<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml">
<url><loc>https://nullra.com/</loc><lastmod>2026-06-15</lastmod></url><url><loc>https://nullra.com/blog/</loc><lastmod>2026-06-01</lastmod></url><url><loc>https://nullra.com/blog/before-you-write-a-rule-read-the-code/</loc><lastmod>2026-06-15</lastmod></url><url><loc>https://nullra.com/blog/the-trust-problem-in-appsec-isnt-technical-its-political/</loc><lastmod>2026-06-04</lastmod></url><url><loc>https://nullra.com/blog/coverage-progress-why-your-scan-numbers-are-lying-to-you/</loc><lastmod>2026-06-04</lastmod></url><url><loc>https://nullra.com/blog/tenant-isolation-failures-in-multi-tenant-saas-a-pattern-catalogue/</loc><lastmod>2026-06-04</lastmod></url><url><loc>https://nullra.com/blog/what-your-developers-are-sending-to-their-ai-tools-and-why-your-legal-team-would-be-upset/</loc><lastmod>2026-06-04</lastmod></url><url><loc>https://nullra.com/blog/triage-by-blast-radius-a-working-methodology-for-teams-with-more-findings-than-engineers/</loc><lastmod>2026-06-04</lastmod></url><url><loc>https://nullra.com/blog/the-invisible-payload-in-your-clipboard/</loc><lastmod>2026-06-15</lastmod></url><url><loc>https://nullra.com/search/</loc><lastmod>2026-06-01</lastmod></url>
</urlset>
