Do bots actually slow down my store?
Why expensive pages get hit first
Scrapers need the pages that carry the data: product detail, pricing, inventory status, and search results. Those are exactly the pages that bypass cache, run database lookups, and call third-party services like tax and inventory APIs. A botnet requesting 5,000 product pages per minute costs far more than the same volume of homepage views.
The checkout collision
Carding and inventory-checking bots add items to carts and open checkout sessions at machine speed. Each attempt reserves inventory, starts payment sessions, and writes cart state. Under a sustained wave, real shoppers see out-of-stock errors and slow payment steps that have nothing to do with how many humans are shopping.
What to measure
Track origin CPU and database time per request class, not just request counts. When the ratio of automated to human requests rises, cost per human session is the number that tells you how much bot traffic is actually costing you.