Security research
The 2026 Edge Security Report
Every day, bunny.net acts as one of the internet's primary gateways. In this report, we share in-depth findings from 149 days of attack data and what it means for the security of the modern web.
- 119Points of Presence
- 149Days of Telemetry
- 42.5BRequests Analyzed
- 4.99BRequests Mitigated
Who we are
Who we are
bunny.net is the edge platform behind nearly 2 million websites across 119 PoPs and 250 Tbps+ of backbone capacity. With 50 trillion requests per year, our network stops attacks at scale and gives builders a fast, reliable path to their users.
Main findings from
The 2026 Edge Security Report
Four key findings drawn from 42 billion requests, nearly 5 billion mitigations, and 17 million attacker IPs. Each one reflects a shift worth understanding for anyone building or defending applications in 2026.
01Automated traffic is increasingly API-driven.
02AI crawlers now match search-engine bot volume.
03Injection still leads WAF activity.
04Application-layer DDoS attacks hit record levels.
Download the report
See what 149 days of real-world 2026 internet data reveals about the next generation of security threats.
The 2026 Edge Security Report includes:
- The state of web threats and the new shape of automated traffic
- Application-layer attacks: WAF findings
- Architectural considerations and practical mitigations
- Real-world case studies
Level up your security
Your site deserves to feel secure.
Start for free, upgrade when you're ready.
No credit card required. Complete setup in 2 minutes.
