89% of developers use AI.

13% of developers design APIs equally for humans and AI agents.

7% of developers primarily design APIs for AI agents/machine consumption.

14% of organizations that generate API revenue derive between 51% to 75% of their total revenue from APIs.

35% of teams adopt WebSockets as an API pattern.

50% of teams adopt Webhooks as an API pattern.

33% of teams adopt GraphQL as an API pattern.

69% of organizations use one API gateway.

9% of organizations were unsure about their API security budget increase.

Nearly a quarter (25%) of organizations that generate API revenue derive more than half their total revenue from API programs.

2% of respondents identified 'Other' as their biggest concern about their company’s overall API program.

15% of organizations were not very confident in their ability to detect and respond to attacks leveraging Generative AI.

80% of security leaders lack continuous, real-time API monitoring.

96% of attack attempts originate from authenticated entities (compromised users, insiders, or rogue agents).

98% of attack attempts target external-facing APIs.

78% of dominant attack vectors map to OWASP API8 Security Misconfiguration.

10% of dominant attack vectors map to OWASP API1 Broken Object Level Authorization (BOLA).

28% of organizations identify partner enablement as a main driver behind the use of APIs.

48% of organizations identify platform or system integrations as a main driver behind the use of APIs.

25% of organizations identify monetization of functionality or data as a main driver behind the use of APIs.