<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://www.opsecforge.com</loc>
</url>
<url>
<loc>https://www.opsecforge.com/about</loc>
</url>
<url>
<loc>https://www.opsecforge.com/blog</loc>
</url>
<url>
<loc>https://www.opsecforge.com/blog/ai-agent-credential-security-nhi-governance-2026</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/ai-bubble-burst-api-security-post-hype-era</loc>
<lastmod>2026-08-16</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/ai-native-api-gateway-security-for-enterprise-2026</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/ai-sycophancy-security-chatbot-bias-2026</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/api-json-response-security-blindspot-2026</loc>
<lastmod>2026-08-09</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/api-key-leaks-credential-security</loc>
<lastmod>2026-07-29</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/api-rate-limiting-bypass-attacks-2026</loc>
<lastmod>2026-08-20</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/bola-broken-object-level-authorization-api-2026</loc>
<lastmod>2026-08-07</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/cve-2026-29000-pac4j-jwt-authentication-bypass-2026</loc>
<lastmod>2026-07-30</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/cve-2026-33143-webhook-signature-verification-bypass-2026</loc>
<lastmod>2026-08-12</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/cve-2026-35616-fortinet-api-auth-bypass-2026</loc>
<lastmod>2026-07-31</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/cve-2026-59208-n8n-token-exchange-cross-issuer-confusion-2026</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/env-files-destroy-companies</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/environment-variable-leaks-security-risks</loc>
<lastmod>2026-07-29</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/environment-variable-security-secrets-management</loc>
<lastmod>2026-07-29</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/graphql-batching-attacks-dos-resource-exhaustion-2026</loc>
<lastmod>2026-08-17</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/hash-collision-attacks-data-integrity</loc>
<lastmod>2026-08-05</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/hash-generator-tools-data-integrity-security</loc>
<lastmod>2026-08-06</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/how-to-generate-uuids-in-browser</loc>
<lastmod>2026-08-03</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/http-request-smuggling-api-gateway-protocol-desync-2026</loc>
<lastmod>2026-08-11</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/jwt-encoder-security-token-generation-best-practices</loc>
<lastmod>2026-08-21</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/jwt-token-leak-apr-2026-analysis</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/jwt-token-vulnerabilities-authentication-security</loc>
<lastmod>2026-07-29</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/mass-assignment-api-vulnerability-orm-auto-binding-2026</loc>
<lastmod>2026-08-13</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/oauth-apps-supply-chain-breach-vercel-2026</loc>
<lastmod>2026-08-15</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/oauth-redirect-abuse-microsoft-warning-2026</loc>
<lastmod>2026-08-14</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/oauth-token-leakage-ci-cd-2026</loc>
<lastmod>2026-08-10</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/password-security-vulnerabilities-best-practices</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/secrets-sprawl-credential-leak-epidemic-2026</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/secure-coding-practices-development-security</loc>
<lastmod>2026-07-28</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/shadow-apis-the-invisible-threat-2026</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/sql-injection-modern-apis-parameterized-queries-2026</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/ssrf-api-security-guide-2026</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/webhook-signature-validation-hmac-sha256-best-practices-2026</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/blog/when-security-scanners-become-weapons-devsecops-supply-chain-march-2026</loc>
<lastmod>2026-07-24</lastmod>
</url>
<url>
<loc>https://www.opsecforge.com/case-studies</loc>
</url>
<url>
<loc>https://www.opsecforge.com/contact</loc>
</url>
<url>
<loc>https://www.opsecforge.com/faq</loc>
</url>
<url>
<loc>https://www.opsecforge.com/glossary</loc>
</url>
<url>
<loc>https://www.opsecforge.com/privacy</loc>
</url>
<url>
<loc>https://www.opsecforge.com/terms-of-service</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/base64-converter</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/env-sanitizer</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/hash-generator</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/hex-rgb-converter</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/json-beautifier</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/jwt-decoder</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/jwt-encoder</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/password-generator</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/sql-formatter</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/unix-timestamp</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/uuid-generator</loc>
</url>
<url>
<loc>https://www.opsecforge.com/tools/webhook-debugger</loc>
</url>
</urlset>
