Wallarm's Q1 2025 API Threat Report Highlights Rising Threats
Half of all security issues in Agentic AI code repositories (65%) are API-related.
Wallarm, a leader in API and AI security solutions, has recently unveiled findings from The Rise of Agentic AI, the API ThreatStats report for Q1 2025. This comprehensive study underscores the escalating API threats driven by emerging agentic AI systems, increased complexity in cloud-native infrastructures, and growing software supply chain risks. The insights provided aim to assist organizations in prioritizing vulnerabilities and reinforcing their defenses against these evolving threats.
According to Ivan Novikov, CEO and Co-Founder of Wallarm, "In the first quarter of 2025, the prevalence of API threats has continued to rise across diverse industries from healthcare to AI and beyond. Our findings indicate that the security risks associated with AI agents predominantly stem from APIs. Agentic AI presents vulnerabilities akin to traditional code, yet they illustrate a significant proportion of API-related security issues. Addressing the security of agentic AI cannot be achieved without a focused approach to APIs."
The report reveals that APIs are integral to all Agentic workflows. However, cybersecurity standards, such as CVE and CISA KEV, have not kept pace with the evolving security risks attributed to Agentic AI. To better understand current trends, Wallarm's researchers delved into GitHub security issues dating back to 2019 for Agentic repositories. From analyzing 2,869 security issues in Agentic AI projects, it became evident that a staggering 65% were API-related, highlighting the critical link between agent and API security.
Moreover, the report addressed API breaches that transpired in early 2025, affecting various notable organizations including Oracle Cloud, DeepSeek, CommonCrawl, Volkswagen, NHS UK, Microsoft, BeyondTrust, and OmniGPT. No industry was spared from these breaches, emphasizing the widespread vulnerability landscape.
Key Findings from the Q1 2025 Report
The report outlines several critical findings:
API Vulnerabilities
The majority of security issues (65%) in Agentic AI repositories are API-related, with over 700 issues still unaddressed. Moreover, 25% of reported security vulnerabilities remain open, some unresolved for over 1,200 days, revealing a significant gap between identifying vulnerabilities and remediation efforts.
Industry-Wide Impact
The top five API breaches span various sectors including cloud computing, AI, automotive, and healthcare, underscoring the urgent need for enhanced cybersecurity measures across industries.
Access Control Issues
With 60% of the top vulnerabilities linked to access control, access control weaknesses continue to prevail within APIs.
Protecting Against API Threats
APIs are not merely components of the attack surface; they represent the attack surface itself. As attackers focus on APIs as both the entry point and target, it becomes crucial for organizations to adopt proactive measures. Enhancing threat models to address contemporary environmental challenges, prioritizing API security updates, formulating effective Agentic AI security strategies, and implementing real-time API traffic monitoring are essential steps to mitigate these threats.
To access the full Q1 2025 API Threat Report, visit Wallarm's official site for more in-depth information and insights into rising threats.
About Wallarm
Wallarm is recognized as the only unified platform for API and agentic AI security, effectively utilized in enterprise production environments. The company enables organizations to secure their APIs and AI agents by providing a comprehensive inventory management system, real-time blocking capabilities, and patented AI/ML-based abuse detection. Based in San Francisco, California, Wallarm is financed by investors including Toba Capital, Y Combinator, Partech, and others.
Media Contact
Michelle Kearney
Hi-Touch PR
443-857-9468
Frequently Asked Questions
What is the focus of Wallarm's Q1 2025 API Threat Report?
The report focuses on the rising API threats associated with Agentic AI systems and provides insights to help organizations improve their security measures.
How significant are API-related vulnerabilities according to the report?
The report reveals that 65% of security issues in Agentic AI repositories are API-related, signifying a critical area of concern.
What organizations were highlighted in the report for API breaches?
The report discussed breaches affecting organizations such as Oracle Cloud, Volkswagen, and NHS UK, reflecting the widespread nature of the threats.
Why is access control important in API security?
Access control vulnerabilities are identified as a primary concern, with 60% of top vulnerabilities related to this issue, making it essential for organizations to prioritize their security strategies.
What proactive measures can organizations take against API threats?
Organizations can enhance threat models, prioritize API security, create effective strategies, and implement real-time monitoring to safeguard against vulnerabilities.
