AI is aggressively cannibalizing open web traffic and accelerating the collapse of open-web monetization faster than anyone predicted, according to an AdMonsters analysis. While the industry chases spend shifting into CTV and in-app inventory, the speed of that pivot is creating severe new regulatory pressure—and a widening security and privacy gap the industry is walking into with its eyes closed.

Legacy Security Tools Are Obsolete

For a decade, ad tech built meticulous verification tools to police the desktop web. They worked. In the new AI reality, those systems are obsolete, the analysis argues.

The core issue goes beyond AI creating efficiency and pushing media budgets toward less-transparent inventory. In fragmented, opaque in-app and CTV ecosystems, the bedrock assumption of safety no longer holds. Traffic sourcing, inventory quality and ad behavior cannot be verified using legacy systems.

Programmatic buying—turbo-charged by AI's breakneck efficiency—has completely outpaced existing security infrastructure. The result is fraud and risk threats larger and harder to detect than anything encountered on the open web. If the industry does not immediately resolve this security disparity, the efficiency AI provides will quickly become its single greatest liability.

In-App Is the New Regulatory Frontier

Regulators follow the money, and right now the money is sprinting to in-app. While ad tech fixated on cookie deprecation timelines, regulators were circling in-app, viewing it as the next major vulnerability for consumer data and security.

The environment explains why. In-app experiences aggressively collect mobile-specific data—device IDs, location information—often with significantly less user transparency than even a basic website pop-up. That opacity, coupled with existing security blind spots, creates conditions primed for legislative action.

The analysis makes a specific prediction: by mid-2026, the industry will face dedicated, forceful mandates for in-app ad security and data protection—a shift comparable to GDPR's disruptive impact, but focused on mobile. Most platforms will be caught unprepared. The industry can no longer afford a web-centric view of regulation and must proactively establish security and data standards for in-app before an expensive regulatory fiat is forced upon it.

Compliance Must Be Always-On

AI optimization has increased campaign velocity so much that the margin for human error is essentially zero. With media buying executed in milliseconds and algorithms constantly fine-tuning campaigns, a quarterly—or even monthly—privacy compliance audit model is dead. A single compliance slip-up can be instantly magnified across thousands of transactions.

The required shift: from a reactive, periodic model to continuous, automated monitoring. Privacy compliance must become an always-on layer integrated directly into the ad delivery process. That means using AI and machine learning not just to buy media, but to continuously verify that campaigns adhere to all relevant privacy and security mandates as they execute.

This is a massive operational challenge—and a commercial opening. Platforms that bake automated, real-time compliance into their core will de-risk their media spend and gain a competitive advantage by demonstrating to consumers and regulators that trust is built in.

Proactive Defense Over Reaction

The fundamentals of advertising are changing. The industry needs to look past the distraction of cookie deprecation and concentrate on securing the complex security and privacy environment within in-app and CTV advertising.

The magnitude of the challenge is vast, but it presents a clear opportunity for industry leadership to shape an advertising ecosystem that is more secure, compliant and enduring. The moment for action, the analysis concludes, is now.

Source: AdMonsters (https://www.admonsters.com/the-webs-traffic-is-collapsing-why-the-security-blind-spot-in-ctv-and-in-app-is-ad-techs-true-crisis/)