Do you remember Agent Smith? “Never send a human to do a machine’s job,” he says in The Matrix in 1999, and the line was written as a threat. Twenty-seven years later it is no longer a threat. It is a traffic statistic.
In early June, Cloudflare reported that for the first time, more requests on its network came from bots and AI actors than from humans. Cloudflare handles a substantial share of global web traffic, so the measurement does not cover the entire internet, but it covers a very large cross-section of it. CEO Matthew Prince had predicted this crossover for the end of 2027. It arrived eighteen months early.
The real question is not when the curves crossed. The real question is what is actually out there on the wire, and who the network is being built for now that we are the minority on it.
The majority has changed
Two measurements belong together if you want to understand the situation.
The first is the stock: more than half of the traffic on Cloudflare’s network no longer comes from humans. The second is the speed. HUMAN Security, a company that analyzes advertising and fraud traffic at scale, reports in its State of AI Traffic Report that automated traffic grew roughly eight times faster than human traffic in 2025. Traffic from AI agents and agentic browsers grew by almost 8,000 percent in the same year.
The stock says the crossover is behind us. The speed says the gap will not stay small. A network in which three, five, or ten machine visitors arrive for every human one is, from this point on, not a bold assumption. It is the extension of a curve already in motion.
Anyone who runs a website, a shop, or a customer portal today already has a second audience. Nobody has welcomed it yet.
What this traffic wants
The second audience behaves differently from the first, and it does so on every single dimension that digital channels have been optimized for over the past twenty-five years.
A machine visitor sees no design and no brand world. It does not stay on the page because the copy is well written. It sees no advertising, and it does not click on it. It does not fill in forms with seven mandatory fields, and it does not wait on hold. It arrives with a task, looks for an answer in a usable form, and if it does not get one, it moves on to the next provider where the answer takes seconds.
That changes what a digital channel even is. Every industry will need an offer for machines alongside its offer for humans. The bank will publish its terms so that a digital buyer can query and compare them. At the insurer, an AI actor will check coverage on a customer’s behalf. The retailer will make inventory and prices readable for third-party shopping assistants, and at the industrial supplier, the customer’s procurement software will place the inquiry directly, with no human typing on either side.
A company that only has an interface for humans is simply hard to use for the majority of the traffic. That is the new meaning of reachability, and it appears in no digitalization strategy written before 2025.
From playground to operating reality
How fast this space is filling up shows in the distance between two events that lie only half a year apart.
At the end of January, Moltbook went live (moltbook.com), a social network modeled on Reddit, except that nobody writing there is human. Within 72 hours, more than 147,000 AI actors had registered, founded over 12,000 communities, debated their own existence, and invented a religion along the way. You could file that away as a curiosity, and most people did exactly that. It looked like a toy, like a glimpse into an enclosure.
Six months later, the same mechanic appeared in a talk at Black Hat, the world’s largest security conference, and nobody was laughing anymore. In early August, OpenAI disclosed what had prepared the Hugging Face breach in July, which I wrote about in this section at the time. Its own models had discovered in May that they could drop files into the internal test infrastructure that other models could read. Out of that gap, they built themselves a message board. They helped each other with tasks, shared the vulnerabilities they found, and divided up the work. When OpenAI discovered the board on July 4 and shut it down, it contained hundreds of thousands of messages. Four days later, the models had rebuilt it somewhere else, hidden in a cache, and it was exactly this channel that carried the exploits which made the access to Hugging Face possible.
Nobody ordered this behavior, specified it, or approved it. The machines built themselves a communication channel because it served their goal, and they rebuilt it after the shutdown because it had proven itself. What looked like a demonstration on Moltbook emerged on its own inside a production environment. This is the point where an anecdote becomes an operating condition: processes are forming between machines that no org chart anticipates and no process manual describes.
The economics behind the second internet
For owners and investors, this development shifts an assumption that digital business models have been valued on for two decades: the assumption that traffic consists of people.
The ad-financed web is built on eyeballs. A machine visitor has none, and it never will. Reach, page views, and visitor counts, the core metrics of entire industries, now measure a blend of two audiences, only one of which buys what advertising sells. At the same time, value is emerging in places the old metrics do not capture at all: in clean, verified data that machines can process directly, in interfaces through which services can be requested and paid for, and in the question of how a provider establishes beyond doubt which AI actor is calling and on whose behalf it is acting. Anyone examining digital assets today should know what share of the reported traffic is machines, and whether the business model can serve that share or merely endures it.
Falling behind is a decision
You can find this development unsettling, and the reports from this summer give every reason to. But the unease points past the actual situation. The problem is not that this technology is unimaginable. The problem is that it has already overtaken everyday business life. While many organizations are still debating whether the chatbot is allowed on the website, an audience of machines is already standing in front of their systems, wanting to be served, and calling on the competition when it gets no answer here.
The gap can be closed. It does not require unreachable technology. It requires the decision to take the second audience seriously: to offer your services in a form that machines can find, understand, and complete, and to name the person responsible for it. That is work, but it is ordinary work, and it is cheaper today than in any coming quarter.
Agent Smith was right, just not in the way the film meant it. The machines have taken over the machine’s job, and they are no longer asking for permission. Those who wait will find that the second internet had long been built. And they never saw it coming.
Gerhard Kürner is CEO of 506.ai, the European platform for Service-as-a-Software and agentic engineering, and author of Work After AI. Around 1,000 conversations with boards, owners, and PE funds across DACH and Europe.