Know who’s really shopping — humans, bots, and AI agents, told apart
The agentic web is arriving at your storefront: bots pad your sessions and wreck your conversion rate, while AI assistants quietly send buyers who tend to convert above organic, hidden in “Direct.” And a new kind of visitor is here, agents shopping on a real customer’s behalf. Lume gives you a clean human vs. bot vs. AI-agent split, server-side, verifies which agents are genuinely who they claim, and pulls your AI-referred shoppers out of the dark, so your store metrics reflect actual people and you can see the demand agents are starting to bring.
Sound familiar?
- My conversion rate keeps moving and I can’t tell if it’s shoppers or bots padding the sessions.
- Something browses my catalog like a shopper but never checks out: scraper, price bot, scalper, or a real buyer’s agent?
- I’m seeing a trickle of utm_source=chatgpt sessions I can’t ignore, but most AI traffic just lands in “Direct.”
- One request says it’s Googlebot, another looks like a shopper, and I have no way to know which are genuinely who they claim.
What Lume does for you
A conversion rate you can trust
Bots inflate sessions and wreck your conversion rate, bounce, and AOV. Lume classifies every request against the live catalog (56 cataloged bots, crawlers, and AI agents) and strips the non-human half server-side, so your store metrics run on a clean human denominator. It catches the bots that never run JavaScript and slip straight past client-side analytics.
AI agents are starting to shop for your customers
A user-delegated agent acting on a real person’s behalf is real demand, not junk to filter out. Lume tells those apart from scrapers, price-scrapers, and scalper bots across 17 agent types, and verifies which are genuinely who they claim, so you can see the agentic-commerce traffic arriving instead of lumping it in with noise.
Which AI surfaces send buyers
AI-referred shoppers tend to convert well above organic, and they often hide in “Direct” because the referrer is stripped. Lume recovers them by referrer host and utm_source across 15 assistants (ChatGPT, Perplexity, Claude, Gemini and more), so you can see which surface actually sends real visitors and invest where they buy.
Verify before you trust
A spoofed “Googlebot” or a scraper posing as a shopper looks fine in a log until you check it. Lume gives you per-request verified identity (Web Bot Auth, reverse DNS, and published IP ranges) that your store or WAF can act on. Lume doesn’t block; it feeds the decision, and “verified” proves identity, never that a request is safe.
Fits your storefront
One ingest token and you’re live. Report traffic from your edge, your CDN, or WordPress with zero client JS and zero latency (no checkout change, no app rewrite), so it runs alongside the analytics you already have.
Ecommerce FAQ
Does this block scalper, checkout, or scraper bots?
No. Lume is the identity and analytics layer, not a blocker or an anti-fraud tool. It tells you what each request really is and whether it’s verified, then you feed that verdict into your WAF or store rules to decide what to allow, throttle, or challenge. Lume gives you the truth; the action stays yours.
What’s an AI shopping agent, and should I block it?
An agent acting for a real buyer is real demand, not something to filter out. Blocking it can mean turning away a customer. Lume’s job is to let you see it and verify it (tell a user-delegated agent apart from a price-scraper or scalper bot), so you can treat genuine agentic traffic as the shoppers behind it, not as noise.
Is AI actually sending me shoppers?
Measure it rather than guess. AI apps often strip the referrer, so those visits fall into “Direct” and disappear in Google Analytics. Lume recovers them by referrer host and utm_source and attributes each to the assistant that sent it, so you can see whether AI answers bring buyers, not just clicks.
Will this slow my store or need a checkout change?
Neither. Lume reads the requests your edge or CDN already emits, with zero client JS, zero added latency, and no app or checkout rewrite. Prefer code? A dependency-free TypeScript SDK or a plain REST call. It runs alongside the store you already have.
Is my conversion rate even real?
That’s the point. Client-side analytics miss bots that don’t run JavaScript, so they quietly pad your sessions and drag your conversion rate around. Lume classifies every request server-side (human, bot, or AI agent, with the major operators verified against signatures, reverse DNS, or published IP ranges), so your denominator reflects actual shoppers, and the 7 verified operators are proven rather than assumed.
See the traffic your store is really getting.
Free plan, one ingest token. Strip the bot noise, verify the agents, and measure the shoppers AI sends you.
Start for free →