AI and cheaper tooling are lowering bot operation barriers in Q2 2026

At a glance

What this is: Kasada's Q2 2026 threat report says adversaries are not changing in kind, but AI and market economics are making bot operations cheaper, faster, and easier to scale.

Why it matters: For IAM, fraud, and AI security teams, the report underscores that account abuse now depends as much on economic access to tooling, proxies, and stolen credentials as on technical sophistication.

By the numbers:

• A newcomer can become fully operational in the bot ecosystem for $400 to $500, according to Kasada.
• Roughly 94% of the operators KasadaIQ can classify rent their capability rather than build it, according to Kasada.
• Clean residential proxies now sell from $0.30 per gigabyte, according to Kasada.

Context

Bot operations now sit at the intersection of identity abuse, automation, and market economics. When adversaries can rent capability, buy fresh infrastructure, and reuse stolen or fabricated accounts, the security problem shifts from stopping a single actor to disrupting an ecosystem.

This report is most relevant to IAM, fraud, and NHI practitioners because the abused assets are not only human accounts but also API credits, proxies, and AI accounts that function like transactional identities. The report's core claim is that AI is accelerating execution without changing the underlying criminal model.

Key questions

Q: What breaks when bot operators can rent capability instead of building it?

A: When capability is rented, the defender loses the advantage of attacking technical skill gaps. The real control failure shifts to ecosystem enablement, because proxies, automation stacks, and stolen accounts can be reused across many attack types. Teams need to focus on the infrastructure and account flows that make abuse cheap, fast, and repeatable.

Q: Why do residential proxies make fraud detection harder?

A: Residential proxies make fraud detection harder because they borrow the appearance of real customer connections. That weakens IP reputation, geolocation, and simple rate-limit logic, especially when attackers distribute activity across many accounts. Teams need stronger runtime evidence to separate legitimate users from coordinated abuse.

Q: How should security teams govern AI accounts that have resale value?

A: Treat AI accounts as governed identities with lifecycle controls, usage analytics, and abuse monitoring. If an account can be bought, sold, or shared, it needs entitlement review, session visibility, and revocation paths just like privileged access. The risk is not only fraud, but uncontrolled access to metered capability and data.

Q: When should organisations prioritise identity-linked signals over IP reputation?

A: Organisations should prioritise identity-linked signals whenever attackers can cheaply rotate network origin, proxies, or automation infrastructure. In those conditions, IP reputation becomes a supplementary indicator, not a primary decision point. Behaviour, session integrity, and identity confidence give defenders a harder signal to fake and a better basis for response.

Technical breakdown

Why rental capability changes the bot threat model

Modern bot ecosystems are increasingly service-based. Operators do not need to build their own tooling, proxies, or automation stack if they can rent access to an existing criminal supply chain. That lowers the technical skill threshold and shifts the defender's problem toward ecosystem disruption, not just host-based detection. The report's economics show that the market rewards speed, reuse, and commoditisation. Once capability is rented, the same tooling can be repurposed across credential stuffing, account takeover, scraping, and fraud workflows with little friction. Practical implication: measure and interrupt the external services that make scale possible, not just the bots you can see on a single endpoint.

Practical implication: target the rented infrastructure, not only the visible bot instances.

How AI accounts become reusable abuse surfaces

The report's AI account data shows that legitimate AI services are now part of the abuse market. Accounts are bought, sold, and valued by access duration and feature set, which means the account itself becomes an asset with resale value. That creates an identity problem, not simply an abuse problem. Once an account can be monetised, attackers test whether the organisation can distinguish real customer activity from credential reuse, session abuse, or automated consumption. Practical implication: treat AI accounts as governed identities with lifecycle, usage, and abuse analytics, not as ordinary application logins.

Practical implication: govern AI accounts like identities with lifecycle and abuse controls.

Why residential proxies weaken traditional IP trust assumptions

Residential proxies reduce the value of IP reputation as a detection signal because malicious traffic can arrive from addresses that look ordinary. That does not mean IP intelligence becomes useless, but it does mean trust decisions based mainly on network origin are increasingly brittle. When proxy costs fall, the attacker can rotate surface area faster than defenders can blacklist it, and automated abuse blends into legitimate consumer traffic. Practical implication: anchor risk decisions in behavioural and identity-linked signals, then layer network reputation only as one input among several.

Practical implication: move from IP-centric blocking to behaviour and identity-linked detection.

Threat narrative

Attacker objective: The attacker aims to monetise account access and automation at scale while keeping operations cheap enough to outpace defensive friction.

1. Entry occurs through rented bot capability, cheap proxy infrastructure, or purchased AI accounts rather than bespoke attacker-built tooling.
2. Credential abuse and automated login workflows then turn ordinary accounts into scalable fraud and resale assets.
3. Impact is measured in sustained account abuse, higher-value marketplace inventory, and harder-to-distinguish malicious traffic across consumer services.

Breaches seen in the wild

• Hugging Face Spaces breach 2024: Unauthorised access to Hugging Face Spaces may have exposed secrets users stored for AI apps; tokens were revoked and org tokens removed.

Read and download The State of NHI & AI Agent Breach Report 2026, covering 200+ breaches impacting Non-Human Identities including AI Agents.

