10% of organizations raised their API security budgets by 0–5%.

42% of organizations reported managing 101–500 APIs.

11% of organizations adhere to NIS2 for API development and deployment.

25% of organizations said they were 'not very' or 'not at all confident' in the accuracy of their API inventories.

36% of organizations say GenAI is somewhat concerning for API security.

4% of organizations do not perform or have no formal assessment of their API security measures.

18% of organizations perform security audits to assess the effectiveness of their API security measures.

42% of organizations conduct code reviews and security testing.

12% of respondents identified that their company's API program doesn’t invest enough in pre-production security.

13% of organizations experienced explosive API growth of 101–200%.

35% of organizations adhere to the OWASP API Security Top 10 for API development and deployment.

43% of organizations are using specialized AI security tools.

18% of organizations said increased developer productivity is a metric for measuring API security ROI.

Only 7% of organizations reported increases in their API security budgets greater than 21%.

41% of organizations use vulnerability scanning to assess the effectiveness of their API security measures.

12% of organizations cited a lack of investment in pre-production security for their API programs.

51% of organizations are still in planning or basic stages of API security maturity.

26% of organizations are adopting governance frameworks to establish rules for AI use in development.

60% of developers still design APIs primarily for humans only.

Just 11% of organizations plan to reduce investment in APIs in the next 12 months.