1,000x Human Traffic in Five Years: Cloudflare's 16th-Birthday Founders' Letter Warns of an Agent-Dominated Web

On September 27, 2010, Cloudflare launched on stage at TechCrunch Disrupt while its engineers sat in the audience fixing bugs. Sixteen years later to the day, co-founders Matthew Prince and Michelle Zatlyn published their 2026 Annual Founders’ Letter — and it reads less like a birthday toast and more like a field report from a web being rewritten in real time by AI agents.

Their central claim is stark: the Internet is changing more today than at any point since Cloudflare launched. And the force doing the changing is not human.

The crossover already happened

Cloudflare’s earlier forecast had automated traffic overtaking human traffic in the second half of 2027. In the letter, the founders report that the rise of agents and AI crawlers pulled that date forward to May of 2026 — roughly a year and a half early.

The forward projection is more dramatic. If current trends continue, which the founders note “if anything, seems conservative,” automated traffic will reach 1,000 times human traffic in just five years. Importantly, they attribute this not to any decline in human usage but to agents’ usage simply exploding: an agent asked to recommend a lunch spot may survey a thousand restaurant menus and return one answer.

That asymmetry frames the letter’s core economic argument. The one restaurant that wins the customer gets the business; the other 999 bear the cost of serving the agent with nothing in return. Prince and Zatlyn name this a tragedy of the commons: the users who benefit from agents don’t bear the costs of the load those agents place on the system, and therefore don’t exercise appropriate restraint.

The web stopped shrinking

A second datapoint rewrites a common narrative. From 2012 through 2025, the web plateaued and by some measures even shrank. That changed in mid-2025, when there was an explosion of new websites.

The popular explanation is AI “slop” — machine-generated junk pages. Cloudflare says that is not the majority of what it sees. Instead, AI has unlocked a new cohort of creators: individuals with ideas but without coding skills, using so-called “vibe coding” tools to bring creations to life. Cloudflare notes with some pride that the majority of these tools treat its developer platform as their preferred deployment target, and that more than 7 million developers now build on it.

The irony the founders draw out is pointed: AI has made it easier than ever to build something; agents could make it much harder for anyone to find it.

The deli problem

The letter’s most quotable passage concerns discovery economics. Small businesses today win customers through emotion or convenience — you patronize a deli because the person behind the counter remembers your name, or a local store because it is on your drive home. An agent cares about neither. It goes with whatever it has the most information about, “and that’s usually whoever has been around the longest.”

The projected consequence: as agents handle more commerce, new entrants will find it harder to break in, pushing the market toward consolidation and a less robust business environment.

The founders tie this to their own origin — “Nobody’s agent would have recommended us” in 2010 — and state the stakes plainly: “We want the next new entrants to get the same chance. That’s what we’re playing for. Not a future with five AI companies, but one with 500,000, spread around the world.”

Last year’s letter focused on what AI was doing to publishers. This year, they write, the same shift is reaching the restaurant and the deli. What replaces the Internet’s old business model is, in their words, the most interesting question of the next five years.

What Cloudflare is shipping about it

True to Birthday Week tradition — the company gives presents rather than receiving them — several of the presents this week target the 999 restaurants:

• Smarter crawling. Agents crawl the way search engines always have: everything, over and over, whether it changed or not. Cloudflare’s data suggests more than half of what good bots fetch hasn’t changed since their last visit. The company has been working on letting crawlers see more of the web while fetching only what’s new, cutting the load on crawled sites.
• Getting paid for agent use. Cloudflare is giving anyone who puts content or applications online “a way to get paid when agents use what they’ve built.”
• Partnerships. The company says it will announce partnerships through the week with organizations that “want the same future we do.”

These build on a year of groundwork. In July, Cloudflare introduced its “Your Content, Your Rules” stance for the agentic Internet, reporting that over 50% of AI-crawler traffic is spent re-fetching unchanged pages. And starting September 15, 2026, Cloudflare split AI crawler traffic into three distinct categories — notably separating AI training from AI search — with controls including a “Disallow AI Training” setting and an Accountable AI crawler framework, giving site owners far finer-grained consent over who may crawl, index, summarize, or train.

Why it matters

Cloudflare sits in a position almost no other company occupies: it proxies a staggering fraction of the web’s traffic, both human and automated, which makes its network one of the best sensors available for this particular transition. When it says automated traffic passed human traffic in May 2026, that is measurement, not speculation.

The letter also lands amid an unusual moment of public soul-searching across the AI industry — the same weekend saw Bill Gates escalate calls for AI safeguards and legislation, OpenAI and Anthropic publicly discuss pausing frontier training, and the US and China formalize AI safety channels. Cloudflare’s contribution to that conversation is narrower but concrete: whatever the labs decide about model capability, the infrastructure layer is already living with the agent swarm, and the economics of who pays for it are being decided now.

The founders close on the optimism they opened with, reiterating the company’s mission phrasing — “Cloudflare’s mission isn’t to build a better Internet, it’s to help build a better Internet” — and shipping their opinions for an Internet that still has room for a teenager launching a first app, the deli where they remember your name, and whoever is building the next Cloudflare.

Whether the 999 restaurants can survive on presents given once a year, however, is the question the next five years will answer.