99% of API vulnerabilities are remotely exploitable.

In 2025, 17% of 67,058 published vulnerabilities (11,053 vulnerabilities) were API-related.

97% of API vulnerabilities can be exploited with a single request.

59% of API vulnerabilities require no authentication.