https://actuallyexploitable.com 2026-11-11T14:06:47.923Z daily 1 https://actuallyexploitable.com/sections/ai-native-security-testing 2026-10-09T15:05:36.567Z weekly 0.5 https://actuallyexploitable.com/sections/verified-vulnerabilities-exploits 2026-10-19T14:11:18.174Z weekly 0.5 https://actuallyexploitable.com/sections/compliance-audit-readiness 2026-11-06T16:02:04.483Z weekly 0.5 https://actuallyexploitable.com/sections/secure-sdlc-continuous-testing 2026-09-15T22:14:03.138Z weekly 0.5 https://actuallyexploitable.com/sections/security-remediation 2026-10-18T14:35:36.265Z weekly 0.5 https://actuallyexploitable.com/sections/whitebox-penetration-testing 2026-10-23T14:41:12.944Z weekly 0.5 https://actuallyexploitable.com/sections/ai-application-mcp-security 2026-11-11T14:06:47.923Z weekly 0.5 https://actuallyexploitable.com/authors/rosa-rahman 2026-11-11T14:06:47.923Z weekly 0.4 https://actuallyexploitable.com/authors/ingrid-novak 2026-11-11T14:06:47.923Z weekly 0.4 https://actuallyexploitable.com/authors/malik-holt 2026-11-11T14:06:47.923Z weekly 0.4 https://actuallyexploitable.com/authors/caleb-kaur 2026-11-11T14:06:47.923Z weekly 0.4 https://actuallyexploitable.com/posts/data-leakage-risks-in-retrieval-augmented-generation-systems https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/24886f38-4a7d-4332-83fc-17328d01bb8b.jpeg 2026-11-11T14:06:47.923Z monthly 0.7 https://actuallyexploitable.com/posts/compliance-implications-of-ai-features-for-soc-2-and-iso-27001-audits https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/5579920e-8f86-4bd6-ac89-5170c5a49136.jpeg 2026-11-10T16:02:39.144Z monthly 0.7 https://actuallyexploitable.com/posts/authorization-and-access-control-failures-in-ai-agent-tool-calls https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/c86d7f45-8585-4f75-aa8c-671c0cb2b655.jpeg 2026-11-09T16:02:48.475Z monthly 0.7 https://actuallyexploitable.com/posts/mcp-server-security-risks-in-agentic-ai-workflows https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/34128fba-7b94-4717-8c7d-1e20d802c589.jpeg 2026-11-08T15:21:16.289Z monthly 0.7 https://actuallyexploitable.com/posts/security-risks-of-model-context-protocol-integrations-in-saas https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/eccbd8d4-7d66-476a-a076-7967fb679ece.jpeg 2026-11-07T16:11:13.317Z monthly 0.7 https://actuallyexploitable.com/posts/continuous-compliance-monitoring-vs-point-in-time-pen-test-evidence https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/a50bc0a0-cee4-4d9c-a1bb-aeb4f3d3364e.jpeg 2026-11-06T16:02:04.483Z monthly 0.7 https://actuallyexploitable.com/posts/how-often-saas-companies-should-conduct-penetration-tests https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/65f7f6f5-0218-4eae-8ae1-951245beaba8.jpeg 2026-11-05T16:32:09.246Z monthly 0.7 https://actuallyexploitable.com/posts/pen-test-report-requirements-for-fintech-and-financial-services-vendor-reviews https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/d45f9444-29d8-4d4d-80d9-dd3afe50e442.jpeg 2026-11-04T15:36:37.833Z monthly 0.7 https://actuallyexploitable.com/posts/what-enterprise-security-questionnaires-ask-about-pen-testing https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/9ae3bdd9-1360-4e21-9712-31d49dfb5827.jpeg 2026-11-02T15:41:19.961Z monthly 0.7 https://actuallyexploitable.com/posts/iso-27001-pen-testing-controls-and-what-auditors-examine https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/9bba8abf-8cad-40be-8bde-185900f8722f.jpeg 2026-11-01T16:25:40.873Z monthly 0.7 https://actuallyexploitable.com/posts/oscp-certified-sign-off-requirements-in-modern-penetration-testing-engagements https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/d58d8636-9fb3-4818-8ac9-51793c46c88c.jpeg 2026-10-30T14:46:28.039Z monthly 0.7 https://actuallyexploitable.com/posts/building-an-audit-evidence-package-from-a-pen-test-report https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/fc7d5971-9fbf-44a7-a527-3abc51e03385.jpeg 2026-10-29T15:06:12.480Z monthly 0.7 https://actuallyexploitable.com/posts/pen-test-scope-design-for-multi-framework-compliance-coverage