API proliferation is a monster problem

APIs are built expressly to share a company’s most valuable data and services. This makes them a lucrative target for bad actors. We’ve already hit the tipping point — APIs are now THE way in.

Try Salt for free

What the analysts are saying

“Current data indicates that the average API breach leads to at least 10 times more leaked data than the average security breach.”

—Gartner, Market Guide for API Protection, Dionisio Zumerle, Aaron Lord, Esraa ElTahawy, Mark O'Neill, 29 May 2024

The number of APIs is exploding with no end in sight

The number of APIs has increased by 167% in the past year. While GenAI accelerates business growth, it is also generating security risks faster than companies can keep up.

Connectivity

Number of Services and APIs

57% Of dynamic HTTP traffic on Cloudflare network is API related

And growing as a result of GenAI usage…

Number of services

GenAI’s productivity boost comes with hidden risks

Do you know where and how many APIs you have?

GenAI increases the speed and volume of API creation.

New APIs in seconds vs hours
Easy-to-create shadow APIs 
Zombie APIs left behind

Are you staying  in policy?

With increased proliferation, it’s challenging to keep up with policy.

Corporate or industry policies are documented but unable to manage the volume
No time to report back to DevOps any found issue
Further and further behind

Are you stopping all  the threats?

The speed and volume makes it impossible to check for threats.

Too many APIs from unknown sources
GenAI doesn’t check for security risks
Integration with SecOps creates alert fatigue or alert avoidance

Get up to speed with our API Security Starter Pack

Download now

Next-generation applications are API dependent

APIs are the building blocks of today's interconnected digital ecosystem, powering the seamless communication between applications that drive modern business operations. However, there's a rapidly expanding API threat landscape that poses a significant risk to organizations.  

If you are not protecting APIs, you are not protecting your applications.