5% of organizations did not know about their ability to detect and respond to attacks leveraging Generative AI.

60% of developers, architects, and executives version their APIs.

89% of developers use AI.

13% of developers design APIs equally for humans and AI agents.

7% of developers primarily design APIs for AI agents/machine consumption.

14% of organizations that generate API revenue derive between 51% to 75% of their total revenue from APIs.

50% of teams adopt Webhooks as an API pattern.

35% of teams adopt WebSockets as an API pattern.

69% of organizations use one API gateway.

9% of organizations were unsure about their API security budget increase.

15% of organizations were not very confident in their ability to detect and respond to attacks leveraging Generative AI.

80% of security leaders lack continuous, real-time API monitoring.

96% of attack attempts originate from authenticated entities (compromised users, insiders, or rogue agents).

98% of attack attempts target external-facing APIs.

78% of dominant attack vectors map to OWASP API8 Security Misconfiguration.

28% of organizations identify partner enablement as a main driver behind the use of APIs.

48% of organizations identify platform or system integrations as a main driver behind the use of APIs.

25% of organizations identify monetization of functionality or data as a main driver behind the use of APIs.

18% of organizations cited brute forcing or credential stuffing as the most common API security problem.

9% of organizations have no formal API security strategy in place.