<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://redproof.dev/</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://redproof.dev/sample-report</loc><lastmod>2026-10-25</lastmod></url>
  <url><loc>https://redproof.dev/tools/supabase-policy-checker</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://redproof.dev/guides</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://redproof.dev/guides/is-supabase-anon-key-safe</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://redproof.dev/guides/enable-rls-supabase-lovable</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://redproof.dev/guides/secure-supabase-edge-functions</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://redproof.dev/guides/stop-ai-api-bill-shock</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://redproof.dev/guides/stripe-webhook-verification</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://redproof.dev/guides/lovable-app-security-checklist</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://redproof.dev/guides/how-to-check-if-ai-built-app-is-secure</loc><lastmod>2026-10-25</lastmod></url>
  <url><loc>https://redproof.dev/guides/secret-keys-in-frontend</loc><lastmod>2026-10-25</lastmod></url>
  <url><loc>https://redproof.dev/guides/bolt-app-security-checklist</loc><lastmod>2026-10-25</lastmod></url>
  <url><loc>https://redproof.dev/guides/firebase-security-rules-ai-apps</loc><lastmod>2026-10-25</lastmod></url>
  <url><loc>https://redproof.dev/guides/prompt-injection-ai-features</loc><lastmod>2026-10-25</lastmod></url>
  <url><loc>https://redproof.dev/guides/security-scanners-for-ai-built-apps</loc><lastmod>2026-10-25</lastmod></url>
  <url><loc>https://redproof.dev/research/ai-built-app-security-2026</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://redproof.dev/privacy</loc><lastmod>2026-10-23</lastmod></url>
  <url><loc>https://redproof.dev/terms</loc><lastmod>2026-10-23</lastmod></url>
</urlset>
