50% of security leaders have slowed a new application rollout due to API security concerns.

14% of organizations oversee 1,001 or more APIs.

41% of organizations reported API growth of 51–100% over the past year.

33% of organizations flagged authentication problems as the most common API security problem.

7% of respondents pointed to time constraints as the primary barrier to implementing a strong API security program.

17% of organizations were 'not very confident' in the accuracy of their API inventories.

14% of respondents identified that their company's API program is out of control or hard to manage.

30% of organizations are in the planning stage for their API security programs.

22% of organizations identified new revenue streams as a channel through which revenue comes from APIs.

75% of developers, architects, and executives use CI/CD pipelines.

46% of developers, architects, and executives use cloud deployment.

23% of organizations identify leveraging AI/ML capabilities for business insights or automation as a main driver behind the use of APIs.

52% of organizations identify development efficiencies and/or standardization as a main driver behind the use of APIs.

43% of fully API-first organizations generate more than 25% of total revenue from APIs.

Postman has seen 7.53 million calls made to AI APIs in the past 12 months.

47% of developers, architects, and executives use AWS API Gateway.

15% of organizations admitted they do not know which APIs expose PII.

Llama experienced 6.9 times year-over-year growth.

61% of all organizations reported modest increases (≤15%) in their API security budgets.

21% of organizations have basic API security programs focused on risk assessments or manual reviews.