5% of organizations did not know about their ability to detect and respond to attacks leveraging Generative AI.

55% of organizations were somewhat confident in their ability to detect and respond to attacks leveraging Generative AI.

15% of organizations are very confident in detecting and responding to attacks leveraging Generative AI.

2% of respondents expressed other security concerns about using Generative AI to develop APIs.

23% of organizations plan to adopt GenAI within the next 6–12 months for API development.

5% of organizations reported that GenAI is not a concern at all for API security.

13% of organizations reported using GenAI for all API development.

9% of organizations have no plans to use GenAI in API development.

38% of healthcare organizations identified generative AI or AI tools as a cybersecurity concern, a new category in this year’s study.

57% of organizations train developers on secure coding practices for AI-generated code.

10% of organizations were not confident at all in their ability to detect and respond to attacks leveraging Generative AI.

49% of organizations are using GenAI for some API development.

68% of financial services leaders highlight GenAI-related risks as a top concern.

71% of healthcare leaders cited GenAI as the top risk.

71% of healthcare leaders cited GenAI as the top risk.

Unapproved GenAI usage rates are highest in technology (40%), financial services (32%), and government (38%).

In the Middle East, unauthorised GenAI is the top insider concern (31%).

More than three-quarters of organisations (76%) report some level of unapproved Generative AI (GenAI) usage.

In 2025, only 36% of organizations feel confident in their ability to support large-scale genAI workloads and data volumes.

82% of innovation leaders are already allocating more than 6% of their IT budgets to genAI-enabled data management.