Cloudflare Says Non-Human Traffic Now Exceeds Human Traffic on Its Network—and Could Be 1,000x Larger Within Five Years
Q2 2026 earnings call, August 6, 2026
Cloudflare's second-quarter results delivered the kind of acceleration that tends to reset the narrative on a stock, but the more consequential disclosure came buried in the Q&A: for the first time in the company's history, more than 50% of traffic flowing across its network is now non-human. CEO Matthew Prince framed this as a structural inflection point for the internet's business model, not just a traffic curiosity, and it is the single most important data point from the call for investors trying to size Cloudflare's long-term opportunity.
The Crossover Nobody Predicted Correctly
Prince was unusually candid about how wrong Cloudflare's own forecasting had been. Asked in November 2025 when non-human traffic would surpass human traffic, the company's data pointed to the second half of 2027. By March 2026, revised modeling moved that to the first half of 2027. Then in May, the crossover had already happened. "So I was quite surprised when in May of this year, our team came to me and said, you won't believe it, but nonhuman traffic has now passed human traffic online," Prince said. Extrapolating current growth rates, he argued that non-human traffic could be as much as 1,000 times human traffic within five years—not because human usage declines, but because agentic and machine-driven traffic is compounding that fast. Whether that specific multiple holds is beside the point; the direction of travel is what matters for a company whose entire business is monetizing and securing traffic at the network edge.
Monetizing the Machines: Monetization Gateway, Wallets, and Cloudflare Pay
Cloudflare used its Agents Week event to unveil what Prince called the foundational building blocks of a two-sided agentic marketplace: Monetization Gateway, which lets customers sell any resource sitting behind Cloudflare, including web pages, APIs, data sets, or MCP tools; Wallets, allowing buyers to pay autonomously through their own agents; and Cloudflare Pay, an identity and trust layer for agent-to-merchant transactions. Prince was explicit about the scale problem this creates. Cloudflare handles roughly 500 million requests per second across its network, and management estimates that 1% to 10% of that volume could eventually be monetized through micro-transactions. That implies day-one support for 10 million financial transactions per second, scaling toward 100 million—compared with Visa's peak holiday capacity of roughly 20,000 transactions per second. "You have to build something that's three orders of magnitude bigger than Visa in order to pull this off," Prince said, adding that Cloudflare tried to find a partner to build this rather than doing it itself, but concluded that most next-generation payments players are focused on competing with Visa rather than solving the internet's business-model problem. This is a large, unproven bet, and investors should treat the revenue contribution as optionality rather than a modeled certainty, but the strategic logic—capturing value from the more than 20% of the internet that already sits behind Cloudflare—is coherent.
Headline Numbers Confirm the Acceleration Thesis
Revenue reached $696.1 million, up 36% year-over-year, ahead of the raised bar management set at its recent Investor Day. Large customers paying more than $100,000 annually rose to 4,698, up 27% year-over-year, with a record 986 net additions over the trailing twelve months—the most in company history—and every cohort from $100,000 to $5 million-plus in annualized revenue set individual net-add records. Dollar-based net retention climbed to 120%, up 6 points year-over-year and 2 points sequentially, reversing a multi-year plateau. Operating margin came in at 13.8%, up 240 basis points sequentially, and free cash flow rose 69% year-over-year to $56.4 million. Guidance for the third quarter calls for revenue of $736 million to $737 million, up 31% year-over-year, with full-year revenue now guided to $2.864 billion to $2.870 billion, up 32%. CFO Thomas Seifert noted the company is tracking ahead of its Investor Day target of GAAP profitability by the end of 2028, stating that excluding restructuring charges, "the GAAP net loss would have been around $18 million"—effectively striking distance from breakeven.
Gross Margin Stabilizes After Eight Quarters of Erosion
Gross margin ticked up 30 basis points sequentially to 73.1%, the first sequential improvement in eight quarters, though it remains down 320 basis points year-over-year as paid traffic growth continues to shift network costs into cost of revenue. Seifert cautioned analysts against overweighting the headline gross margin figure, arguing that total unit economics across the full product suite is the metric that matters given how differently gross margin behaves across products. "We are quite confident that the total unit economics for the across all products is going to increase over the course of this year," he said, while gross margin itself likely stabilizes near current levels rather than reaccelerating sharply.
Developer Growth Goes Vertical
Cloudflare added nearly 2 million developers in the quarter alone, surpassing the 1.5 million added in all of 2025, bringing the platform total past 7.4 million. Prince said the number was large enough that he had the team re-verify it. The growth is being driven partly by non-technical users adopting vibe-coding platforms—Prince cited his own executive assistant writing and deploying code—with tools like Lovable, Replit, Base44, and Wix increasingly routing generated code to Cloudflare's Workers platform by default. This matters commercially: management indicated that Workers has moved from a pure adoption play to a meaningful, monetizing contributor to revenue, increasingly bundled into larger pool-of-funds enterprise contracts alongside Zero Trust and application security products.
Cloudflare OS Goes Open Source
Management also used the call to expand on Cloudflare OS, an internal tool suite that extended AI-driven productivity gains beyond engineering into finance, legal, and procurement functions, which the company open-sourced this week. Prince argued Cloudflare's differentiation is rooted in its security-first architecture, which allowed sensitive internal systems of record to be safely connected to AI tooling with auditability and controls—something he believes most enterprises are struggling to replicate. Systems integrators are already showing interest in commercializing implementation of the open-sourced framework, which management views as a fresh channel opportunity layered on top of existing SASE and Zero Trust partner relationships.
Deliberately Staying Out of the AI Infrastructure Arms Race
Asked directly about competitors signing multi-billion-dollar GPU infrastructure contracts, Prince reiterated that Cloudflare will not chase commodity compute deals. "Not all revenue is created equal," he said, arguing that reselling undifferentiated GPU capacity using Cloudflare's balance sheet and credit rating is structurally unattractive. Instead, the company's strategy is to extract materially higher utilization out of existing infrastructure—Prince claimed Cloudflare can get roughly 10 times the utilization hyperscalers typically achieve from GPU and CPU capacity—framing this as a deliberate rejection of the capital-intensive leasing model that defines first-generation cloud economics. This is a credible differentiation argument, though it also means Cloudflare is choosing to forgo a segment of AI infrastructure revenue that peers are aggressively pursuing, a trade-off investors should watch for opportunity cost over time.
Enterprise Wins Show Consolidation Momentum
The quarter's customer examples reinforced a consistent theme: enterprises consolidating fragmented point solutions onto Cloudflare's platform. A federal agency signed a $7.7 million, five-year Magic Transit and Network Firewall contract after a legacy provider outage locked more than 100,000 users out of a mission-critical system for days; Cloudflare cut the agency's global rule-change time from a one-week SLA to 30 seconds and enabled it to shut down an entire data center. A Fortune 100 technology company signed a $5.2 million SASE contract to replace legacy VPNs, beating two first-generation Zero Trust vendors partly because the customer expects to run the platform with roughly one-third the staff. Prince also described a U.K. government agency that canceled an RFP with an incumbent Zero Trust vendor after realizing that vendor lacked an agent-security strategy, restarting the process with an agents-first requirement—an anecdote management believes will recur across large enterprise and public-sector accounts.