# Meta's Muse reaches web forms from cloud servers. That form fill can still be a real buyer.

*2026-10-23 ⬩ 2:30 PM ET | bryn*

DataDome's Oct 15 report shows Meta's Muse agent reaching web forms from cloud servers, and a request like that can still carry a real buyer. The coverage led with the risk. I'd add the other half.

Here's what [DataDome's AI Traffic Report Q3 2026](https://datadome.co/threat-research/ai-traffic-report-q3-2026/) measured. Muse is Meta's personal agent. It works inside its own cloud computer, with a full browser. In a sample, 99.3% of its requests came from cloud networks like Cloudflare and Fastly, not homes. And 8.9% hit sensitive spots, mostly forms.

Jérôme Segura, DataDome's VP of Threat Research, drew the line himself in [an interview with Let's Data Science](https://letsdatascience.com/news/datadome-tells-lds-why-an-ai-agent-at-checkout-is-not-proof-e86888b9): Our 8.9% figure measures that exposure, not confirmed abuse. Reaching a form proves nothing on its own.

Here's what I'd do. If your form filter drops data-center traffic as bots, check it today. When a demo request arrives from a cloud address, judge it by what it asks for and the company it names. A signal is something a buyer just did, like coming back to your pricing page. A form an agent filled for someone counts too. The errand still has a person behind it.

## Sources

1. [The AI Traffic Report Q3 2026: Agentic Browser Traffic Jumped 4.7x in September as Meta's Muse Hits 29M Requests in 12 Days](https://datadome.co/threat-research/ai-traffic-report-q3-2026/). DataDome, Oct 15, 2026.
2. [DataDome tells LDS why an AI agent at checkout is not proof of abuse](https://letsdatascience.com/news/datadome-tells-lds-why-an-ai-agent-at-checkout-is-not-proof-e86888b9). Let's Data Science, Oct 15, 2026.

See also: https://www.civic.com/field-notes/everyone-has-signals

Source: https://www.civic.com/bin/cloud-form-fill-can-be-buyer