API Security Survey Reveals Most Companies Not Yet Using API-Specific Controls
Survey Reveals Phishing, Missing Patches Are Top Concerns
Akamai partnered with the SANS Institute on the survey which was conducted in the first quarter of 2023 to determine enterprise awareness, readiness and future plans for dealing with API security risks. The 231 global respondents were primarily application security professionals.
Modern applications increasingly use APIs to capture business processes and break them into the communications required to efficiently enable business partners and customers to work with an organization. A recent State of the Internet report by Akamai noted that 2022 was a record breaking year for application and API attacks.
Survey participants ranked phishing (38.3 percent) and missing patches (24 percent) as the top two API security concerns. These were followed by exploitation of vulnerable applications/APIs (12 percent) and accidental disclosure of sensitive information (9.1 percent).
Other key findings of the survey include:
- 62 percent of respondents are using web application firewalls as part of API risk mitigation.
- Most (57.1 percent) respondents reported API inventory accuracy of between 25 percent and 75 percent.
- Most respondents cited the OWASP (
Open Web Application Security Project) Application Security and API Top Ten lists, and the MITRE ATT&CK Framework as the basis for defining application and API risk.
- 76 percent of survey takers reported training development staff on application security.
"This new survey offers the industry perspective on a topic which will continue to be one of the top security issues of 2023 and beyond," said
"The key takeaways of this survey are that security hygiene controls like strong authentication, asset inventory, vulnerability management and change control need to address API security issues," said
A webinar with more details on the survey will feature
Akamai powers and protects life online. Leading companies worldwide choose Akamai to build, deliver, and secure their digital experiences — helping billions of people live, work, and play every day. Akamai Connected Cloud, a massively distributed edge and cloud platform, puts apps and experiences closer to users and keeps threats farther away. Learn more about Akamai's security, compute, and delivery solutions at akamai.com and akamai.com/blog, or follow
Akamai Media Relations
View original content to download multimedia:https://www.prnewswire.com/news-releases/api-security-survey-reveals-most-companies-not-yet-using-api-specific-controls-301879396.html