<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml">
  <url><loc>https://www.matt.security/</loc><changefreq>weekly</changefreq><priority>1.0</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/"/></url>
  <url><loc>https://www.matt.security/audit</loc><changefreq>monthly</changefreq><priority>0.9</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/audit"/></url>
  <url><loc>https://www.matt.security/assurance</loc><changefreq>monthly</changefreq><priority>0.9</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/assurance"/></url>
  <url><loc>https://www.matt.security/ai-code</loc><changefreq>monthly</changefreq><priority>0.9</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/ai-code"/></url>
  <url><loc>https://www.matt.security/record</loc><lastmod>2026-10-21</lastmod><changefreq>monthly</changefreq><priority>0.9</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/record"/></url>
  <url><loc>https://www.matt.security/record/data</loc><lastmod>2026-10-22</lastmod><changefreq>monthly</changefreq><priority>0.6</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/record/data"/></url>
  <url><loc>https://www.matt.security/exploitops</loc><changefreq>weekly</changefreq><priority>0.9</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops"/></url>
  <url><loc>https://www.matt.security/exploitops-review</loc><changefreq>monthly</changefreq><priority>0.9</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops-review"/></url>
  <url><loc>https://www.matt.security/inside</loc><lastmod>2026-10-01</lastmod><changefreq>monthly</changefreq><priority>0.8</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/inside"/></url>
  <url><loc>https://www.matt.security/blog</loc><lastmod>2026-10-22</lastmod><changefreq>weekly</changefreq><priority>0.8</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog"/></url>
  <url><loc>https://www.matt.security/faq</loc><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/faq"/></url>
  <url><loc>https://www.matt.security/about</loc><changefreq>monthly</changefreq><priority>0.6</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/about"/></url>
  <url><loc>https://www.matt.security/press</loc><changefreq>monthly</changefreq><priority>0.5</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/press"/></url>
  <url><loc>https://www.matt.security/pentest-scope</loc><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/pentest-scope"/></url>
  <url><loc>https://www.matt.security/findings/account-takeover</loc><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/findings/account-takeover"/></url>
  <url><loc>https://www.matt.security/exploitops/attacks</loc><lastmod>2026-09-23</lastmod><changefreq>weekly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops/attacks"/></url>
  <url><loc>https://www.matt.security/exploitops/rules</loc><lastmod>2026-09-23</lastmod><changefreq>weekly</changefreq><priority>0.8</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops/rules"/></url>
  <url><loc>https://www.matt.security/blog/php2shell-explained</loc><lastmod>2026-10-22</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/php2shell-explained"/></url>
  <url><loc>https://www.matt.security/blog/what-is-an-ai-security-audit</loc><lastmod>2026-10-20</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/what-is-an-ai-security-audit"/></url>
  <url><loc>https://www.matt.security/blog/glm-5-3-open-model-close-to-mythos</loc><lastmod>2026-10-20</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/glm-5-3-open-model-close-to-mythos"/></url>
  <url><loc>https://www.matt.security/blog/the-sandbox-is-gone</loc><lastmod>2026-10-11</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/the-sandbox-is-gone"/></url>
  <url><loc>https://www.matt.security/blog/white-house-accord-on-super-intelligence</loc><lastmod>2026-09-30</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/white-house-accord-on-super-intelligence"/></url>
  <url><loc>https://www.matt.security/blog/gpt-6-1-astra-openai-shelved</loc><lastmod>2026-09-29</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/gpt-6-1-astra-openai-shelved"/></url>
  <url><loc>https://www.matt.security/blog/oracle-peoplesoft-waf-bypass</loc><lastmod>2026-09-28</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/oracle-peoplesoft-waf-bypass"/></url>
  <url><loc>https://www.matt.security/blog/nextjs-imageresponse-one-bug-two-scores</loc><lastmod>2026-09-23</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/nextjs-imageresponse-one-bug-two-scores"/></url>
