<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
<url>
<loc>https://actuallyexploitable.com</loc>
<lastmod>2026-07-30T03:53:21.445Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/ai-native-security-testing</loc>
<lastmod>2026-07-30T03:48:24.668Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/ai-application-mcp-security</loc>
<lastmod>2026-07-30T03:48:28.050Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/secure-sdlc-continuous-testing</loc>
<lastmod>2026-07-30T03:53:21.445Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/verified-vulnerabilities-exploits</loc>
<lastmod>2026-07-30T03:48:28.924Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/sections/whitebox-penetration-testing</loc>
<lastmod>2026-07-30T03:15:06.948Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/authors/amara-sinclair</loc>
<lastmod>2026-07-30T03:53:21.445Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/authors/amara-zola</loc>
<lastmod>2026-07-30T03:53:21.445Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/authors/beatrice-reyes</loc>
<lastmod>2026-07-30T03:53:21.445Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/authors/felix-rahman</loc>
<lastmod>2026-07-30T03:53:21.445Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/authors/lucia-sabatini</loc>
<lastmod>2026-07-30T03:53:21.445Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/authors/marcus-ashworth</loc>
<lastmod>2026-07-30T03:53:21.445Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/security-gates-in-ci-cd-pipelines-for-saas-engineering-teams</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/1231bd53-c594-4dd8-b40c-12f79b2ee8e5.png</image:loc>
</image:image>
<lastmod>2026-07-30T03:53:21.445Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/sql-injection-in-modern-saas-applications-and-orm-pitfalls</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/ecc767f8-0f73-45f4-9605-93b70367bdea.png</image:loc>
</image:image>
<lastmod>2026-07-30T03:48:28.924Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/penetration-testing-llm-powered-saas-features-and-api-endpoints</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/bcdfb886-4667-42d2-895e-ceedf994b3ef.png</image:loc>
</image:image>
<lastmod>2026-07-30T03:48:28.050Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/how-ai-native-pen-testing-tools-map-attack-paths-at-scale</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/e2876129-a2ba-40ea-ad74-87004c620c8a.png</image:loc>
</image:image>
<lastmod>2026-07-30T03:48:24.668Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/continuous-pull-request-security-scanning-vs-point-in-time-pen-tests</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/030033ef-bcc8-4a08-ba94-1f470f6e4a22.png</image:loc>
</image:image>
<lastmod>2026-07-30T03:33:30.876Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actuallyexploitable.com/posts/white-box-penetration-testing-explained-for-saas-teams</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/e3fd8000-07c6-45bf-b97f-1e9997a7bf36.png</image:loc>
</image:image>
<lastmod>2026-07-30T03:15:06.948Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
