Reported Access ControlsPlatform & EcosystemStandards & ProtocolsMeasurement & Economics DataDome Blog ·

DataDome Highlights Shift to AI Agent Bot Management and Cryptographic Verification

Open source ↗

Summary

DataDome highlighted its inclusion in the 2026 Gartner Hype Cycle for Application Security under the newly introduced AI Agent Bot Management category, signaling a market transition from binary bot blocking to agent intent governance. According to DataDome telemetry, 79.7% of nearly 700,000 tested websites allowed spoofed ChatGPT-style agent requests through without challenge, and 80% of agents lacked strong identity signals. The vendor emphasized the adoption of Model Context Protocol (MCP) server defenses and the IETF Web Bot Auth standard for cryptographic verification of agent traffic.

Insight

Traditional bot detection relied on distinguishing humans from automated scripts using IP ranges and user-agent strings, but agentic web architectures obscure that boundary because benign assistants, scrapers, and credential-stuffing bots share the same cloud AI infrastructure. As a result, access governance is shifting toward granular endpoint policy enforcement and cryptographic identity binding to assess intent rather than relying on binary perimeter blocking.

Implication

Digital commerce platforms and web administrators will need to adopt deterministic authentication frameworks like Web Bot Auth to avoid either blocking legitimate purchasing agents or leaving endpoints exposed to spoofed agentic scrapers.

Why it matters

Blanket crawler blocking directly threatens participation in agentic discovery and commerce recommendations, forcing operators to replace basic WAF rules with fine-grained agent evaluation and protocol-level verification.

Evidence