96% of attack attempts originate from authenticated entities (compromised users, insiders, or rogue agents).

98% of attack attempts target external-facing APIs.

78% of dominant attack vectors map to OWASP API8 Security Misconfiguration.

28% of organizations identify partner enablement as a main driver behind the use of APIs.

48% of organizations identify platform or system integrations as a main driver behind the use of APIs.

25% of organizations identify monetization of functionality or data as a main driver behind the use of APIs.

18% of organizations cited brute forcing or credential stuffing as the most common API security problem.

9% of organizations have no formal API security strategy in place.

31% of organizations adhere to GDPR for API development and deployment.

57% of developers, architects, and executives use Git repositories.

55% of organizations are struggling with inconsistent documentation.

34% of organizations are unable to find existing APIs.

Total lender exposure to suspected synthetic identities for US auto loans, credit cards, and unsecured personal loans was USD$2.7 billion at the end of H1 2025.

42% of surveyed UK CFOs identified ‘cybersecurity threats’ as the operational risk they were most concerned about over the next 12–24 months, making it the largest percentage of responses for this risk category.

93% of U.S. healthcare organizations experienced at least one cyberattack in the past 12 months.

The reported usage of third-party authenticator apps as a secondary authentication method increased to 19% in 2025, up from 16% in 2024.

6% of organizations do not know by how much the number of APIs has increased over the past 12 months.

34% of organizations reported sensitive data exposure and privacy incidents as the most common API security problem.

13% of organizations cited enumeration and scraping as the most common API security problem.

53% of healthcare organizations believe their organizations are vulnerable or highly vulnerable to a BEC/spoofing/impersonation incident.