August 4, 2026 · Eric Kammerzelt
The Bot Problem Isn't a Traffic Problem
More than half the web is now automated. Publishers are responding by blocking harder and reporting less. Both are the wrong move. The real fix is changing what you count.
Let's start with the objection, because I know it's coming.
"Isn't a traffic problem? Of course it's a traffic problem. My numbers are down. My search referrals are shrinking. AI answers are eating my clicks. I am losing audience."
Some of that is true. Search behavior is genuinely shifting. Referral streams that took a decade to build are thinner than they were two years ago. I'm not going to tell you the pain isn't real.
But look closely at what you're actually losing, and what you're not. Because the two get lumped together in every traffic report, and the lumping is the problem.
The Honesty Dilemma
Here is the quiet part nobody in publishing says out loud.
According to Imperva's latest Bad Bot Report, automated traffic now accounts for 53% of all web traffic, up from 51% the year before. Human activity is at 47% and still declining. For the first time in the history of the commercial internet, the majority of "visitors" are not people.
Every publisher knows some version of this. And every publisher faces the same uncomfortable math: if you filter honestly, your numbers go down. The first publisher to report truly clean traffic looks like they're shrinking while their competitors keep reporting the inflated version. So the whole industry has a structural disincentive to be the first one honest.
That's not a technology problem. That's a currency problem. And you can't fix a currency problem with a firewall.
The Metric Was Always a Proxy
Impressions and clicks were never the thing advertisers wanted. They were a proxy for the thing advertisers wanted: human attention from people who might buy something.
For twenty years the arrangement held. A pageview usually meant a person, so everyone counted pageviews and called it audience. Bots didn't corrupt that math. They exposed that it was never math at all, just a correlation that held until it didn't.
Once you see it that way, the industry's two default responses both stop making sense.
The first response is to keep reporting the inflated number and hope nobody asks. That's a slow-motion credibility loss. Advertisers are getting more sophisticated about traffic quality every quarter, and the publisher caught defending contaminated numbers loses more than a campaign.
The second response is to block harder. Deploy aggressive bot mitigation, challenge everything suspicious, and drive the number down until it's "clean." This feels responsible. It's also wrong, for two reasons that we see play out with real publishers every month.
Blocking Fails in Both Directions
First, blocking catches traffic you want.
Email security scanners are the clearest example. Services like Outlook SafeLinks, Barracuda, and Proofpoint pre-click every link in a newsletter, including the footer links, to verify destinations are safe before a subscriber ever opens the message. That traffic looks robotic because it is robotic. But blocking it works against you: if a scanner can't verify a link, the email is more likely to be quarantined or flagged for the actual recipient. High scanner volume on a newsletter deployment is, in a real sense, evidence of good inbox placement. The "bot problem" here is a byproduct of your email successfully reaching corporate inboxes.
Second, and more important: the line between bot and human is dissolving, and the most valuable traffic is dissolving it fastest.
We recently identified an AI agent crawling one of our publishers' sites. It wasn't scraping indiscriminately. It was systematically working through specific topic categories. When we traced it, the agent belonged to one of that publisher's own advertisers. A real professional at the advertiser had dispatched it to research content in their category. The content was being consumed by a real person. Just differently, through an agent acting on their behalf.
Under the old measurement logic, that's invalid traffic. Block it, and your numbers get cleaner. They also get smaller, and you've just severed a connection with the exact reader your publication exists to reach: a buyer-side professional doing purchase-adjacent research in your vertical.
Imperva's own framing of this year's report concedes the point. AI agents now act on behalf of users through the same interfaces humans use, which makes traditional bot detection insufficient. The binary of human versus bot, real versus fake, is the foundation the entire traffic economy was built on. It no longer holds. Blocking is an attempt to repair a proxy that can't be repaired.
The Question Doesn't Get Solved. It Gets Dissolved.
So what's the answer, if it isn't reporting the inflated number and it isn't blocking your way to a clean one?
Change the unit of value.
A bot can generate an impression. It can inflate a click count. What it cannot do is validate a work email, complete a professional profile, and come back to read three more times over the next month. When the thing you count is a verified professional identity rather than a pageview, the bot question doesn't get solved. It gets dissolved. It simply stops being the relevant question.
This is not a workaround. Known audience isn't a cleaner proxy for the thing advertisers want. It is the thing advertisers want, measured directly. The publisher who says "20,000 verified, profiled, engaged professionals in your buying category" is making a fundamentally stronger claim than the publisher who says "500,000 impressions" of unknown provenance. And increasingly, advertisers know the difference.
It also resolves the honesty dilemma. The publisher reporting known-audience engagement has nothing to fear from bot statistics, from AI agents, or from the next measurement scandal. Their number was never built on anonymous traffic in the first place. What looks like unilateral disarmament in the impression economy is actually a move to a currency that can't be debased.
You Don't Have to Convert Everyone at Once
The practical objection is fair: the industry still transacts in CPM, and no single publisher can change the currency by declaration.
You don't have to. You report both. Impressions for continuity, because that's what the insertion order says. Known-audience engagement alongside it, because that's the real story. Then you let the second number do the persuading, one advertiser conversation at a time. In our experience, once an advertiser has seen a report that tells them who engaged rather than how many somethings loaded a page, the impression column starts to feel like what it is: a legacy metric from an internet that no longer exists.
The traffic decline is real. But it's a decline denominated in a broken currency, and it's concentrated in the portion of your audience that was never identifiable, never loyal, and never sellable as anything more than a number. The audience you actually own, the readers who know your brand and come back for it, is a different asset entirely.
Stop defending the number that bots can fake and blockers can shrink. Start reporting the one that only humans can create.
Eric Kammerzelt is the founder and CEO of Parameter1. He has spent 20+ years working with B2B publishers and built Mindful as the publishing intelligence platform for the industry. Learn more about how Mindful turns anonymous traffic into known audience at mindful.pub.
Want to see Mindful in action?
Schedule a demo