Organizations and consumers must have robust API management and security programmes to ensure they employ the most up-to-date policies to verify that these interactions are sufficiently safe. Technology providers provide API Management solutions to their customers, and API security standards have been established to ensure the security of API transactions. As part of the endeavor to make APIs open and straightforward to deploy for both Business to Business (B2B) and Business to Consumer communications, security requirements must be considered as part of the API management process. This paper gathered information in order to determine why APIs are susceptible. It investigated the various perspectives among Customers regarding their own professional experiences with developing private APIs for their organizations. It compared this to the Cyber Security Vendor/Supplier segment, which provides products and services to assist their Customers with API development and security and management. The findings were compared to the findings of the previous research. According to the study’s findings, API exploits are typically not identified when they occur, and attitudes on security readiness fluctuate depending on the IT job. During the course of this study, several essential blocking and tackling concepts were discovered that might be used by any business to improve API security management.