99% of Organizations Report API-Related Security Issues

Salt Security’s Q1 2025 State of API Security report finds that rapid API growth is overwhelming defenses, with most organizations lacking real-time visibility and confidence in their API inventories. Key risks include security misconfigurations, broken object-level authorization, authentication failures, and sensitive data exposure, while 95% of attacks are tied to authenticated users and 98% target external-facing APIs. Operational hurdles—limited budgets, staffing shortages, and tooling gaps—are delaying releases, and GenAI introduces detection and code-quality concerns. The report urges proactive measures: real-time monitoring, robust posture governance aligned to the OWASP API Security Top Ten, stronger API inventory management, and adoption of AI-driven security tools.