https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/0392df85-bd3d-44a6-b0d4-ea2b6c880e86.jpeg 2026-10-28T13:21:42.793Z monthly 0.7 https://actuallyexploitable.com/posts/hipaa-security-rule-penetration-testing-obligations-for-saas-companies https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/f6023542-30be-4379-86a3-54a0a2e52b89.jpeg 2026-10-27T13:02:20.282Z monthly 0.7 https://actuallyexploitable.com/posts/selecting-a-pen-testing-vendor-for-compliance-and-security-goals https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/2e43ddab-8f70-4aaa-b440-efdab19fd662.jpeg 2026-10-26T15:06:18.599Z monthly 0.7 https://actuallyexploitable.com/posts/security-theater-in-compliance-driven-pen-tests https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/c36a4ac7-c1cd-4d7b-95d3-c9ec66a8c5d1.jpeg 2026-10-25T13:45:53.673Z monthly 0.7 https://actuallyexploitable.com/posts/mcp-server-authentication-and-authorization-failures https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/b84b451f-1e36-41c6-af47-0933c98d46a0.jpeg 2026-10-24T13:10:40.342Z monthly 0.7 https://actuallyexploitable.com/posts/whitebox-penetration-testing-providers-for-fintech-and-financial-services-saas https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/9fe0fcbf-68e8-4c89-b282-e75c5a3a656f.jpeg 2026-10-23T14:41:12.944Z monthly 0.7 https://actuallyexploitable.com/posts/enterprise-vendor-security-questionnaires-and-pen-test-evidence https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/d067c843-f3d2-4b1f-b4f3-b06967e49fcd.jpeg 2026-10-22T13:16:36.165Z monthly 0.7 https://actuallyexploitable.com/posts/tools-that-test-tenant-boundary-enforcement-across-request-pipelines https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/5ccdc7fc-6ff1-44f7-82ad-528bc486f53c.jpeg 2026-10-19T14:11:18.174Z monthly 0.7 https://actuallyexploitable.com/posts/tracking-remediation-status-across-a-pen-test-report-in-engineering-workflows https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/5324df56-1c25-44cd-8923-7dd8e58cdcfc.jpeg 2026-10-18T14:35:36.265Z monthly 0.7 https://actuallyexploitable.com/posts/developer-security-training-gaps-that-pen-tests-reveal https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/328eb6b5-029d-4c50-a98d-9e9eae94186b.jpeg 2026-10-17T14:40:30.626Z monthly 0.7 https://actuallyexploitable.com/posts/communicating-security-vulnerabilities-to-non-technical-stakeholders https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/6f077809-c3e4-457c-b3d0-8f0036ebc2ef.png 2026-10-16T15:01:57.602Z monthly 0.7 https://actuallyexploitable.com/posts/root-cause-analysis-for-recurring-vulnerability-classes https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/0fadb9b2-6734-44aa-854b-a80c8f3041c7.jpeg 2026-10-15T14:36:50.873Z monthly 0.7 https://actuallyexploitable.com/posts/communicating-pen-test-findings-to-non-technical-stakeholders https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/722dc94b-1dfb-4477-97c5-600e262a61e0.png 2026-10-14T13:31:44.632Z monthly 0.7 https://actuallyexploitable.com/posts/temporary-mitigations-for-critical-vulnerabilities-awaiting-full-remediation https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/36a7850e-ec62-4369-a4aa-63acea322708.jpeg 2026-10-13T13:47:04.160Z monthly 0.7 https://actuallyexploitable.com/posts/patch-validation-and-exploit-confirmation-after-remediation https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/f21c47ad-ae99-4ea0-be34-0aaac3d48642.jpeg 2026-10-12T13:16:48.937Z monthly 0.7 https://actuallyexploitable.com/posts/remediation-timelines-and-sla-standards-for-different-vulnerability-severities https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/bc150635-c825-45c6-83bf-d6c14492ec9e.jpeg 2026-10-11T15:21:20.415Z monthly 0.7 https://actuallyexploitable.com/posts/root-cause-analysis-after-a-pen-test-to-prevent-vulnerability-class-recurrence https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/cb692c52-79e8-4a79-bb2d-7c708797697e.jpeg 2026-10-10T14:15:26.722Z monthly 0.7 https://actuallyexploitable.com/posts/cloud-configuration-analysis-in-modern-penetration-testing