7% of developers primarily design APIs for AI agents/machine consumption.

Scammer/solicitation was the top type of digital fraud, representing 1.84% of all suspected digital fraud types reported globally in H1 2025.

14% of organizations that generate API revenue derive between 51% to 75% of their total revenue from APIs.

35% of teams adopt WebSockets as an API pattern.

Scammer/solicitation fraud grew the most since H1 2021, increasing by 184%.

50% of teams adopt Webhooks as an API pattern.

69% of organizations use one API gateway.

9% of organizations were unsure about their API security budget increase.

26% of Canadian business leaders attributed fraud losses to synthetic identity fraud, an increase of eight percentage points year over year.

15% of organizations were not very confident in their ability to detect and respond to attacks leveraging Generative AI.

More than half (51%) of UK finance leaders are preparing a significant uplift in cyber investment next year.

72% of healthcare organizations say their organizations have experienced cloud/account compromises, which is an increase from 69% in 2024.

71% of consumers preferred or would consider getting security protection from their Communication Service Provider (CSP) app, as opposed to the app of other types of companies.

61% of consumers would purchase security and privacy services from their ISP.

About 64% of US SMB leaders agree that without an active IT team, system updates are more likely to slip through the cracks

80% of security leaders lack continuous, real-time API monitoring.

96% of attack attempts originate from authenticated entities (compromised users, insiders, or rogue agents).

98% of attack attempts target external-facing APIs.

78% of dominant attack vectors map to OWASP API8 Security Misconfiguration.

28% of organizations identify partner enablement as a main driver behind the use of APIs.