Arkose: Muse sessions grew 30x in Sept; agents ID themselves <3% of time
Agents are shifting from reading the web to logging in and checking out on people's behalf. Controls haven't caught up: fewer than 3% identify themselves.
In this brief: 2 sections 1 min read
Meta's Muse, a consumer personal agent, grew sessions more than 30x in September; other agents were roughly flat.
Over 65% of customer sites in banking, gaming, tech, and travel saw agents log in, sign up, and check out.
Data covers production traffic from July 1 to September 30, 2026.
Companies can't easily tell legitimate, revenue-driving agents from malicious ones.
Arkose argues intent, not appearance, defines risk: 96.8% of Instinct sessions looked risky but none were attacks.
A banking CISO called it the first technology to arrive ahead of the controls.