6% of respondents identified that their company's API program is too cumbersome and slows down delivery.

Only 19% of security leaders are 'very confident' in their API inventory accuracy.

10% of organizations rely on monthly API checks.

16% of organizations cited APIs as critical for enabling autonomous systems such as AI agents, which rely on APIs for communication and orchestration.

45% of organizations pointed to digital transformation initiatives as a primary driver for modernizing legacy systems and accelerating new services.

9% of organizations have no plans to use GenAI in API development.

35% of organizations are using APIs to support migration to modern cloud architectures.

6% of organizations conduct threat modeling to assess the effectiveness of their API security measures.

8% of organizations conduct incident response analysis to assess the effectiveness of their API security measures.

16% of respondents identified that their company's API program doesn't drive enough observability and control.

10% of respondents identified that their company's API program is too difficult to staff/resource.

8% of respondents identified that it’s difficult to know what to prioritize within their company's API program.

7% of respondents identified that it’s difficult to know if their company's API program is compliant with new policies/regulations.

30% of organizations reported intermediate maturity in their API security programs, with app sec testing and API gateways in place.

82% of the organizations have adopted some level of an API-first approach.

10% of organizations have advanced API security strategies that include dedicated API testing and protection.

Nearly 80% of organizations increased their API security budgets in the past year.

65% of organizations generate revenue from their API programs.

59% of organizations said the tools they use to detect and prevent API attacks are only somewhat effective.

51% of developers worry about unauthorized or excessive API calls from AI agents, making it their number one security concern.