Bots Now Outnumber Humans Online. This Startup Just Raised $200 Million to Fight Back.
Spur Intelligence, which helps companies tell real users from fake ones, closed a $200 million funding round as new data shows bot traffic has, for the first time, surpassed human traffic on the internet.
Key points
- Spur Intelligence raised $200 million in a funding round led by Insight Partners, announced in July 2026.
- Bots, automated software programs that browse and interact with websites without a real person behind them, now generate more internet traffic than humans do, according to a Cloudflare report from June 2026.
- Cloudflare's CEO said bot traffic crossed that threshold earlier than he expected, citing the rapid rise of AI agents, software that carries out multi-step tasks automatically on behalf of users or companies.
- Spur was founded in 2017, five years before ChatGPT's public launch, and focuses on helping businesses spot hidden or disguised bot activity.
Something crossed a line on the internet last month. For the first time in the web's history, automated programs outnumber the humans using it.
That finding came from Cloudflare, which routes and monitors a large share of the world's web traffic. Its founder and CEO, Matthew Prince, posted on X that he'd expected bots to hit this milestone at the end of 2027, then revised that to early 2027. It happened mid-2026. AI-driven automation is moving faster than even the people building it predicted.
Why does it matter if bots outnumber humans?
Most bots are harmless: search engines, price checkers, accessibility tools. A growing share are not. Criminal networks run bots to commit fraud, test stolen passwords, scrape private data, fake user accounts at scale, and worse. When a company can't tell a bot from a real customer, it can't trust what it sees.
Insight Partners is betting on that problem. It led a $200 million funding round into Spur Intelligence, a Lake Mary, Florida cybersecurity startup that helps companies see past disguised bot traffic. First reported by TechCrunch AI, the deal closed in July 2026.
Spur was founded in 2017, five years before most people had heard of ChatGPT. Its technology looks beyond the activity itself to the infrastructure behind it: criminal VPNs (private networks used to hide a user's real location), residential proxy networks (services that route fake traffic through real home internet connections to look legitimate). Insight's Thomas Krane described the blind spot plainly in a written statement: organisations can see the suspicious activity but not the machinery driving it.
What is pushing bot numbers so high so fast?
AI agents are the main driver. An AI agent is software that can carry out multi-step tasks on its own, browsing websites or making purchases without a person clicking anything. Legitimate companies are deploying them in large numbers. So are criminals.
Distinguishing a genuine customer from an automated threat has become genuinely hard as a result. Bots now mimic human browsing patterns, rotate through real home IP addresses, and pass basic security checks that would have stopped them two years ago. Five days before this story broke, we reported on AegisAI's $36 million raise to fight AI-crafted phishing emails, a parallel problem: the same AI acceleration that inflates bot counts is also making individual attacks more convincing.
Should you worry?
If you run a business with any online presence, unusual spikes in account sign-ups or login attempts deserve a second look. Bot farms inflate these numbers to probe for weak points.
For individuals, the threat's mostly indirect. Your stolen credentials may be the raw material a bot tests automatically across dozens of sites. A unique password for every account removes that risk almost entirely, and a password manager makes that practical.
Cloudflare's long-term measurement of the human-to-bot ratio is what made this crossing visible at all. That kind of infrastructure-level visibility is exactly what Spur is selling to enterprises that don't have it.
Common questions
Are all bots dangerous?
No. Many bots do useful work, indexing pages for search engines or checking whether websites are running. The concern is the rising share built to deceive or defraud.
Does this affect me if I'm just a normal internet user?
Mostly in the background. Bots drive up fraud rates that businesses pass on through tighter security checks, and they feed off leaked passwords. Keeping your own credentials unique limits how useful your data is to them.