  <url><loc>https://www.matt.security/blog/claude-opus-5-openai-forum-breach</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/claude-opus-5-openai-forum-breach"/></url>
  <url><loc>https://www.matt.security/blog/what-mythos-safe-means</loc><lastmod>2026-09-10</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/what-mythos-safe-means"/></url>
  <url><loc>https://www.matt.security/blog/hugging-face-breach-lessons-for-cxos</loc><lastmod>2026-10-21</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/hugging-face-breach-lessons-for-cxos"/></url>
  <url><loc>https://www.matt.security/blog/why-annual-pentests-fail-against-ai-attackers</loc><lastmod>2026-10-21</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/why-annual-pentests-fail-against-ai-attackers"/></url>
  <url><loc>https://www.matt.security/blog/ai-written-code-the-checks-reviewers-skip</loc><lastmod>2026-10-21</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/ai-written-code-the-checks-reviewers-skip"/></url>
  <url><loc>https://www.matt.security/blog/soc-2-in-the-age-of-agentic-attacks</loc><lastmod>2026-10-21</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/soc-2-in-the-age-of-agentic-attacks"/></url>
  <url><loc>https://www.matt.security/blog/ai-agents-reached-real-companies</loc><lastmod>2026-08-08</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/ai-agents-reached-real-companies"/></url>
  <url><loc>https://www.matt.security/blog/openai-models-hugging-face-breach</loc><lastmod>2026-07-24</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/openai-models-hugging-face-breach"/></url>
  <url><loc>https://www.matt.security/blog/vercel-context-ai-oauth-breach</loc><lastmod>2026-07-15</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/vercel-context-ai-oauth-breach"/></url>
  <url><loc>https://www.matt.security/blog/mozilla-271-firefox-bugs-ai</loc><lastmod>2026-07-12</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/mozilla-271-firefox-bugs-ai"/></url>
  <url><loc>https://www.matt.security/blog/ai-found-27-year-old-openbsd-bug</loc><lastmod>2026-07-08</lastmod><changefreq>monthly</changefreq><priority>0.7</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/blog/ai-found-27-year-old-openbsd-bug"/></url>
  <url><loc>https://www.matt.security/exploitops/attacks/idor-ownership</loc><lastmod>2026-07-24</lastmod><changefreq>monthly</changefreq><priority>0.6</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops/attacks/idor-ownership"/></url>
  <url><loc>https://www.matt.security/exploitops/attacks/session-revocation</loc><lastmod>2026-08-05</lastmod><changefreq>monthly</changefreq><priority>0.6</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops/attacks/session-revocation"/></url>
  <url><loc>https://www.matt.security/exploitops/attacks/metered-resource-abuse</loc><lastmod>2026-08-14</lastmod><changefreq>monthly</changefreq><priority>0.6</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops/attacks/metered-resource-abuse"/></url>
  <url><loc>https://www.matt.security/exploitops/attacks/over-broad-response</loc><lastmod>2026-08-21</lastmod><changefreq>monthly</changefreq><priority>0.6</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops/attacks/over-broad-response"/></url>
  <url><loc>https://www.matt.security/exploitops/attacks/reset-account-enumeration</loc><lastmod>2026-08-28</lastmod><changefreq>monthly</changefreq><priority>0.6</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops/attacks/reset-account-enumeration"/></url>
  <url><loc>https://www.matt.security/exploitops/attacks/unbounded-input-exhaustion</loc><lastmod>2026-09-04</lastmod><changefreq>monthly</changefreq><priority>0.6</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops/attacks/unbounded-input-exhaustion"/></url>
  <url><loc>https://www.matt.security/exploitops/attacks/prompt-injection-tooling</loc><lastmod>2026-09-12</lastmod><changefreq>monthly</changefreq><priority>0.6</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops/attacks/prompt-injection-tooling"/></url>
  <url><loc>https://www.matt.security/exploitops/attacks/untrusted-input-rendering</loc><lastmod>2026-09-23</lastmod><changefreq>monthly</changefreq><priority>0.6</priority><xhtml:link rel="alternate" hreflang="en" href="https://www.matt.security/exploitops/attacks/untrusted-input-rendering"/></url>
</urlset>
