The agent era

The web is getting
a new kind of user.

For thirty years the web was built for humans clicking. Now software browses, decides, and acts on our behalf. Scroll to meet the new visitor, and the company already standing between it and everything else.

First, the company you keep deploying to

Cloudflare sits in the middle.

Between nearly every visitor and the website they are trying to reach, there is often a layer in between. About one in five websites sits behind Cloudflare, routed through its network in 330+ cities. Flip the switch to see what that means.

Visitor
Cloudflare
Website
Make it fastCDN: content served from a city near you, not one distant server.
Keep it safeAbsorbs attacks and filters malicious traffic before it lands.
Run the codeWorkers: your code runs at the edge, close to users.
The original job

The internet's bouncer.

Cloudflare's first business was telling good traffic from bad. It absorbs denial-of-service floods and filters malicious requests before they reach the sites behind it. Humans in, attackers out.

31.4 Tbps
Largest DDoS attack ever publicly recorded, automatically blocked by Cloudflare in Q4 2025. It lasted 35 seconds. Attacks like it more than doubled over the year.
The flip

Now the fastest-growing visitor isn't a person.

Agentic AI breaks the old model. The new arrivals aren't humans, and they aren't attackers. They're legitimate agents: ChatGPT browsing, Perplexity researching, shopping and coding agents working on someone's behalf. So the hard question changes from "human or bot?" to "good agent or bad one?"

Who is it
A person, clicking
Software, acting for a person
How it behaves
Reads pages, scrolls, pauses
Fetches data, follows links at machine speed
How many
One at a time
Thousands of requests in parallel
Cloudflare's answer

It's building for the agent's whole life.

If agents are the new users, every stage of their life touches the layer in the middle. Cloudflare already ships a product for each one.

01

Prove who you are

Web Bot Auth

A cryptographic signature in the request header lets an agent prove it really is who it claims to be, instead of relying on spoofable user-agent strings.

02

Control access, get paid

Pay Per Crawl + Bot Management

Site owners can allow, block, or charge AI crawlers per request, turning scraping into something they opt into. (Pay Per Crawl is in private beta.)

03

Build the agent

Workers AI, Agents SDK, MCP hosting

Run models on Cloudflare's network, give each agent persistent memory with Durable Objects, and host remote tools agents can call over the internet.

04

Run it safely

AI Gateway

One layer in front of your AI calls adds logging, caching, rate limits, and cost control, so a fleet of agents stays observable and affordable.

The bet

Own the layer everyone passes through.

Put it together and the thesis is simple. If AI agents are the web's new users, then the neutral layer they all pass through is some of the most valuable real estate on the internet. Cloudflare already sits there. It calls the ambition a connectivity cloud: one platform connecting users, apps, networks, and now agents to everything else.

That positioning is a big part of why the market has gotten excited about the company. This page explains the idea, not whether the stock is a buy. Nothing here is investment advice.

You're already here

Every time you ship, you use this.

If you've deployed to Cloudflare Pages or Workers, you've already put your code on the layer the agents are coming to. The new user is arriving. The middle is where the interesting fight happens.