Half of all HTML requests are already non-human

Cloudflare's Stephanie Cohen told SaaStr AI 2026 that 50% of HTML requests are already non-human, tracking toward 66% by year-end. (SaaStr)

By December, two out of three requests to your marketing site will be a machine. Your CSS is being rendered for nobody. Your hero animation is being parsed by an HTML tokenizer that discards it. The site you spent a design sprint on is, in the majority case, a badly-formatted API.

The economics behind it are worse than the ratio. Cloudflare's own crawl-to-referral data: OpenAI's crawler fetched roughly 1,700 pages per referral sent back. Anthropic's ratio ran to 73,000-to-1. That's the deal content publishers are currently in. You pay for the bandwidth, the model gets the content, and the traffic doesn't come back.

Cloudflare abandoned pay-per-crawl on July 1 in favor of paying publishers when their content appears in an answer, which is a smarter place to put the meter. And starting September 15, they'll block mixed-use AI crawlers by default on ad-carrying pages. Mark that date. If you're on Cloudflare and your traffic mix includes AI crawlers you want (your docs being ingested is usually good for you), the default is about to change under you.

Cohen's advice to vendors: serve agents lightweight formats. Markdown is roughly 80% lighter than HTML. And add cryptographic verification for bot-initiated transactions, because "was this request a human" stops being a fraud signal when two-thirds of requests aren't.

I've been slow on this one. My own sites serve HTML to everything and I've treated /llms.txt-style thinking as a nice-to-have. That's wrong. If most of your inbound is machines, the machine-readable representation is the primary artifact and the styled page is the accessibility layer for the minority.

Canva's numbers point the same direction from inside the product: 250M+ monthly users, 27 billion AI capability uses across 1,700+ apps, and MCP connector usage growing 30-40% month over month (SaaStr). Anwar Haneef's warning is the useful part: "Agents use your service in surprising, nonlinear ways." MCP doesn't reduce the importance of a well-designed API. It raises it, because now the consumer is improvising.

Three things to do this week. Ship Markdown alongside HTML for your docs and content routes, cheap and immediately useful. Check your Cloudflare bot rules against the September 15 default. And if agents can transact with you, start on request verification now, because retrofitting that after your first agent-driven chargeback is a much worse week.

The marketing site as a machine-readable API with a failing referral business attached. That's the accurate description now.