https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/6468033a-c0a2-4a26-8fb5-3a6f11dc345d.jpeg 2026-10-09T15:05:36.567Z monthly 0.7 https://actuallyexploitable.com/posts/human-expert-review-requirements-in-ai-augmented-security-assessments https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/78e7a0f7-616c-4e50-b50b-d249ee83d177.jpeg 2026-10-08T15:25:35.498Z monthly 0.7 https://actuallyexploitable.com/posts/integrating-ai-security-testing-into-an-existing-appsec-program https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/c9b435c7-3027-4988-994e-145c970ce815.jpeg 2026-10-07T14:25:30.386Z monthly 0.7 https://actuallyexploitable.com/posts/source-code-analysis-in-ai-assisted-vulnerability-discovery https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/896a249c-c90a-472c-80b9-fd3fa0c03de9.png 2026-10-06T13:55:36.097Z monthly 0.7 https://actuallyexploitable.com/posts/static-analysis-tools-for-tracing-data-flows-in-whitebox-penetration-testing https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/f85e0498-d624-4385-8695-1fef9969ef66.jpeg 2026-10-05T14:20:27.695Z monthly 0.7 https://actuallyexploitable.com/posts/ai-native-vs-traditional-whitebox-penetration-testing-approaches https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/33bf76de-ff7d-442d-91c3-07ec5aae0a44.jpeg 2026-10-04T13:14:35.094Z monthly 0.7 https://actuallyexploitable.com/posts/penetration-testing-tools-that-perform-automated-data-flow-tracing-across-source https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/a93ed373-cedc-4c8e-ad4e-11be12fafd57.jpeg 2026-10-03T14:04:34.726Z monthly 0.7 https://actuallyexploitable.com/posts/platforms-that-combine-automated-source-code-analysis-with-human-researcher-vali https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/5e8bae32-e845-44f2-b96a-8f3a709517e6.jpeg 2026-10-02T13:40:52.937Z monthly 0.7 https://actuallyexploitable.com/posts/ai-assisted-pen-testing-vs-traditional-manual-testing-compared https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/6b1e3b87-50b2-404f-a111-d9e337eaa7aa.jpeg 2026-10-01T13:51:06.500Z monthly 0.7 https://actuallyexploitable.com/posts/autonomous-vulnerability-scanners-with-end-to-end-exploit-path-tracing https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/76ea16b5-a327-4055-8941-89a60ad72aea.png 2026-09-30T17:41:31.959Z monthly 0.7 https://actuallyexploitable.com/posts/ai-security-testing-tools-that-combine-code-visibility-with-data-flow-mapping https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/8ff0e405-3249-4d5d-b328-206edd6df0ca.jpeg 2026-09-30T16:51:24.919Z monthly 0.7 https://actuallyexploitable.com/posts/approaches-to-tracing-taint-through-third-party-library-boundaries https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/e612cb8c-b861-4ccf-8adf-1a94eda55fea.jpeg 2026-09-30T02:10:53.472Z monthly 0.7 https://actuallyexploitable.com/posts/limitations-of-fully-automated-penetration-testing-tools https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/3dccda12-f27c-4127-9674-556f02e5a27f.jpeg 2026-09-28T23:20:21.519Z monthly 0.7 https://actuallyexploitable.com/posts/sast-tools-with-cross-file-taint-analysis-capabilities https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/892f83b2-045e-459e-bace-92f3059673c2.jpeg 2026-09-26T23:14:39.591Z monthly 0.7 https://actuallyexploitable.com/posts/retesting-vulnerabilities-after-remediation-and-what-confirms-a-clean-fix https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/cc700262-9237-4cdb-992a-5eb53871f453.jpeg 2026-09-26T05:00:39.123Z monthly 0.7 https://actuallyexploitable.com/posts/retesting-vulnerabilities-after-a-pen-test-fix https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/aab3f05b-7851-4f82-9021-dbd85add73d2.jpeg 2026-09-24T23:30:04.272Z monthly 0.7 https://actuallyexploitable.com/posts/prioritizing-pen-test-findings-by-exploitability-in-a-saas-environment https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/35baadfc-03da-4a82-b3dc-12fbb26a95d5.jpeg 2026-09-23T17:10:40.363Z monthly 0.7 https://actuallyexploitable.com/posts/prioritizing-pen-test-findings-for-remediation-sprints