<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
<url>
<loc>https://actuallyexploitable.com</loc>
<lastmod>2026-10-27T13:02:20.282Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/security-remediation</loc>
<lastmod>2026-10-18T14:35:36.265Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/ai-native-security-testing</loc>
<lastmod>2026-10-09T15:05:36.567Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/secure-sdlc-continuous-testing</loc>
<lastmod>2026-09-15T22:14:03.138Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/compliance-audit-readiness</loc>
<lastmod>2026-10-27T13:02:20.282Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/ai-application-mcp-security</loc>
<lastmod>2026-10-24T13:10:40.342Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/whitebox-penetration-testing</loc>
<lastmod>2026-10-23T14:41:12.944Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/verified-vulnerabilities-exploits</loc>
<lastmod>2026-10-19T14:11:18.174Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/authors/rosa-rahman</loc>
<lastmod>2026-10-27T13:02:20.282Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/authors/ingrid-novak</loc>
<lastmod>2026-10-27T13:02:20.282Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/authors/malik-holt</loc>
<lastmod>2026-10-27T13:02:20.282Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/authors/caleb-kaur</loc>
<lastmod>2026-10-27T13:02:20.282Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/hipaa-security-rule-penetration-testing-obligations-for-saas-companies</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/f6023542-30be-4379-86a3-54a0a2e52b89.jpeg</image:loc>
</image:image>
<lastmod>2026-10-27T13:02:20.282Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/selecting-a-pen-testing-vendor-for-compliance-and-security-goals</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/2e43ddab-8f70-4aaa-b440-efdab19fd662.jpeg</image:loc>
</image:image>
<lastmod>2026-10-26T15:06:18.599Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/security-theater-in-compliance-driven-pen-tests</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/c36a4ac7-c1cd-4d7b-95d3-c9ec66a8c5d1.jpeg</image:loc>
</image:image>
<lastmod>2026-10-25T13:45:53.673Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/mcp-server-authentication-and-authorization-failures</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/b84b451f-1e36-41c6-af47-0933c98d46a0.jpeg</image:loc>
</image:image>
<lastmod>2026-10-24T13:10:40.342Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/whitebox-penetration-testing-providers-for-fintech-and-financial-services-saas</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/9fe0fcbf-68e8-4c89-b282-e75c5a3a656f.jpeg</image:loc>
</image:image>
<lastmod>2026-10-23T14:41:12.944Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/enterprise-vendor-security-questionnaires-and-pen-test-evidence</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/d067c843-f3d2-4b1f-b4f3-b06967e49fcd.jpeg</image:loc>
</image:image>
<lastmod>2026-10-22T13:16:36.165Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/tools-that-test-tenant-boundary-enforcement-across-request-pipelines</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/5ccdc7fc-6ff1-44f7-82ad-528bc486f53c.jpeg</image:loc>
</image:image>
<lastmod>2026-10-19T14:11:18.174Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/tracking-remediation-status-across-a-pen-test-report-in-engineering-workflows</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/5324df56-1c25-44cd-8923-7dd8e58cdcfc.jpeg</image:loc>
</image:image>
<lastmod>2026-10-18T14:35:36.265Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/developer-security-training-gaps-that-pen-tests-reveal</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/328eb6b5-029d-4c50-a98d-9e9eae94186b.jpeg</image:loc>
</image:image>
<lastmod>2026-10-17T14:40:30.626Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/communicating-security-vulnerabilities-to-non-technical-stakeholders</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/6f077809-c3e4-457c-b3d0-8f0036ebc2ef.png</image:loc>
</image:image>
<lastmod>2026-10-16T15:01:57.602Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/root-cause-analysis-for-recurring-vulnerability-classes</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/0fadb9b2-6734-44aa-854b-a80c8f3041c7.jpeg</image:loc>
</image:image>
<lastmod>2026-10-15T14:36:50.873Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/communicating-pen-test-findings-to-non-technical-stakeholders</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/722dc94b-1dfb-4477-97c5-600e262a61e0.png</image:loc>
</image:image>
<lastmod>2026-10-14T13:31:44.632Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/temporary-mitigations-for-critical-vulnerabilities-awaiting-full-remediation</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/36a7850e-ec62-4369-a4aa-63acea322708.jpeg</image:loc>
</image:image>
