<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://apona.ai/</loc><lastmod>2026-09-21</lastmod><priority>1.0</priority></url>
  <url><loc>https://apona.ai/labrador</loc><lastmod>2026-09-21</lastmod><priority>0.9</priority></url>
  <url><loc>https://apona.ai/penzzer</loc><lastmod>2026-09-21</lastmod><priority>0.9</priority></url>
  <url><loc>https://apona.ai/safe-intelligence</loc><lastmod>2026-09-21</lastmod><priority>0.9</priority></url>
  <url><loc>https://apona.ai/safe-password</loc><lastmod>2026-09-21</lastmod><priority>0.9</priority></url>
  <url><loc>https://apona.ai/partners</loc><lastmod>2026-09-21</lastmod><priority>0.9</priority></url>
  <url><loc>https://apona.ai/resources</loc><lastmod>2026-09-21</lastmod><priority>0.8</priority></url>
  <url><loc>https://apona.ai/contact</loc><lastmod>2026-09-21</lastmod><priority>0.7</priority></url>
  <url><loc>https://apona.ai/blog/</loc><lastmod>2026-09-21</lastmod><priority>0.8</priority></url>
  <url><loc>https://apona.ai/blog/the-msp-economics-of-easm-when-it-scales-with-your-book-when-it-does-not.html</loc><lastmod>2026-09-04</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/agentless-security-for-smbs-what-you-can-and-cannot-see-without-endpoint-agents.html</loc><lastmod>2026-09-02</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/nist-sp-1326-supply-chain-tiers-how-deep-does-your-dependency-map-need-to-go.html</loc><lastmod>2026-07-13</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/nist-sp-1326-foundational-cyber-practices-what-secure-sdlc-evidence-actually-loo.html</loc><lastmod>2026-07-13</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/foci-in-nist-sp-1326-what-it-means-and-what-buyers-will-ask-your-supplier.html</loc><lastmod>2026-07-13</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/nist-sp-1326-and-component-provenance-source-binary-and-the-gap-between-them.html</loc><lastmod>2026-07-13</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/nist-sp-1326-is-out-what-ict-suppliers-need-to-do-now-about-software-supply-chai.html</loc><lastmod>2026-07-13</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/a-cve-in-your-vendor-s-binary-is-not-proof-of-a-real-risk-here-s-how-to-tell-the.html</loc><lastmod>2026-07-05</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/pentest-on-every-deploy-why-continuous-penetration-testing-belongs-in-your-ci-cd.html</loc><lastmod>2026-07-05</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/binary-sca-vs-source-code-sca-why-closed-source-software-has-a-supply-chain-blin.html</loc><lastmod>2026-07-05</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/how-to-generate-a-firmware-sbom-when-you-have-no-source-code.html</loc><lastmod>2026-07-05</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/how-to-security-test-llm-and-ai-powered-applications.html</loc><lastmod>2026-07-05</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/agentic-ai-pentesting-vs-dast-scanners-why-chained-exploits-change-application-s.html</loc><lastmod>2026-07-05</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/subdomain-takeover-the-quiet-risk-hiding-in-your-wix-shopify-or-github-setup.html</loc><lastmod>2026-07-02</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/why-apona-builds-channel-heavy-the-80-20-decision-and-what-it-means-for-partners.html</loc><lastmod>2026-06-25</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/the-dual-product-channel-how-labrador-and-penzzer-fit-together-for-a-security-va.html</loc><lastmod>2026-06-25</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/the-mssp-economics-of-managed-sast-when-it-s-profitable-when-it-s-not.html</loc><lastmod>2026-06-24</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/what-an-appsec-consultancy-actually-wants-from-a-fuzzer-vendor.html</loc><lastmod>2026-06-24</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/modern-sast-is-about-precision-not-coverage-what-that-means-for-your-practice.html</loc><lastmod>2026-06-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/how-to-read-an-sbom-that-a-regulator-will-actually-accept.html</loc><lastmod>2026-06-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://apona.ai/blog/what-we-look-for-in-a-us-appsec-channel-partner.html</loc><lastmod>2026-06-16</lastmod><priority>0.6</priority></url>
</urlset>
