<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://warhoundai.com/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://warhoundai.com/docs/api/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/about/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://warhoundai.com/contact/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://warhoundai.com/security/</loc><lastmod>2026-11-01</lastmod></url>
  <url><loc>https://warhoundai.com/privacy/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://warhoundai.com/terms/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://warhoundai.com/team/</loc><lastmod>2026-11-01</lastmod></url>
  <url><loc>https://warhoundai.com/business-model/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://warhoundai.com/pricing/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://warhoundai.com/product-status/</loc><lastmod>2026-11-01</lastmod></url>
  <url><loc>https://warhoundai.com/acceptable-use/</loc><lastmod>2026-10-27</lastmod></url>
  <url><loc>https://warhoundai.com/mini-hound/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://warhoundai.com/mini-hound/benchmarks/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://warhoundai.com/bloodhound/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://warhoundai.com/guides/</loc><lastmod>2026-10-20</lastmod></url>
  <url><loc>https://warhoundai.com/guides/mcp-security/</loc><lastmod>2026-11-03</lastmod></url>
  <url><loc>https://warhoundai.com/blog/zip-extraction-quotas/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/websocket-session-authorization/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/vulnerability-retest-controls/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/tenant-isolation-postgres-rls/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/sse-authorization-disconnects/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/sql-injection-parameterization/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/session-cookie-hardening/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/security-review-release-gates/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/secure-account-deletion/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/safe-security-test-fixtures/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/reasoning-token-cost-budgets/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/rate-limiting-distributed-apis/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/race-condition-entitlements/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/queue-worker-tenant-boundaries/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/proxy-forwarded-header-trust/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/presigned-upload-validation/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/payment-webhook-state-machine/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/path-traversal-download-handlers/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/object-storage-download-authorization/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/oauth-pkce-state-validation/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/nosql-injection-validation/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/mfa-recovery-design/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/mcp-tool-permissions/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/mcp-token-audience/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/jwt-validation-key-rotation/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/idempotent-job-submission/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/http-cache-private-responses/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/host-header-reset-links/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/graphql-subscription-authorization/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/finding-evidence-chain/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/email-otp-replay-prevention/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/dom-xss-safe-rendering/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/dependency-lockfiles-updates/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/database-migration-security/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/database-least-privilege/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/csrf-protection-json-apis/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/credit-wallet-reservations/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/credential-encryption-key-rotation/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/cors-origin-policy/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/content-security-policy-rollout/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/container-runtime-hardening/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/command-execution-boundaries/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/cloud-workload-identity/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/cancellation-checkpoints-security/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/cache-tenant-isolation/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/business-logic-test-matrices/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/audit-logs-secret-redaction/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/api-key-rotation-revocation/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/ai-tool-output-injection/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/ai-agent-egress-isolation/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/webhook-signature-replay-protection/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/ssrf-url-import-security/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/secure-file-upload-pipeline/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/password-reset-token-lifecycle/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/graphql-security-resource-budgets/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/php2shell-october-2026-patching-guide/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/meari-api-authorization-fixes-october-2026/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/bloodhound-reliability-accuracy-speed-targets/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/what-is-warhoundai/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/security-checklist-ai-built-apps/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/protect-api-keys-ai-built-apps/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/prompt-injection-ai-app-security/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/introducing-bloodhound/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/authorized-security-testing-scope/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/api-authorization-testing-saas/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/agentic-security-testing-vs-scanning/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/actionable-security-findings-remediation/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/blog/</loc><lastmod>2026-11-12</lastmod></url>
  <url><loc>https://warhoundai.com/website-policy/</loc><lastmod>2026-11-06</lastmod></url>
</urlset>