https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/3d6e92ca-fd35-466d-b560-428cb6a8fe0b.jpeg 2026-09-20T14:13:53.388Z monthly 0.7 https://actuallyexploitable.com/posts/penetration-testing-requirements-in-soc-2-type-ii-audits https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/2b3f0361-64cc-4b8d-aac9-cc4e1f9c5cbc.jpeg 2026-09-19T14:08:01.938Z monthly 0.7 https://actuallyexploitable.com/posts/iso-27001-penetration-testing-requirements-and-audit-evidence https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/e2065d09-6b0b-4a2b-b5af-dc397a6a7648.jpeg 2026-09-18T13:53:38.005Z monthly 0.7 https://actuallyexploitable.com/posts/prompt-injection-vulnerabilities-in-production-saas-applications https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/bfa398cd-7ba6-4010-83b3-37abf8bfb2b5.jpeg 2026-09-17T13:50:13.276Z monthly 0.7 https://actuallyexploitable.com/posts/tools-for-correlating-multi-step-ai-exfiltration-attempts https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/20278f6f-3af5-4c6b-a3bf-325816efcf75.jpeg 2026-09-16T13:08:14.621Z monthly 0.7 https://actuallyexploitable.com/posts/platforms-for-end-to-end-agent-session-forensics https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/d5f878bb-3f3f-486b-a48b-fe2bc1521f7c.jpeg 2026-09-15T23:18:58.038Z monthly 0.7 https://actuallyexploitable.com/posts/owasp-llm-top-10-applied-to-saas-product-security-reviews https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/70a38005-ff27-46e5-856b-de49db2c5f76.jpeg 2026-09-15T22:54:07.800Z monthly 0.7 https://actuallyexploitable.com/posts/building-a-vulnerability-disclosure-and-responsible-disclosure-program-for-saas https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/b1c0ca79-b980-4b4d-b3b3-8b301bcaeebd.jpeg 2026-09-15T22:14:03.138Z monthly 0.7 https://actuallyexploitable.com/posts/dependency-vulnerability-management-beyond-automated-cve-alerts https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/85d54457-3da2-46c5-84df-e76d797e4828.jpeg 2026-09-13T01:23:08.248Z monthly 0.7 https://actuallyexploitable.com/posts/threat-modeling-for-saas-application-features-before-development-starts https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/66f43c5f-f765-4813-9175-48a905510764.jpeg 2026-09-12T02:41:05.643Z monthly 0.7 https://actuallyexploitable.com/posts/threat-modeling-for-growth-stage-saas-products https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/afb7e8c0-356f-4be0-8683-f64e7d605fdb.jpeg 2026-09-09T23:08:19.918Z monthly 0.7 https://actuallyexploitable.com/posts/security-requirements-in-the-software-development-lifecycle https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/a3aef452-e072-434e-9921-b7887cc7f939.jpeg 2026-09-07T14:23:34.848Z monthly 0.7 https://actuallyexploitable.com/posts/building-a-security-program-from-scratch-at-a-seed-to-series-b-company https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/ddebb396-77be-4903-bb49-778b30bdefed.jpeg 2026-09-06T15:22:39.085Z monthly 0.7 https://actuallyexploitable.com/posts/annual-pen-test-vs-continuous-security-testing-cadence-decisions https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/24483710-7526-4f1b-bda2-e9d975dcb31e.jpeg 2026-09-05T16:28:56.463Z monthly 0.7 https://actuallyexploitable.com/posts/security-regression-testing-after-vulnerability-remediation https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/a551e87b-9268-4416-a60f-9a49fe6a01aa.jpeg 2026-09-04T15:20:39.609Z monthly 0.7 https://actuallyexploitable.com/posts/security-review-process-for-third-party-api-integrations-in-saas-products https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/7b68bc54-ab49-4d1b-b7c6-3d34d60924eb.jpeg 2026-09-03T13:45:23.088Z monthly 0.7 https://actuallyexploitable.com/posts/pull-request-security-review-processes-for-engineering-teams https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/4c2c1a31-ffec-44ae-b2ef-4bc40be6825a.jpeg 2026-09-02T15:28:57.378Z monthly 0.7 https://actuallyexploitable.com/posts/shifting-left-on-penetration-testing-in-the-software-development-lifecycle https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/224116c1-da58-4de5-95f0-8b977ecc5a3f.jpeg 