<lastmod>2026-10-13T13:47:04.160Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/patch-validation-and-exploit-confirmation-after-remediation</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/f21c47ad-ae99-4ea0-be34-0aaac3d48642.jpeg</image:loc>
</image:image>
<lastmod>2026-10-12T13:16:48.937Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/remediation-timelines-and-sla-standards-for-different-vulnerability-severities</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/bc150635-c825-45c6-83bf-d6c14492ec9e.jpeg</image:loc>
</image:image>
<lastmod>2026-10-11T15:21:20.415Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/root-cause-analysis-after-a-pen-test-to-prevent-vulnerability-class-recurrence</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/cb692c52-79e8-4a79-bb2d-7c708797697e.jpeg</image:loc>
</image:image>
<lastmod>2026-10-10T14:15:26.722Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/cloud-configuration-analysis-in-modern-penetration-testing</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/6468033a-c0a2-4a26-8fb5-3a6f11dc345d.jpeg</image:loc>
</image:image>
<lastmod>2026-10-09T15:05:36.567Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/human-expert-review-requirements-in-ai-augmented-security-assessments</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/78e7a0f7-616c-4e50-b50b-d249ee83d177.jpeg</image:loc>
</image:image>
<lastmod>2026-10-08T15:25:35.498Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/integrating-ai-security-testing-into-an-existing-appsec-program</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/c9b435c7-3027-4988-994e-145c970ce815.jpeg</image:loc>
</image:image>
<lastmod>2026-10-07T14:25:30.386Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/source-code-analysis-in-ai-assisted-vulnerability-discovery</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/896a249c-c90a-472c-80b9-fd3fa0c03de9.png</image:loc>
</image:image>
<lastmod>2026-10-06T13:55:36.097Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/static-analysis-tools-for-tracing-data-flows-in-whitebox-penetration-testing</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/f85e0498-d624-4385-8695-1fef9969ef66.jpeg</image:loc>
</image:image>
<lastmod>2026-10-05T14:20:27.695Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/ai-native-vs-traditional-whitebox-penetration-testing-approaches</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/33bf76de-ff7d-442d-91c3-07ec5aae0a44.jpeg</image:loc>
</image:image>
<lastmod>2026-10-04T13:14:35.094Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/penetration-testing-tools-that-perform-automated-data-flow-tracing-across-source</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/a93ed373-cedc-4c8e-ad4e-11be12fafd57.jpeg</image:loc>
</image:image>
<lastmod>2026-10-03T14:04:34.726Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/platforms-that-combine-automated-source-code-analysis-with-human-researcher-vali</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/5e8bae32-e845-44f2-b96a-8f3a709517e6.jpeg</image:loc>
</image:image>
<lastmod>2026-10-02T13:40:52.937Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/ai-assisted-pen-testing-vs-traditional-manual-testing-compared</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/6b1e3b87-50b2-404f-a111-d9e337eaa7aa.jpeg</image:loc>
</image:image>
<lastmod>2026-10-01T13:51:06.500Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/autonomous-vulnerability-scanners-with-end-to-end-exploit-path-tracing</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/76ea16b5-a327-4055-8941-89a60ad72aea.png</image:loc>
</image:image>
<lastmod>2026-09-30T17:41:31.959Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/ai-security-testing-tools-that-combine-code-visibility-with-data-flow-mapping</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/8ff0e405-3249-4d5d-b328-206edd6df0ca.jpeg</image:loc>
</image:image>
<lastmod>2026-09-30T16:51:24.919Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/approaches-to-tracing-taint-through-third-party-library-boundaries</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/e612cb8c-b861-4ccf-8adf-1a94eda55fea.jpeg</image:loc>
</image:image>
<lastmod>2026-09-30T02:10:53.472Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/limitations-of-fully-automated-penetration-testing-tools</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/3dccda12-f27c-4127-9674-556f02e5a27f.jpeg</image:loc>
</image:image>
<lastmod>2026-09-28T23:20:21.519Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/sast-tools-with-cross-file-taint-analysis-capabilities</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/892f83b2-045e-459e-bace-92f3059673c2.jpeg</image:loc>
</image:image>
<lastmod>2026-09-26T23:14:39.591Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/retesting-vulnerabilities-after-remediation-and-what-confirms-a-clean-fix</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/cc700262-9237-4cdb-992a-5eb53871f453.jpeg</image:loc>
</image:image>
<lastmod>2026-09-26T05:00:39.123Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/retesting-vulnerabilities-after-a-pen-test-fix</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/aab3f05b-7851-4f82-9021-dbd85add73d2.jpeg</image:loc>
