Fastly is the newest member of Experian’s Agent Trust ecosystem, announced Friday, July 24, 2026, and the effect of that pairing is to push identity and authorization checks for AI agents out onto the network edge. The change affects merchants and publishers alike, since it determines which requests survive to reach analytics platforms and log files, not only which ones survive to reach checkout. That distinction is why the announcement belongs in a technical conversation and not only a security one.
Under the arrangement, Fastly’s edge platform assesses four things about an inbound request before it reaches origin infrastructure: agent identity, delegated authority, intent, and payment credentials. Fastly also supports Know Your Agent integrations. One of them, Skyfire, clears both the identity and the payment side of an agent in a matter of milliseconds. Past that gate, operators can apply identity-based access policies, differential pricing by agent identity, rate limiting, and transaction approval, without redesigning existing systems.
Experian’s contribution is Human to Agent Binding, which ties a verified person and the hardware they use to whichever agents are operating for them, backed by an Agent Registry that assigns dynamic trust scores. Those scores update continuously on behavioral signals, so an agent that drifts from its registered human’s pattern can see its score fall before a transaction completes. Agent Trust launched April 30, 2026, with Visa, Cloudflare, and Skyfire as initial partners. Fastly is the newest name added to that roster.
The announcement is thin on what happens next. No pricing, no general availability date, no launch customers, and no technical specification accompanied it. Jeff Alpen, Fastly’s VP of Partner Ecosystem, framed the intent this way: “Instead of treating every autonomous agent as something to block, Fastly enables businesses to verify who is behind the request, attach commercial value, and authorize transactions in real time.”
The release leans on three market figures that deserve more scrutiny than a press release affords. Imperva’s estimate that automated systems make up 53 percent of web traffic sits below Cloudflare Radar’s own count of 57.4 percent of HTML traffic for the week ending June 5, 2026, with training crawlers alone accounting for 50.6 percent. The gap reflects different networks and different definitions of what counts as traffic, not a single settled number. Salesforce’s figure that AI agents influenced $262 billion in 2025 holiday sales measures influence, not completed autonomous purchases, a considerably looser standard.
McKinsey’s cited $1 trillion projection for US agent-driven commerce by 2030 also sits oddly next to the firm’s own November 2025 global estimate of $3 trillion to $5 trillion. A US-only figure that low against a global range that high is not necessarily wrong, but the announcement does not explain the gap, and neither figure is broken out to isolate transacting agents from crawlers.
Adoption data complicates the urgency further. Originality.ai swept more than 3 million public sites in a study dated May 21, 2026, and turned up 26 running the Universal Commerce Protocol. Twenty six. Walmart has reported that Instant Checkout inside ChatGPT converts three times worse than click-out links. Nine months on from the first wave of agent-identity protocols, the plumbing is being laid a good deal faster than anything is flowing through it.
The consequence for search and analytics teams sits in the plumbing, not the marketing language. When identity, delegated authority, and payment credentials get resolved at the edge before a request reaches origin, the traffic that eventually lands in an analytics or retail media system arrives already sorted into categories a browser-session model never had to account for. Verification at the edge is a measurement change wearing a security label, and it will reshape what shows up in log files well before it reshapes checkout.
That plumbing shift lands next to a harder edge on the publisher side: Cloudflare will block Training and Agent crawlers by default on ad-bearing pages for new domains starting September 15, 2026. Search teams should not wait for Fastly’s undisclosed launch date to act. Audit how the current analytics and log-file pipeline categorizes non-browser traffic now, because whichever registry ends up sorting that traffic first will define the baseline numbers before any operator gets a vote.
Per PPC Land’s report by Luis Rijo, published July 26, 2026.
