<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

  <!-- Homepage — update lastmod whenever a new blog post or package is added -->
  <url>
    <loc>https://www.restingowl.com/</loc>
    <lastmod>2026-05-27</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>

  <!-- About — stable, rarely changes -->
  <url>
    <loc>https://www.restingowl.com/about/</loc>
    <lastmod>2026-05-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>

  <!-- Packages listing — update lastmod when a new package is added -->
  <url>
    <loc>https://www.restingowl.com/packages/</loc>
    <lastmod>2026-05-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>

  <!-- OwlAuth — update lastmod on new version releases -->
  <url>
    <loc>https://www.restingowl.com/packages/owlauth/</loc>
    <lastmod>2026-05-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>

  <!-- Blog index — update lastmod every time a new post is published -->
  <url>
    <loc>https://www.restingowl.com/blogs/</loc>
    <lastmod>2026-05-13</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>

  <!-- Blog: What is Threat Modeling — published content, rarely changes -->
  <url>
    <loc>https://www.restingowl.com/blogs/what-is-threat-modeling/</loc>
    <lastmod>2026-05-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>

  <!-- News listing — update lastmod every time a new article is published -->
  <url>
    <loc>https://www.restingowl.com/news/</loc>
    <lastmod>2026-05-27</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>

  <!-- News: Copy Fail CVE-2026-31431 -->
  <url>
    <loc>https://www.restingowl.com/news/linux-copy-fail-cve-2026-31431/</loc>
    <lastmod>2026-05-27</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>

  <!-- News: NGINX Rift and Dirty Frag Exploit Chain -->
  <url>
    <loc>https://www.restingowl.com/news/nginx-rift-dirty-frag-exploit-chain-2026/</loc>
    <lastmod>2026-05-27</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>

  <!-- News: CISA Exchange XSS Flaw -->
  <url>
    <loc>https://www.restingowl.com/news/cisa-microsoft-exchange-xss-2026/</loc>
    <lastmod>2026-05-18</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>

  <!-- News: OpenClaw Claw Chain -->
  <url>
    <loc>https://www.restingowl.com/news/openclaw-claw-chain-vulnerabilities-2026/</loc>
    <lastmod>2026-05-18</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>


  <!-- Blog articles -->
  <url>
    <loc>https://www.restingowl.com/blogs/what-is-xss-cross-site-scripting/</loc>
    <lastmod>2026-05-14</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.restingowl.com/blogs/jwt-vs-session-tokens-security/</loc>
    <lastmod>2026-05-14</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.restingowl.com/blogs/stride-vs-dread-vs-pasta-threat-modeling/</loc>
    <lastmod>2026-05-14</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.restingowl.com/blogs/passwordless-magic-links-nodejs/</loc>
    <lastmod>2026-05-14</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.restingowl.com/blogs/haveibeenpwned-api-nodejs/</loc>
    <lastmod>2026-05-14</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>

</urlset>