</image:image>
<lastmod>2026-09-24T23:30:04.272Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/prioritizing-pen-test-findings-by-exploitability-in-a-saas-environment</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/35baadfc-03da-4a82-b3dc-12fbb26a95d5.jpeg</image:loc>
</image:image>
<lastmod>2026-09-23T17:10:40.363Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/prioritizing-pen-test-findings-for-remediation-sprints</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/3d6e92ca-fd35-466d-b560-428cb6a8fe0b.jpeg</image:loc>
</image:image>
<lastmod>2026-09-20T14:13:53.388Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/penetration-testing-requirements-in-soc-2-type-ii-audits</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/2b3f0361-64cc-4b8d-aac9-cc4e1f9c5cbc.jpeg</image:loc>
</image:image>
<lastmod>2026-09-19T14:08:01.938Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/iso-27001-penetration-testing-requirements-and-audit-evidence</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/e2065d09-6b0b-4a2b-b5af-dc397a6a7648.jpeg</image:loc>
</image:image>
<lastmod>2026-09-18T13:53:38.005Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/prompt-injection-vulnerabilities-in-production-saas-applications</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/bfa398cd-7ba6-4010-83b3-37abf8bfb2b5.jpeg</image:loc>
</image:image>
<lastmod>2026-09-17T13:50:13.276Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/tools-for-correlating-multi-step-ai-exfiltration-attempts</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/20278f6f-3af5-4c6b-a3bf-325816efcf75.jpeg</image:loc>
</image:image>
<lastmod>2026-09-16T13:08:14.621Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/platforms-for-end-to-end-agent-session-forensics</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/d5f878bb-3f3f-486b-a48b-fe2bc1521f7c.jpeg</image:loc>
</image:image>
<lastmod>2026-09-15T23:18:58.038Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/owasp-llm-top-10-applied-to-saas-product-security-reviews</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/70a38005-ff27-46e5-856b-de49db2c5f76.jpeg</image:loc>
</image:image>
<lastmod>2026-09-15T22:54:07.800Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/building-a-vulnerability-disclosure-and-responsible-disclosure-program-for-saas</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/b1c0ca79-b980-4b4d-b3b3-8b301bcaeebd.jpeg</image:loc>
</image:image>
<lastmod>2026-09-15T22:14:03.138Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/dependency-vulnerability-management-beyond-automated-cve-alerts</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/85d54457-3da2-46c5-84df-e76d797e4828.jpeg</image:loc>
</image:image>
<lastmod>2026-09-13T01:23:08.248Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/threat-modeling-for-saas-application-features-before-development-starts</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/66f43c5f-f765-4813-9175-48a905510764.jpeg</image:loc>
</image:image>
<lastmod>2026-09-12T02:41:05.643Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/threat-modeling-for-growth-stage-saas-products</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/afb7e8c0-356f-4be0-8683-f64e7d605fdb.jpeg</image:loc>
</image:image>
<lastmod>2026-09-09T23:08:19.918Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/security-requirements-in-the-software-development-lifecycle</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/a3aef452-e072-434e-9921-b7887cc7f939.jpeg</image:loc>
</image:image>
<lastmod>2026-09-07T14:23:34.848Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/building-a-security-program-from-scratch-at-a-seed-to-series-b-company</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/ddebb396-77be-4903-bb49-778b30bdefed.jpeg</image:loc>
</image:image>
<lastmod>2026-09-06T15:22:39.085Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/annual-pen-test-vs-continuous-security-testing-cadence-decisions</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/24483710-7526-4f1b-bda2-e9d975dcb31e.jpeg</image:loc>
</image:image>
<lastmod>2026-09-05T16:28:56.463Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/security-regression-testing-after-vulnerability-remediation</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/a551e87b-9268-4416-a60f-9a49fe6a01aa.jpeg</image:loc>
</image:image>
<lastmod>2026-09-04T15:20:39.609Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/security-review-process-for-third-party-api-integrations-in-saas-products</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/7b68bc54-ab49-4d1b-b7c6-3d34d60924eb.jpeg</image:loc>
</image:image>
<lastmod>2026-09-03T13:45:23.088Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/pull-request-security-review-processes-for-engineering-teams</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/4c2c1a31-ffec-44ae-b2ef-4bc40be6825a.jpeg</image:loc>
</image:image>
<lastmod>2026-09-02T15:28:57.378Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
