28% of organizations manage between 1 and 100 APIs.

14% of organizations reported their API programs are out of control or hard to manage.

11% of respondents pointed to competing priorities as the primary barrier to implementing a strong API security program.

11% of organizations that generate API revenue derive more than 75% of their total revenue from APIs.

10% of organizations were not confident at all in their ability to detect and respond to attacks leveraging Generative AI.

70% of developers are aware of the Model Context Protocol (MCP).

24% of developers actively design APIs with AI agents in mind.

Calls made to AI APIs have increased by 40% year-over-year according to Postman.

26% of organizations that generate API revenue derive between 10% to 25% of their total revenue from APIs.

54% of organizations identified improved user experience as a channel through which revenue comes from APIs.

26% of developers, architects, and executives use Azure API Gateway.

Only 10% of developers are using MCP regularly.

23% of developers, architects, and executives use other gateway solutions.

11% of organizations use three or more API gateways.

9% of organizations rated the tools they use to detect and prevent API attacks as not very effective.

67% of developers, architects, and executives adopt integration testing practices.

23% of organizations indicated APIs are enabling advanced analytics, automation, and business insights powered by machine learning.

20% of organizations monitor their APIs continuously in real-time.

1% of organizations did not know how confident they were in the accuracy of their API inventories.

26% of organizations said a strong compliance posture is a metric for measuring API security ROI.