Shadow APIs are interfaces that are undocumented and unmonitored by central IT. According to Forrester, large companies manage an average of 1800 APIs, of which only 58% are formally documented. In the last two years, the number of API attacks has increased by over 300%.