Book Your API Security Demo Now
Download the Report
Wallarm’s 2026 annual API ThreatStats Report explores the API security data and trends from 2025. Included you’ll find analysis of vulnerability, exploit, and breach trends, as well as an update to the Wallarm API ThreatStats Top 10.
The real-world API attack surface tied to AI grew dramatically, and when API and AI weaknesses overlap, the same exploit characteristics dominate: remote access, single-request attacks, and consistently high business impact.
It’s clear that despite years of industry education about injections, APIs continue to process vast volumes of untrusted input and pass it directly into downstream systems.
When exploitation is this easy, scale, not sophistication, becomes the dominant risk factor.
AI vulnerabilities grew from 439 to 2,185, a 398% increase year over year." Paired with "AI Vulnerabilities.
These incidents followed the same mechanics seen elsewhere in the dataset, stolen tokens, exposed endpoints, and unsafe integration trust, but with higher potential impact because AI APIs often sit directly in the path of sensitive data, automation, and decision‐making.
