Report: 76% of organizations have had an API safety incident up to now yr

APIs are the lifeblood of digital transformation and lie on the coronary heart of company methods for progress and innovation. Almost all companies depend on APIs to attach providers, switch information and management key programs. In reality, APIs now drive mission-critical processes throughout organizations.

The exploding adoption of APIs has additionally enormously expanded organizations’ assault surfaces, growing the necessity for enterprises to concentrate on API safety. However as organizations transition into a mess of cloud, hybrid and on-premises digital environments, this complexity makes it troublesome for safety groups to seek out and repair issues rapidly.

In July 2022, Noname Safety commissioned a survey from the impartial analysis group, Opinion Issues, to raised perceive the state of the API safety setting and to look at the challenges going through organizations.

Excessive-level findings

Noname’s analysis uncovered a degree of complacency and potential denial across the dangers that APIs current. Whereas 76% of respondents surveyed stated that that they had skilled an API safety incident, there have been additionally excessive ranges of confidence of their current options, with 67% saying they have been pleased with the safety supplied and the API safety supplied by both CSPs or specialist safety suppliers. A majority, 71%, said that they have been assured and glad that they have been receiving adequate API safety.

There’s clearly a disconnect between what is going on in the actual world and organizational attitudes in direction of API safety. The extent of misplaced confidence round API safety is disproportionately excessive compared to the quantity and severity of API-related breaches. This factors to the necessity for additional schooling by safety, appsec and growth groups across the realities of API safety.

Total, the analysis uncovered a disconnect between the excessive degree of incidents, the low ranges of visibility, efficient monitoring and testing of the API setting, and a degree of over-confidence that their instruments and suppliers have been stopping assaults.

Methodology

600 senior cybersecurity professionals within the USA and U.Ok. have been surveyed from throughout a wide range of enterprise organizations in six key vertical market sectors: monetary providers, retail and ecommerce, healthcare, authorities and public sector, manufacturing, and power and utilities.

Learn the total report from Noname Safety.