Only 3% of organizations indicated they do not know how many APIs they are responsible for.

57% of the organizations are somewhat API-first.

89% of developers use generative AI in their daily work.

25% of the organizations are operating as fully API-first organizations.

69% of developers spend 10 or more hours per week on API-related tasks.

41% of developers, architects, and executives rely on AI to generate API documentation.

33% of security leaders have suffered an API incident in the past year.

35% of organizations identify cloud migration as a main driver behind the use of APIs.

33% of developers have ethical, legal, and compliance concerns about AI tools.

26% of organizations that generate API revenue derive less than 10% of their total revenue from APIs.

4% of organizations reported API increases of 201–300%.

25% of respondents pointed to budget limitations as the primary barrier to implementing a strong API security program.

2% of organizations adhere to other specific security standards or frameworks for API development and deployment.

Only 19% of organizations were 'very confident' in the accuracy of their API inventories.

20% of organizations use two different gateways.

Only 26% of developers, architects, and executives use semantic versioning.

11% of organizations said their API security budget did not increase.

4% of organizations do not know what specific security standards or frameworks they adhere to for API development and deployment.

57% of organizations train developers on secure coding practices for AI-generated code.

18% of organizations said lower enterprise risk score is a metric for measuring API security ROI