42% of organizations reported managing 101–500 APIs.

11% of organizations adhere to NIS2 for API development and deployment.

43% of CSP executives agree that embedding cybersecurity features into the main CSP app would help drive greater engagement with the cybersecurity features.

The average number of cyberattacks experienced by U.S. healthcare organizations that suffered at least one cyberattack was 43, which is a 3-point increase from 40 in 2024.

25% of organizations said they were 'not very' or 'not at all confident' in the accuracy of their API inventories.

36% of organizations say GenAI is somewhat concerning for API security.

4% of organizations do not perform or have no formal assessment of their API security measures.

18% of organizations perform security audits to assess the effectiveness of their API security measures.

42% of organizations conduct code reviews and security testing.

12% of respondents identified that their company's API program doesn’t invest enough in pre-production security.

13% of organizations experienced explosive API growth of 101–200%.

Synthetic identity fraud was reported as the greatest source of fraud loss by another 20% of business leaders.

35% of organizations adhere to the OWASP API Security Top 10 for API development and deployment.

57% of CSP executives agree that embedding cybersecurity features into the main CSP app would help drive engagement of the overall app.

43% of organizations are using specialized AI security tools.

18% of organizations said increased developer productivity is a metric for measuring API security ROI.

Manufacturing remains ransomware's number one target. It has held the number one position for the fourth year in a row.

Only 7% of organizations reported increases in their API security budgets greater than 21%.

41% of organizations use vulnerability scanning to assess the effectiveness of their API security measures.

Among companies with less than $20 million, manufacturing is the second targeted industry at 17%.