Application Security Community

Hi Community,

It is with great pleasure to announce that the 2026 Bad Bot Report is now available. This marks our 13th consecutive edition, highlighting how automation is reshaping the internet.

The statistics uncovered this year are compelling and urgent:

• AI-driven bot attacks surged 12.5x, signalling a dramatic acceleration in automated threats.
• Bots now dominate the internet, accounting for over 53% of all web traffic, with 40% classified as malicious.
• APIs and identity systems have become primary targets, with 27% of attacks focused on these critical business systems.

The research is presented to help organizations understand what’s changing, anticipate risk, and act with confidence. It also reflects how we continue to help you stay in control, giving you the visibility, policies, and protections needed to distinguish between legitimate and harmful automation and keep their systems secure.

Download the report here.