Akamai acquires Fermyon to combine WebAssembly function-as-a-service (FaaS) with Akamai’s globally distributed platform. Read news

AI Pulse: AI Bot Mitigation Is Increasing Everywhere

Tom Emmons

Oct 20, 2025

Tom Emmons

Tom Emmons

Written by

Tom Emmons

Tom Emmons is a data enthusiast who leads a team focused on machine learning and automation at Akamai. His areas of security expertise are in DDoS and application security.

Additional commentary by Emily Lyons

Share

Welcome back to AI Pulse, our series of blog posts that takes a look at the current state of AI bots. If you missed the first post in this series, you can check it out now.

This post’s topic is a timely one: mitigating AI bots.

Mitigation, at its simplest, means putting controls in place to manage how bots interact with your business. Over Q3 2025, we’ve seen a clear rise in AI bot mitigation as more businesses across industries weigh the pros and cons of blocking these bots outright or allowing AI bots to access their content. 

Some bot management vendors have even moved to block AI bots by default in industry segments like publishing. But that decision isn’t without trade-offs.

The right approach depends on visibility

At Akamai, we view blocking as just one part of the mitigation spectrum. The right approach depends on visibility into what those bots are actually doing.

In ecommerce, for instance, some AI bots can drive discovery or sales; in publishing, however, those same bots might reduce site traffic, shift engagement, and cut into revenue. Businesses need clear insight into the value or risk AI bots bring and then apply the right mix of mitigation strategies.

Mitigation is increasing in all geographies and industries

From July to October 2025, we’ve observed the percentage of total Akamai customers that are actively mitigating AI bots increase from 9.2% to 11% (Figure 1). 

Although this increase may not seem substantial, it is quite large when you consider the short time frame. The increase reflects that our customers, regardless of industry or geography, are actively taking steps to manage the AI bot traffic that continues to expand daily.

In addition to the rising percentage of customers that are mitigating, the actual number of AI bot mitigations is up even more. 

Let’s examine AI bot traffic mitigation by: 

  • AI bot type

  • Mitigation action

  • Industry

AI bot traffic mitigation by AI bot type 

Between August and the beginning of October 2025, ChatGPT-User (OpenAI) was the most mitigated AI bot across our customers, followed by ByteSpider (ByteDance), ClaudeBot (Anthropic), and Meta-ExternalAgent (Meta). We saw a significant spike in the amount of AI bot traffic mitigated over the last 60 days, with peaks in late September and into the first week of October, especially. 

AI bot traffic mitigation by mitigation action

As we mentioned earlier, mitigation is more than just blocking. We provide our customers with the ability to implement control of AI bot traffic in a variety of ways, including slow, delay, tarpit, deny, or serve an alternative.

Across all available actions, we’ve observed customers either blocking outright (deny and serve 402 responses) or tarpitting and delaying (serving no response; Figure 3).

AI bot traffic mitigation by industry

Businesses across all industries are increasingly mitigating AI bot activity. Notably, public sector, commerce, video media, high tech, and publishing (which is a segment of the other digital media industry) account for the highest amount of AI bot traffic mitigation. 

We observed a large spike in mitigation across the public sector during the first week of October that seemingly correlates with the spike in OpenAI bot traffic mitigation (Figure 4). 

AI bot traffic: Mitigated vs. unmitigated

Although the amount of AI bot traffic that is not mitigated still accounts for the majority of AI bot traffic, it is notable that the growth of mitigated AI bot activity far outpaces unmitigated AI bot activity (Figure 5).

Not all AI bot traffic is treated equally 

We also see a diversity of mitigation among customers. Figure 6 represents a publishing customer who mitigates AI bot traffic toward some, but not all, of their properties; for example, by blocking AI bots on a page that hosts new and popular content  but not evergreen articles.

In some instances, we also see customers blocking or mitigating specific AI bots or vendors vs. all of them.

The so what

The rise from 9.2% to 11% of customers that are mitigating AI bots from July to mid-October 2025 shows a clear shift toward active management.

But observability should come before taking action — understanding how AI bots interact with your business is key to deciding when and how to control them. Businesses across publishing, commerce, and the public sector are now shaping bot traffic with more precise strategies.

Stay tuned for the next AI Pulse, in which we’ll present another AI bot traffic insight.

Learn more

To learn more about how to mitigate your AI bot traffic with Akamai, check out our Bot & Abuse Protection solutions, or contact an expert directly.

Tom Emmons

Oct 20, 2025

Tom Emmons

Tom Emmons

Written by

Tom Emmons

Tom Emmons is a data enthusiast who leads a team focused on machine learning and automation at Akamai. His areas of security expertise are in DDoS and application security.

Tags

Share

Related Blog Posts

Security
The 8 Most Common Causes of Data Breaches
April 19, 2024
Discover the primary causes of data breaches — and how to protect your organization from these pervasive threats.
Security
AI Pulse: How AI Bots and Agents Will Shape 2026
January 12, 2026
Read our reflections on AI bot traffic across the Akamai network in 2025 and get our predictions for how these trends will shape agentic commerce in 2026.
Security
Protecting Small and Medium-Sized Businesses from Cyberthreats
October 27, 2023
The cyber exposure of small and medium-sized businesses transcends their size. So, Akamai is partnering with Comcast Business to help protect SMBs from threats.