42% of organizations plan to invest more in runtime security over the next 24 months.

18% of vulnerabilities labeled "critical" remain critical once runtime context is applied

15% of organizations said their API programs do not adequately address runtime or production security.