9% of organizations have no plans to use GenAI in API development.

5% of organizations reported that GenAI is not a concern at all for API security.

13% of organizations reported using GenAI for all API development.

49% of organizations are using GenAI for some API development.

23% of organizations plan to adopt GenAI within the next 6–12 months for API development.

2% of respondents expressed other security concerns about using Generative AI to develop APIs.

15% of organizations are very confident in detecting and responding to attacks leveraging Generative AI.

55% of organizations were somewhat confident in their ability to detect and respond to attacks leveraging Generative AI.

5% of organizations did not know about their ability to detect and respond to attacks leveraging Generative AI.

15% of organizations were not very confident in their ability to detect and respond to attacks leveraging Generative AI.

3% of organizations do not know if Generative AI is perceived as a growing API security concern/risk within their organization.

38% of healthcare organizations identified generative AI or AI tools as a cybersecurity concern, a new category in this year’s study.

68% of financial services leaders highlight GenAI-related risks as a top concern.

71% of healthcare leaders cited GenAI as the top risk.

71% of healthcare leaders cited GenAI as the top risk.

In the Middle East, unauthorised GenAI is the top insider concern (31%).

More than three-quarters of organisations (76%) report some level of unapproved Generative AI (GenAI) usage.

Unapproved GenAI usage rates are highest in technology (40%), financial services (32%), and government (38%).

82% of innovation leaders are already allocating more than 6% of their IT budgets to genAI-enabled data management.

In 2025, only 36% of organizations feel confident in their ability to support large-scale genAI workloads and data volumes.