Skip to main content
VendorsFastly

Fastly

Cybersecurity reports and statistics published by Fastly

8 categories9 reports

Recent Statistics & Reports

57% of AI fetcher requests target non-cached content.

5/27/2026
AIAI Fetcher RequestsNon-Cached Content

99% of bot traffic is unwanted or unverifiable.

5/27/2026
BotsBot Traffic

Only 1% of bots are verified or wanted.

5/27/2026
Bot TrafficBots

In January 2026, bots accounted for 49% of all requests, nearly matching human traffic at 51%.

5/27/2026
BotsBot Traffic

47% of requests to cached content come from bots.

5/27/2026
Bot TrafficCachingBots

60% of all origin traffic is from bots.

5/27/2026
Origin TrafficBotsBot Traffic

43% of organizations have seen infrastructure expenses increase as a direct result of AI activity.

5/27/2026
Infrastructure CostsAI ActivityOperational Impact

56% of organizations invest in agentic discoverability, 55% invest in API security, and 54% invest in web application firewalls.

5/27/2026
API SecurityWeb Application FirewallAgentic Discoverability

34% of AI-first organizations say AI use led to a security oversight or blind spot that contributed to their last security incident, compared to 20% for non-AI-first organizations.

5/27/2026
Security OversightAI SecurityVisibility

AI-first businesses take nearly seven months on average to fully recover from cybersecurity incidents, which is 80 days longer than non-AI-first businesses.

5/27/2026
Incident RecoveryAI SecurityAI-First Business

53% of organizations acknowledge they have an increased need for AI-specific security expertise to effectively defend their systems.

5/27/2026
AI SecurityWorkforce SkillsAI Cybersecurity Expertise

75% of organizations are concerned about Distributed Denial-of-Service (DDoS) attacks targeting AI agents.

5/27/2026
DDoSAI SecurityAgentic AI

The financial cost of a cybersecurity incident for AI-first businesses exceeds the cost for non-AI-first businesses by more than 135%.

5/27/2026
Cybersecurity CostsAI SecurityFinancial Impact

44% of AI-first organizations report that AI was directly exploited in their most recent security incident, compared to 6% of non-AI-first organizations.

5/27/2026
AI CompromiseIncident ExploitationAI-First Business

64% of organizations report that AI scraping has become a material cost center, with average annual infrastructure impacts exceeding $348,000.

5/27/2026
AI ScrapingInfrastructure CostsOperational Costs

40% of organizations have faced operational disruption as a result of AI activity.

5/27/2026
Operational DisruptionAI Activity

4% of wanted bot requests were blocked, reflecting concerns about data usage and revenue impact.

1/1/2026
BotsWeb Traffic

Bots account for 29% of all web traffic, with approximately 25% of this traffic classified as unwanted.

1/1/2026
Web TrafficBots

89% of headless bot traffic (which mimic human behavior at machine speed) in Q3 targeted transaction-heavy industries like Financial Services and Commerce.

1/1/2026
BotsHeadless BotsFinancial Services

Organizations classified as 'Exceptional' in AppSec maturity are 3.6 times more likely to report a 20% or greater improvement in application availability compared to the average.

1/1/2026
AppSec MaturityApplication SecurityBusiness Outcomes

Showing 1-20 of 63 results