93% of teams struggle with API collaboration.

23% of organizations that generate API revenue derive between 26% to 50% of their total revenue from APIs.

Only 17% of developers, architects, and executives adopt contract testing.

18% of organizations said cost savings from breach prevention is a metric for measuring API security ROI.

67% of developers, architects, and executives adopt functional testing practices.

12% of organizations manage 501–1,000 APIs.

11% of respondents pointed to tooling/solutions gaps as the primary barrier to implementing a strong API security program.

55% of organizations were only 'somewhat confident' in the accuracy of their API inventories.

10% of dominant attack vectors map to OWASP API1 Broken Object Level Authorization (BOLA).

15% of organizations said their API programs do not adequately address runtime or production security.

8% of organizations were 'not at all confident' in the accuracy of their API inventories.

21% of organizations rely on regular penetration testing to assess the effectiveness of their API security measures.

74% of organizations that generate API revenue generate at least 10% of their total revenue from APIs.

65% of organizations now generate revenue from their APIs.

29% of organizations identified account misuse or other fraud as the most common API security problem.

The percentage of organizations operating as fully API-first increased by 12% from 2024.

Nearly a quarter (25%) of organizations that generate API revenue derive more than half their total revenue from API programs.

16% of respondents pointed to resource or staffing shortages as the primary barrier to implementing a strong API security program.

28% of organizations reported breaches as the most common API security problem.

30% of organizations reported a 0–50% increase in API growth.