37% evaluate improvements to compliance posture for evaluating API security effectiveness, 25% measure ROI through cost savings achieved by preventing security breaches, and 16% measure reductions in API-related security incidents to measure program success.