DataDome and Industry Analysts Frame Agent Trust Management as a Layer Distinct from Bundled CDN WAAPs

Open source ↗

Summary

DataDome published analysis detailing how the market for automated traffic defense is diverging between bundled CDN/WAAP platforms and specialist agent trust management providers. Citing analyst research from Gartner and Forrester’s Q2 2026 Wave—which separated standalone bot and agent trust vendors from CDN providers—DataDome reported that AI agent and LLM crawler requests grew 82% from July 2025 to June 2026 to reach 52.7 billion requests. The vendor advocates a layered security architecture where basic CDN protections are paired with specialized behavioral and intent analysis for high-risk endpoints.

Insight

The market definition for web access management is formalizing a split between blunt edge-layer blocking and continuous agent trust verification. Rather than binary human-versus-bot classification, modern machine access requires distinguishing authorized AI agents and search/discovery crawlers from malicious scrapers and automated credential attacks targeting login and transaction endpoints.

Implication

Enterprises running commercial and content platforms will increasingly adopt multi-tiered bot architectures, applying specialized intent-verification policies at sensitive endpoints like checkout, login, and inventory rather than relying entirely on CDN-level rate limiting.

Why it matters

As autonomous AI agents and LLM crawlers account for tens of billions of requests, broad IP and user-agent blocking risks disrupting genuine discovery and agentic commerce, making intent-based differentiation critical for operational control.

Evidence