Postman has seen 7.53 million calls made to AI APIs in the past 12 months.

47% of developers, architects, and executives use AWS API Gateway.

15% of organizations admitted they do not know which APIs expose PII.

Llama experienced 6.9 times year-over-year growth.

61% of all organizations reported modest increases (≤15%) in their API security budgets.

21% of organizations have basic API security programs focused on risk assessments or manual reviews.

10% of organizations raised their API security budgets by 0–5%.

42% of organizations reported managing 101–500 APIs.

11% of organizations adhere to NIS2 for API development and deployment.

36% of organizations say GenAI is somewhat concerning for API security.

4% of organizations do not perform or have no formal assessment of their API security measures.

18% of organizations perform security audits to assess the effectiveness of their API security measures.

42% of organizations conduct code reviews and security testing.

12% of respondents identified that their company's API program doesn’t invest enough in pre-production security.

13% of organizations experienced explosive API growth of 101–200%.

35% of organizations adhere to the OWASP API Security Top 10 for API development and deployment.

43% of organizations are using specialized AI security tools.

18% of organizations said increased developer productivity is a metric for measuring API security ROI.

Only 7% of organizations reported increases in their API security budgets greater than 21%.

41% of organizations use vulnerability scanning to assess the effectiveness of their API security measures.