<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://ysecurity.io/blog/</loc><lastmod>2026-11-11T21:26:21.287Z</lastmod></url><url><loc>https://ysecurity.io/blog/agentic-ai-least-privilege/</loc><lastmod>2026-11-10T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/agentic-sdlc-code-review-soc-2/</loc><lastmod>2026-09-23T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/agents-share-one-api-key/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-agent-credential-inventory/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-agent-governance-onboarding/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-agent-offboarding-checklist/</loc><lastmod>2026-10-28T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-agent-refusal-is-not-authorization/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-agent-security-questionnaire-questions/</loc><lastmod>2026-11-03T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-agent-write-access/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-agents-both-sides-of-the-breach/</loc><lastmod>2026-10-17T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-data-bill-of-materials/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-governance-maturity-model/</loc><lastmod>2026-10-27T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-penetration-testing/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-policy-to-proof-evidence-buyers-accept/</loc><lastmod>2026-11-06T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-readiness-assessment/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/ai-security-questions-enterprise-buyers-2027/</loc><lastmod>2026-11-06T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/artex-ai-hacking-tool/</loc><lastmod>2026-11-11T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/authorization-last-layer/</loc><lastmod>2026-10-12T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/autonomous-ai-cyberattacks/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/binance-hack-explained/</loc><lastmod>2026-11-11T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/building-a-cybersecurity-startup/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/counter-drone-technology/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/deepfake-detection-vs-identity/</loc><lastmod>2026-11-04T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/defense-tech-startup/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/device-bound-credentials/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/enabled-isnt-enforced/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/enterprise-browser-security/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/env-file-first-security-program/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/harvest-now-decrypt-later/</loc><lastmod>2026-11-10T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/health-system-security-review-baa/</loc><lastmod>2026-11-03T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/hiring-a-fractional-ciso/</loc><lastmod>2026-10-30T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/hiring-is-now-an-attack-surface/</loc><lastmod>2026-11-04T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/how-long-does-a-soc-2-audit-take/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/human-in-the-loop-is-going-away/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/immutable-backups-ransomware-recovery/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/in-house-on-demand-or-yolo/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/iot-device-security/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/is-your-soc-2-real/</loc><lastmod>2026-11-06T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/mcp-server-passed-review-then-it-changed/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/neuro-symbolic-ai/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/once-theyre-in-blast-radius-playbook/</loc><lastmod>2026-11-04T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/pentest-once-a-year/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/printer-security-weakest-link/</loc><lastmod>2026-09-08T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/rogue-ai-agents-nobody-noticed/</loc><lastmod>2026-10-16T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/security-exhibit-your-startup-signed/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/security-leaders-stop-saying-no/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/security-slide-board-deck/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/series-a-first-90-days-security/</loc><lastmod>2026-11-11T21:26:21.287Z</lastmod></url><url><loc>https://ysecurity.io/blog/shadow-ai-governance/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/soc-2-in-progress/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/soc-2-not-ready-to-hire-tcsw/</loc><lastmod>2026-10-14T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/soc-2-type-1-vs-type-2/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/sshole-openssh-vulnerability/</loc><lastmod>2026-11-09T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/the-art-and-zen-of-adopting-ai/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/too-fancy-agent-50000-an-hour/</loc><lastmod>2026-09-23T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/vciso-soc-2-founder-story/</loc><lastmod>2026-10-26T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/vibe-coding-security/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/week-after-your-soc-2-report/</loc><lastmod>2026-10-15T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/what-is-a-ddq/</loc><lastmod>2026-11-03T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/what-is-a-vciso/</loc><lastmod>2026-10-30T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/what-is-deep-tech/</loc><lastmod>2026-11-10T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/what-is-soc-2/</loc><lastmod>2026-11-10T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/who-signs-for-the-agent/</loc><lastmod>2026-11-03T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/why-ai-projects-fail-scoping/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/why-shift-left-security-fails/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/your-sandbox-is-adorable/</loc><lastmod>2026-09-30T07:00:00.000Z</lastmod></url><url><loc>https://ysecurity.io/blog/zero-trust-hardware-provenance/</loc><lastmod>2026-11-02T08:00:00.000Z</lastmod></url></urlset>