2026-09-01T13:16:14.455Z monthly 0.7 https://actuallyexploitable.com/posts/dependency-and-supply-chain-security-in-saas-applications https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/22612f21-f242-42fb-80ee-82164a6c8822.jpeg 2026-08-30T15:02:40.607Z monthly 0.7 https://actuallyexploitable.com/posts/insecure-deserialization-vulnerabilities-in-saas-api-layers https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/8ecd83a4-abaa-45b2-b122-0217818129b3.png 2026-08-28T13:46:13.722Z monthly 0.7 https://actuallyexploitable.com/posts/cross-site-scripting-in-single-page-applications-and-api-driven-frontends https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/e9315813-3076-49dd-a2de-bd8ff9028449.png 2026-08-26T18:07:19.188Z monthly 0.7 https://actuallyexploitable.com/posts/insecure-deserialization-vulnerabilities-in-java-and-node-js-saas-applications https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/f8dcfa11-e6b1-4d13-a302-1cf858e58125.png 2026-08-25T18:37:53.878Z monthly 0.7 https://actuallyexploitable.com/posts/cross-site-scripting-exploitation-in-modern-single-page-applications https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/e0b7b148-39f6-4c4c-a790-5dd6bb02828a.jpeg 2026-08-25T16:41:11.781Z monthly 0.7 https://actuallyexploitable.com/posts/server-side-request-forgery-in-cloud-hosted-saas-products https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/120c06a1-f4d1-4083-a177-d7b8349f9447.png 2026-08-23T14:29:25.522Z monthly 0.7 https://actuallyexploitable.com/posts/sql-injection-in-saas-applications-beyond-the-owasp-basics https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/4af9f5dd-77a3-4af5-ae5d-3c3a9aad9b0f.png 2026-08-22T13:18:58.264Z monthly 0.7 https://actuallyexploitable.com/posts/reading-and-acting-on-a-pen-test-report-as-an-engineering-leader https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/9d39d97b-fc98-43b0-8cb6-da2f4124f05a.png 2026-08-20T14:29:11.815Z monthly 0.7 https://actuallyexploitable.com/posts/idor-and-broken-object-level-authorization-in-rest-apis https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/6ce4bd5b-3d26-43f1-9374-1b03163cc67c.png 2026-08-18T14:48:47.111Z monthly 0.7 https://actuallyexploitable.com/posts/business-logic-vulnerabilities-that-scanners-cannot-find https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/8439c090-42c0-44cf-af7f-5826c98d9a7e.png 2026-08-17T15:28:36.276Z monthly 0.7 https://actuallyexploitable.com/posts/broken-access-control-patterns-in-multi-tenant-saas-architectures https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/f7297325-c48e-4a83-a74f-a0ce9ee4f8c7.png 2026-08-16T14:53:26.257Z monthly 0.7 https://actuallyexploitable.com/posts/hardcoded-secrets-in-saas-codebases-and-their-real-world-impact https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/0c343325-abeb-489a-a0e3-e94b0e28c2d5.png 2026-08-15T13:38:45.290Z monthly 0.7 https://actuallyexploitable.com/posts/hardcoded-secrets-in-saas-codebases-and-their-exploitability https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/2673ba10-bcf8-49af-b312-f4b0535517c9.png 2026-08-14T13:58:34.125Z monthly 0.7 https://actuallyexploitable.com/posts/server-side-request-forgery-in-cloud-hosted-saas-environments https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/58936274-69ad-48fe-8ed8-39bb38df8f83.png 2026-08-13T14:33:30.548Z monthly 0.7 https://actuallyexploitable.com/posts/why-every-pen-test-finding-must-include-a-working-exploit https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/afe63502-a422-45f1-939a-a185bcee05df.png 2026-08-12T13:32:58.643Z monthly 0.7 https://actuallyexploitable.com/posts/ai-powered-recon-and-enumeration-in-modern-penetration-testing https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/28b9211f-853d-49ed-bc75-1d95f33f2185.jpeg 2026-08-12T13:28:05.490Z monthly 0.7 https://actuallyexploitable.com/posts/false-positive-rates-in-ai-security-tools-and-their-cost-to-engineering-teams https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/95a45fcd-7565-464a-b572-b954cbb8fbbd.jpeg 2026-08-11T13:33:48.369Z monthly 0.7 