28% of organizations reported breaches as the most common API security problem.

15% of respondents identified that their company's API program doesn’t adequately address runtime or production security.

10% of organizations monitor their APIs even less frequently than every few months.

93% of API patterns adopted by teams are REST.

12% of organizations monitor their APIs only every few months.

54% of organizations rely on developer documentation to identify which APIs expose sensitive data or PII.

29% of organizations raised their API security budgets by 11–15%.

3% of organizations are taking other measures to mitigate the risks of using Generative AI to develop APIs.

22% of organizations raised their API security budgets by 6–10%.

31% of developers spend less than 10 hours a week on API-related tasks.

81% of developers perform testing activities related to APIs.

31% of organizations use multiple API gateways.

43% of developers spend 10 to 20 hours a week on API-related tasks.

23% of organizations rely on weekly API checks.

20% of organizations cited denial-of-service attempts as the most common API security problem.

More than half (59%) of organizations are leveraging GenAI within their own security operations to streamline threat detection and risk mitigation.

51% of organizations use API management tools to identify which APIs expose sensitive data or PII.

9% of organizations said financial returns by the reduction in API security incidents is a metric for measuring API security ROI.

26% of developers spend more than 20 hours a week on API-related tasks.

36% of developers lack trust in AI systems.