--- title: "Cloudflare blocked 13.47% of AI bot requests in Q3, up from 5.98%; vendors sell agents the way in" description: "Cloudflare's September 15 default change flipped agent access into a paid privilege, and the Q3 denial numbers already show it. The quiet winner may be the bypass vendors selling agents a way over the wall." publisher: "The Inference" section: "Platforms" published: 2026-10-09T17:30:27.854Z modified: 2026-10-09T17:30:27.854Z canonical: https://theinference.org/article/cloudflare-blocked-13-47-of-ai-bot-requests-in-q3-up-from-5-98-vendors-sell-agents-the-way-in language: en keywords: "Cloudflare, AI Agents, Web, Bots, Developer Tools" --- # Cloudflare blocked 13.47% of AI bot requests in Q3, up from 5.98%; vendors sell agents the way in > Cloudflare's September 15 default change flipped agent access into a paid privilege, and the Q3 denial numbers already show it. The quiet winner may be the bypass vendors selling agents a way over the wall. The wall around the web got taller this quarter, and two companies are on opposite sides of it, collecting rent in different currencies. [Cloudflare](https://theinference.org/markets/companies/cloudflare) flipped the default on September 15: new domains on its network now block AI agents outright, and existing sites were shifted to block agents on any page carrying ads [1]. The timing shows in the traffic data: websites on Cloudflare's network returned access-denied responses to 13.47% of AI bot requests in the third quarter, up from 5.98% a year earlier, [preliminary Radar-derived figures](https://finance.yahoo.com/technology/ai/articles/ai-crawlers-turned-away-more-110000504.html) [2]. Demand is not shrinking to fit. Search and user-triggered requests, the purpose-driven crawl behind agent answers, jumped from 6.51% to 11.92% of AI crawl activity between the second and third quarters [2]. By September, Cloudflare's own data put bots and agents beyond half of all web requests [3]. *Chart: **AI bot denials more than doubled in a year as the default flipped** Two series across three quarters. Access-denied responses to AI bot requests on Cloudflare's network rise from 5.98% in Q3 2025 to 13.47% in Q3 2026. Search and user-triggered requests rise from 6.51% of AI crawl activity in Q2 2026 to 11.92% in Q3 2026.* *Share of AI bot requests denied (Q3 2025 vs Q3 2026) and search/user-triggered share of AI crawl activity (Q2 vs Q3 2026), Cloudflare Radar data analyzed by TechnologyChecker.io, per Zen Media release, 9 Oct 2026. Q3 2026 figures preliminary. [2]* ## Agents get stranded at the checkout The blocks are already costing consumers. [Amazon](https://theinference.org/markets/companies/amazon) now blocks [Meta](https://theinference.org/markets/companies/meta)'s Muse from browsing or buying on its retail site. Walmart, a Muse partner, strands agents on human-verification buttons it says are accidental. Yelp refuses all non-human traffic unless the agent pays into its data-licensing program [1]. Meta's answer is an open agent-to-business standard drafted with Walmart, Stripe, [Sierra](https://theinference.org/markets/companies/sierra), Genesys, Rocket, NiCE and [Decagon](https://theinference.org/markets/companies/decagon), eight named partners working to separate good bots from bad [1]. ## The landlord sells both ways Cloudflare sits in front of roughly a fifth of web traffic [3], and it monetizes the wall from both ends: a marketplace where AI bots pay for the data they access, and a test of a browser built specifically for AI agents [1]. Enforcing scarcity is the pitch when the same company sells the key: the more agents it turns away, the more valuable paid entry through its marketplace becomes. A security feature is becoming a tollbooth whose operator controls the queue. The vendor side is quieter but more pointed. Anakin (YC S21) [published its builder guidance on October 6](https://anakin.io/blog), the same day TechCrunch [documented the block wave](https://techcrunch.com/2026/10/06/the-next-hurdle-for-ai-agents-getting-websites-to-let-them-in/) [4]. Its Wire catalog spans 940+ platforms and 4,500+ actions, with bypass of Cloudflare, Akamai, PerimeterX and DataDome built in, [per its own marketing and untested here](https://anakin.io/) [5]. Pricing runs 1 credit per scrape, a flat 2 per Wire action, $12 to $900 monthly, and [failed jobs are not billed](https://anakin.io/pricing) [6]. That last term is the business model in miniature: as defaults harden, failure becomes the default experience for DIY agents, and unbilled failures push volume toward whoever guarantees the crossing. ## The fork for the money If the eight-party standard formalizes paid access, the toll operators win twice and bypass vendors get squeezed toward licensed partnerships; the draft's breadth (Stripe for payments, Walmart for retail, Sierra for enterprise agents) is the signal it means business [1]. If the standard stalls, the moat deepens. Either way, the free web agents were promised is being repriced, one 403 at a time. ## Takeaway Cloudflare's default block pushed denials of AI bot requests from 5.98% to 13.47% in a year while agent demand grew, and the winners are on both sides of the wall: the toll operator selling paid entry, and bypass vendors like Anakin selling the crossing. ## Sources 1. [TechCrunch, The next hurdle for AI agents: getting websites to let them in, 6 October 2026](https://techcrunch.com/2026/10/06/the-next-hurdle-for-ai-agents-getting-websites-to-let-them-in/) 2. [Yahoo Finance / Zen Media press release, AI Crawlers Turned Away More Than Twice as Often, 9 October 2026](https://finance.yahoo.com/technology/ai/articles/ai-crawlers-turned-away-more-110000504.html) 3. [PPC Land, Cloudflare redesigns Radar, fed by about 20% of web traffic, 9 October 2026](https://ppc.land/cloudflare-redesigns-radar-fed-by-about-20-of-web-traffic/) 4. [Anakin.io blog index, Cloudflare Now Blocks AI Agents by Default: What Builders Need to Know, 6 October 2026](https://anakin.io/blog) 5. [Anakin.io homepage, product and capability claims, fetched 9 October 2026](https://anakin.io/) 6. [Anakin.io pricing page, credit rates and plan range, fetched 9 October 2026](https://anakin.io/pricing) --- Cloudflare blocked 13.47% of AI bot requests in Q3, up from 5.98%; vendors sell agents the way in — The Inference. Canonical: https://theinference.org/article/cloudflare-blocked-13-47-of-ai-bot-requests-in-q3-up-from-5-98-vendors-sell-agents-the-way-in