DataDome: 65% of tested websites failed to detect any of 10 bots

DataDome analyzed trillions of requests across 75,000 sites over a year: malicious bot traffic rose 124%, while AI agent and LLM crawler traffic grew 82.3%. Of 21,491 tested websites, 65.3% failed to detect any of 10 simulated bots, and only 2.4% stopped or challenged all of them.

• Malicious bot traffic grew 124% year over year vs 13.2% for humans
• Bots and AI agents generated about 26.5% of all traffic in the dataset
• Web scraping accounted for 70.9% of bad bot traffic
• 65.3% of sites failed to detect any of the 10 simulated bots