Person
Security researcher working on web-based threats and malware, and vice president of threat research at bot protection company DataDome.
DataDome says 8.9% of requests in its Meta Muse sample reached form, login, payment, account-creation or cart endpoints. Researcher Jérôme Segura told Let's Data Science it counts exposure, so blocking rules built on request counts alone act on incomplete evidence.
Reality
DataDome measured malicious bot activity up 124% in the year to June 2026 against 13.2% growth for humans, and its own detection test found most popular sites challenged none of ten simulated bots.
Reality
Automated traffic is now aimed at the screens where customers sign in and pay, and DataDome's year of request data shows how concentrated that pressure has become. Filtering it means deciding which humans get let in too.
Reality
The 51.7 percent in DataDome's 2026 bot report is login's share of five sensitive endpoint types, and Jerome Segura told Lets Data Science the same 313 million requests work out to about 1.08 percent of the 29.02 billion requests the company could classify by path.
Reality
DataDome says malicious automated traffic grew 124% in the year to June. Its June test of 21,491 popular sites found that claiming a trusted crawler's name is usually enough to get through the door.
Reality