page

This is the section to read twice, because it quietly rewrites what "a good website" means.

You probably assume an AI browsing agent takes a screenshot and looks at it, the way you would. Some do, some of the time. But the dominant, cheaper, faster and far more reliable method is to skip the pixels entirely and read the accessibility tree — the structured description of a page that browsers generate for screen readers. Microsoft's own Playwright MCP server, one of the most widely used pieces of agent plumbing in the world, states it in its README without a hint of ambiguity: it "uses Playwright's accessibility tree, not pixel-based input", and needs "no vision models" because it "operates purely on structured data".

So here is your homepage, twice. Left: what your designer signed off. Right: what a large share of agents actually receive.

Sit with the consequence, because it is genuinely good news. Everything that makes your site work for an agent is something that already makes it work for a blind customer. Real headings. Buttons that are buttons. Form fields with labels attached. Alt text that says what the picture says. Keyboard reachability. There is no new discipline to buy here — the discipline is thirty years old, it has a standard, and the industry has been half-ignoring it for a decade.

There's a second class of agent that never even gets a browser: the plain fetch tool inside an assistant, which pulls raw HTML and reads it as text. Anthropic documents that its web fetch tool does not support JavaScript-rendered pages at all. For that visitor, whatever your framework paints after load simply isn't there. Two very different machines, one shared requirement: put the facts in the markup.

7. The door test — seven checks, twenty minutes, no tools

None of this needs a vendor. Do it yourself this afternoon, on the three pages that actually earn you money.

If that command prints your headline, your services, a price and a phone number, you are already ahead of most of your competitors. If it prints "Loading…" or nothing at all, you have found the single most valuable thing on this page.

And the file that fixes half of it

If your robots.txt is a mess, this is a safe, explicit starting point. It lets in the machines that bring you customers, and leaves the training decision to you as an actual decision:

One trap worth knowing, because half-written robots files do more damage than missing ones: a crawler obeys only the group named after it and ignores User-agent: * entirely once such a group exists. Every rule you cared about has to be repeated inside the named group.

8. What not to spend money on

9. The honest caveat, and why this still matters if you don't sell online

Let me argue against my own headline for a paragraph, because the strongest version of this case has to survive the objection.

Agentic traffic fell 4.3% month over month in May. Only 2.4% of it touches checkout. More than 95% of AI-driven automation is concentrated in three verticals — retail, media, travel — and if you run a specialist consultancy in Utrecht, you are not in any of them yet. The commerce protocols making the headlines, OpenAI's Agentic Commerce Protocol (September 2025, built with Stripe) and Google's Universal Commerce Protocol (announced at NRF on 11 January 2026, with Shopify, Etsy, Target and Walmart), are merchant infrastructure. If you don't have a cart, they are not your problem this year.

All true. And none of it changes what you should do on Monday, for one reason: every single item in the door test is something a human customer benefits from too. A page that states its price in text is better for the person on a train with bad signal. A form you can complete with a keyboard is better for the customer with a tremor. A homepage without four stacked popups is better for everyone who has ever visited a homepage.

This is the rarest shape a technology trend can take: the speculative future and the boring present ask for exactly the same work. You are not making a bet on agents. You are fixing your website, and getting agent-readiness for free.

The short version

The majority of requests hitting the web are now machines, and most of them don't matter. One kind does: the agent acting live for a person who is trying to choose someone. It arrives inside a browser, reads your page as a structured tree rather than a picture, fails about two times in five, and never tells you when it failed.

You can't buy your way onto its shortlist. You can only be legible to it — and being legible to a machine turns out to be identical to being legible to a person in a hurry, in the dark, on a bad connection, with a screen reader. Twenty minutes, seven checks, no invoice.

Most of your competitors will read a headline about robots taking over the internet, feel vaguely alarmed, and change nothing. That is the whole opportunity, and like all such opportunities it has a shelf life.