<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://stonepathit.com/</loc></url>
  <url><loc>https://stonepathit.com/about/</loc></url>
  <url><loc>https://stonepathit.com/assessment/</loc></url>
  <url><loc>https://stonepathit.com/blog/</loc></url>
  <url><loc>https://stonepathit.com/blog/how-echos-discloses-a-vulnerability/</loc><lastmod>2026-10-15</lastmod></url>
  <url><loc>https://stonepathit.com/blog/indirect-prompt-injection-is-not-a-user-input-problem/</loc><lastmod>2026-10-07</lastmod></url>
  <url><loc>https://stonepathit.com/blog/the-attack-surface-most-teams-ignore/</loc><lastmod>2026-10-14</lastmod></url>
  <url><loc>https://stonepathit.com/blog/the-soc-2-gap-your-ai-agent-falls-through/</loc><lastmod>2026-10-07</lastmod></url>
  <url><loc>https://stonepathit.com/blog/three-questions-a-security-lead-asks-about-your-ai-agent/</loc><lastmod>2026-10-14</lastmod></url>
  <url><loc>https://stonepathit.com/blog/what-a-real-adversarial-test-report-looks-like/</loc><lastmod>2026-10-14</lastmod></url>
  <url><loc>https://stonepathit.com/blog/why-your-mcp-server-needs-a-red-team/</loc><lastmod>2026-10-07</lastmod></url>
  <url><loc>https://stonepathit.com/blog/your-agents-tool-surface-is-your-attack-surface/</loc><lastmod>2026-10-14</lastmod></url>
  <url><loc>https://stonepathit.com/contact/</loc></url>
  <url><loc>https://stonepathit.com/labs/</loc></url>
  <url><loc>https://stonepathit.com/labs/policy/</loc></url>
  <url><loc>https://stonepathit.com/privacy/</loc></url>
  <url><loc>https://stonepathit.com/research/</loc></url>
  <url><loc>https://stonepathit.com/services/</loc></url>
</urlset>
