<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url><loc>https://www.web3sec.news/</loc></url><url><loc>https://www.web3sec.news/services</loc></url><url><loc>https://www.web3sec.news/engagements</loc></url><url><loc>https://www.web3sec.news/sample-report</loc></url><url><loc>https://www.web3sec.news/approach</loc></url><url><loc>https://www.web3sec.news/about</loc></url><url><loc>https://www.web3sec.news/contact</loc></url><url><loc>https://www.web3sec.news/privacy</loc></url><url><loc>https://www.web3sec.news/editorial-policy</loc></url><url><loc>https://www.web3sec.news/methodology</loc></url><url><loc>https://www.web3sec.news/blog</loc></url><url><loc>https://www.web3sec.news/guides</loc></url><url><loc>https://www.web3sec.news/guides/agents</loc></url><url><loc>https://www.web3sec.news/tools</loc></url><url><loc>https://www.web3sec.news/tools/agent-permissions</loc></url><url><loc>https://www.web3sec.news/tools/research-preflight</loc></url><url><loc>https://www.web3sec.news/latest</loc></url><url><loc>https://www.web3sec.news/services/smart-contract-security</loc></url><url><loc>https://www.web3sec.news/services/web-api-pentesting</loc></url><url><loc>https://www.web3sec.news/services/incident-response</loc></url><url><loc>https://www.web3sec.news/services/ai-supply-chain-security</loc></url><url><loc>https://www.web3sec.news/services/technical-writing</loc></url><url><loc>https://www.web3sec.news/services/security-advisory</loc></url><url><loc>https://www.web3sec.news/services/mobile-app-security</loc></url><url><loc>https://www.web3sec.news/blog/nomad-initialization-trust</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/euler-donation-accounting</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/ledger-connect-kit-publishing</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/lastpass-vault-backups</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/okta-support-session-tokens</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/nextjs-october-november-2026-security-advisories</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/bybit-safe-signing-boundary</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/radiant-capital-developer-opsec</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/wazirx-custody-responsibility</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/snowflake-stolen-credentials</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/cloudflare-token-rotation</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/tj-actions-ci-secret-exposure</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/xz-build-artifact-trust</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/ai-agents-prompt-injection-boundaries</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/identity-mfa-recovery-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/email-account-security-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/domain-dns-security-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/developer-device-security-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/browser-extension-security-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/github-ci-security-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/package-publishing-security-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/cloud-iam-secrets-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/production-data-backup-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/api-authorization-review-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/multisig-treasury-security-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/community-support-security-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/ai-agent-mcp-security-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/incident-evidence-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/incident-tabletop-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/security-monitoring-runbook</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/frontend-third-party-script-security</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/security-writing-evidence-review</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/personal-ai-assistant-email-calendar-security</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/financial-ai-agent-permission-boundaries</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/untrusted-repository-research-sandbox</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/ai-assisted-bug-bounty-workflow</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/mcp-server-installation-review</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/agent-secrets-scope-and-recovery</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/browser-agent-session-security</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/agent-memory-retrieval-poisoning</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/agent-skills-plugin-review</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/unattended-agent-schedules-and-budgets</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/agent-localhost-network-boundaries</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/scope-mobile-app-security-test</loc><lastmod>2026-11-08</lastmod></url><url><loc>https://www.web3sec.news/blog/mobile-deep-links-session-boundaries</loc><lastmod>2026-11-08</lastmod></url></urlset>