2% of organizations adhere to other specific security standards or frameworks for API development and deployment.

Only 19% of organizations were 'very confident' in the accuracy of their API inventories.

20% of organizations use two different gateways.

Only 26% of developers, architects, and executives use semantic versioning.

11% of organizations said their API security budget did not increase.

61% of healthcare organizations that had ransomware attacks experienced an average of five such attacks in the past two years.

4% of organizations do not know what specific security standards or frameworks they adhere to for API development and deployment.

57% of organizations train developers on secure coding practices for AI-generated code.

18% of organizations said lower enterprise risk score is a metric for measuring API security ROI

28% of organizations manage between 1 and 100 APIs.

14% of organizations reported their API programs are out of control or hard to manage.

11% of respondents pointed to competing priorities as the primary barrier to implementing a strong API security program.

11% of organizations that generate API revenue derive more than 75% of their total revenue from APIs.

Ransom payment rates by healthcare organizations declined in 2025 (from 36% to 33% in 2025).

10% of organizations were not confident at all in their ability to detect and respond to attacks leveraging Generative AI.

70% of developers are aware of the Model Context Protocol (MCP).

24% of developers actively design APIs with AI agents in mind.

Calls made to AI APIs have increased by 40% year-over-year according to Postman.

The Communities (online dating, forums, etc.) industry's suspected fraud attempt rate globally was 8.3% in H1 2025.

India's suspected digital fraud rate was 8.4% in H1 2025, exceeding the global rate.