Platform Vendors Now Dictate Which AI Agents Can Buy from Your Clients’ Sites

The episode highlights a structural shift in web traffic patterns: machine-driven activity, particularly from AI agents, now makes up the majority of website visits and increasingly determines how businesses are discovered and engaged online. Companies such as Cloudflare, Human Security, and SimilarWeb provide data showing automated and AI-initiated web events have surpassed human visits, with a significant acceleration in the role of AI-driven assistants and agents in both discovery and transaction processes. Quantitative evidence from Cloudflare indicates that automated traffic now accounts for nearly 58% of all page loads. Human Security’s report shows an 8,000% increase in AI agent-driven traffic year over year. SimilarWeb data cited by TechCrunch finds Google's AI-generated answers now appear in 43% of searches, up from 15% in the previous year. Additionally, ESW's commercial announcement describes end-to-end automated purchasing workflows using AI agents, moving transaction control further from human users. Supporting developments include technical shifts in how web authentication and authorization are managed, with protocols such as the Model Context Protocol deprecating session-based trust in favor of per-request authorization with attached metadata. Yubico's security key update similarly enables authentication for specific actions rather than broad sessions. Microsoft’s entrance into machine identity and agent security management with its own specialized model, combined with alliances like NVIDIA’s Open Secure AI Alliance, signal organizing at platform scale, raising questions about who ultimately governs admission policies for AI-driven interactions. For MSPs and technology leaders, these changes increase operational dependence on platform and identity providers, reduce direct control over business discoverability and transactability, and pose new risks in reporting, fraud exposure, and client relationship management. Default platform settings may dictate client market access without their knowledge, shifting the role of the provider from technical implementer to advisor and policy manager. To minimize risk, providers must inventory and periodically review clients' current admissions policies for machine traffic, disentangle discoverability from transactional permissions, and proactively track changes imposed by vendors and platforms. 00:00 Most Traffic Isn't Human  03:49 Why the Login Is Breaking 06:36 Microsoft Wants the Doorway 10:07 Why Do We Care?  Supported by:  LogMeIn TimeZest  💼 All Our SponsorsMSP Radio is supported by our partners: ABC Solutions · CometBackup · Guardz · HaloPSA · LogMeIn · Mailprotector · OpenText · Pax8 · Proofpoint · Rythmz · ScalePad · TimeZest · Transit AI · USecureSupporting the IT services community through insights, analysis, and transparency. 🚀 Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more.👉 https://businessof.tech/plus 🎧 Subscribe to the Business of TechWant the show on your favorite podcast app or prefer the written versions of each story?📲 https://www.businessof.tech/subscribe 📰 Story Links & SourcesLooking for the links from today’s stories?Every episode script — with full source links — is posted at:🌐 https://www.businessof.tech 🎙 Want to Be a Guest?Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights:💬 https://www.podmatch.com/hostdetailpreview/businessoftech 🔗 Follow Business of Tech LinkedIn: https://www.linkedin.com/company/28908079YouTube: https://youtube.com/mspradioBluesky: https://bsky.app/profile/businessof.techInstagram: https://www.instagram.com/mspradioTikTok: https://www.tiktok.com/@businessoftechFacebook: https://www.facebook.com/mspradionews Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.