NHI Mgmt Group analysis

Bot operations now behave like a supply chain, not a single threat. The quarter's strongest signal is that adversaries are buying capability as a service, which reduces the importance of individual technical skill and increases the importance of access to infrastructure, accounts, and automation. That means the governance problem is no longer only detection at the edge but disruption of the commercial model that supports abuse. Practitioners should treat criminal capability marketplaces as part of the threat surface.

AI does not replace fraud logic, it compresses execution time. The report supports a familiar pattern: motivation and rationalisation remain stable while tooling gets faster and cheaper. That matters because many governance models still assume a meaningful gap between intent and action. When that gap shrinks, control design has to focus on containment, friction, and rapid invalidation of abusive sessions, not just on post-event review.

Identity is now the commercial unit of abuse. The report's AI account sales and criminal account inventory show that identities themselves are being priced, traded, and optimised for resale value. This is a direct intersection between fraud, IAM, and NHI governance because credentials, sessions, API credits, and machine-facing accounts are all now monetised in the same ecosystem. Practitioners should expand identity controls to cover the assets attackers are actually trading.

Proxy economics have become a governance problem. When residential proxies cost only cents per gigabyte, IP-based trust loses much of its deterrent value. That forces a shift toward behavioural analytics, account-level risk scoring, and device or workload signals that cannot be cheaply rented. The practitioner conclusion is clear: if the trust signal can be bought on a market, it is no longer a strong control boundary.

From our research library:

• Organisations that describe themselves as confident in their AI deployment actually experience a 72% security incident rate, compared to 33% for those who remain cautious, according to the 2026 Infrastructure Identity Survey.
• Only 13% of organisations feel extremely prepared for the reality of agentic AI despite the majority racing toward autonomous adoption, according to the 2026 Infrastructure Identity Survey.
• Read next: Guide to the Secret Sprawl Challenge

What this signals

Bot economics are now part of identity governance. When adversaries can rent capability and buy infrastructure cheaply, the control gap moves upstream to the identities and sessions being traded. IAM and fraud teams need to watch for the same pattern across customer accounts, AI accounts, and service access paths.

Identity-linked telemetry matters more when trust signals are rentable. Proxy markets erode the usefulness of network origin, so practitioners should elevate behavioural and entitlement signals that are harder to commoditise. That is especially true where human accounts and machine-facing accounts share the same authentication surface.

AI adoption is now a fraud multiplier as much as an innovation story. Organisations that describe themselves as confident in their AI deployment actually experience a 72% security incident rate, compared to 33% for those who remain cautious, according to the 2026 Infrastructure Identity Survey. That gap suggests governance maturity, not enthusiasm, is becoming the differentiator.

For practitioners

• Harden account economics against resale value Flag accounts with unusually rich profile data, broad feature access, or long-lived session tokens because those traits increase criminal resale value. Prioritise the identities most likely to be monetised in bot markets, including consumer accounts, AI accounts, and service-facing access paths.
• Reduce trust in network origin Lower the weight of IP reputation in fraud decisions and combine it with device history, session behaviour, and identity confidence. Residential proxies make origin-based blocking too easy to evade.
• Instrument AI account usage like privileged access Track issuance, duration, feature use, and anomaly patterns for AI accounts so resale or sharing behaviour becomes visible. Treat unusual consumption as an identity and governance issue, not only as cost leakage.
• Disrupt the rented bot supply chain Prioritise detection and takedown of proxy services, automation hosting, and brokered access paths that make the bot market cheap to enter. The point is to raise operational cost before scale appears in your environment.

Key takeaways

• Bot operators are scaling through rented capability, cheap proxies, and purchased accounts rather than through deep technical innovation.
• The report shows that identity assets, including AI accounts and customer sessions, now carry real resale value in criminal markets.
• Defenders need to shift from IP-centric blocking toward identity-linked telemetry, account governance, and supply-chain disruption.

Key terms

• Bot Operation Economy: The market structure that lets adversaries rent, buy, or reuse automation instead of building it themselves. In practice, the economy matters as much as the toolset because lower costs and broader access increase scale, speed, and resilience for fraud and account abuse.
• Identity Resale Value: The commercial value an account, session, or access token has to an attacker once it can be sold or reused. Value increases when the identity grants durable access, rich features, or privileged actions, turning account governance into a fraud-control issue as well as an IAM concern.
• Residential Proxy: A residential proxy routes traffic through an address assigned to a real consumer device or household connection. That makes the traffic look more legitimate than datacentre-based proxies, which is why abuse actors use it to bypass reputation checks and blend into normal user traffic.
• Valid Account Abuse: Valid account abuse occurs when attackers use legitimate credentials or tokens to enter systems and blend in with normal traffic. It is a preferred tactic because it sidesteps many exploit-based controls and inherits existing privilege. In NHI programmes, service accounts and API keys are common abuse paths when scope and rotation are weak.

Deepen your knowledge

The NHI Foundation Level course, the industry's only accredited NHI security programme, covers NHI governance, workload identity, and secrets management. It gives practitioners a common control vocabulary for account, token, and access-risk decisions across modern environments.