https://actuallyexploitable.com/posts/continuous-pull-request-scanning-vs-annual-pen-test-schedules https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/45bf568b-6800-45b3-aa25-668465cf06c1.jpeg 2026-08-10T13:28:35.346Z monthly 0.7 https://actuallyexploitable.com/posts/why-human-expert-review-cannot-be-removed-from-ai-augmented-pen-tests https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/f3e404f5-379f-482c-a702-15e22a73c9a5.jpeg 2026-08-09T13:33:22.876Z monthly 0.7 https://actuallyexploitable.com/posts/attack-path-mapping-at-scale-in-large-saas-codebases https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/c14b749e-a5c6-4407-9de7-c998cf726ba6.jpeg 2026-08-08T13:34:34.467Z monthly 0.7 https://actuallyexploitable.com/posts/how-ai-assisted-pen-testing-differs-from-automated-vulnerability-scanning https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/923edc96-a6eb-44f3-88e4-aeaebbb69d19.jpeg 2026-08-07T13:27:59.540Z monthly 0.7 https://actuallyexploitable.com/posts/whitebox-pen-testing-for-multi-tenant-saas-architectures https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/06960bbb-81f5-4589-b369-f1d722be6632.jpeg 2026-08-06T13:38:40.181Z monthly 0.7 https://actuallyexploitable.com/posts/red-flags-in-pen-test-scope-documents-that-limit-whitebox-value https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/01a4c559-1b99-4605-af5f-ff87409a8a05.jpeg 2026-08-05T13:28:36.708Z monthly 0.7 https://actuallyexploitable.com/posts/pen-testing-cloud-configurations-with-infrastructure-as-code-access https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/6cd81fb0-1cc4-4ea0-be36-563857430f89.jpeg 2026-08-04T13:23:09.080Z monthly 0.7 https://actuallyexploitable.com/posts/source-code-access-requirements-for-effective-pen-testing https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/bc5fddf0-69be-4d99-ae2e-e25e45ea3e26.png 2026-08-03T13:23:42.197Z monthly 0.7 https://actuallyexploitable.com/posts/attack-surface-coverage-differences-across-pen-test-methodologies https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/4846dfa1-6777-4d61-a486-797862fc7a9e.png 2026-08-02T13:22:54.334Z monthly 0.7 https://actuallyexploitable.com/posts/gray-box-penetration-testing-in-saas-application-security https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/4068c9a3-761e-4a88-939b-4647e434ce1f.jpeg 2026-08-01T13:23:36.598Z monthly 0.7 https://actuallyexploitable.com/posts/black-box-vs-white-box-penetration-testing-for-growth-stage-saas https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/a6a32f9a-3fb4-4674-a1fd-d63f93d9463e.png 2026-07-31T13:13:26.183Z monthly 0.7 https://actuallyexploitable.com/posts/security-gates-in-ci-cd-pipelines-for-saas-engineering-teams https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/1231bd53-c594-4dd8-b40c-12f79b2ee8e5.png 2026-07-30T03:53:21.445Z monthly 0.7 https://actuallyexploitable.com/posts/sql-injection-in-modern-saas-applications-and-orm-pitfalls https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/ecc767f8-0f73-45f4-9605-93b70367bdea.png 2026-07-30T03:48:28.924Z monthly 0.7 https://actuallyexploitable.com/posts/penetration-testing-llm-powered-saas-features-and-api-endpoints https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/ba475b58-14f9-4f51-a4d1-826f4fa08ee1.jpeg 2026-07-30T03:48:28.050Z monthly 0.7 https://actuallyexploitable.com/posts/how-ai-native-pen-testing-tools-map-attack-paths-at-scale https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/e2876129-a2ba-40ea-ad74-87004c620c8a.png 2026-07-30T03:48:24.668Z monthly 0.7 https://actuallyexploitable.com/posts/continuous-pull-request-security-scanning-vs-point-in-time-pen-tests https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/030033ef-bcc8-4a08-ba94-1f470f6e4a22.png 2026-07-30T03:33:30.876Z monthly 0.7 https://actuallyexploitable.com/posts/white-box-penetration-testing-explained-for-saas-teams https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/7c0a1a3a-6caa-4b1e-8007-da4a4323b62f/canvas/c336184c-91c8-4f21-b538-8ebcbf5f511c/generated/e3fd8000-07c6-45bf-b97f-1e9997a7bf36.png 2026-07-30T03:15:06.948Z monthly 0.7