<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://roastmyopsec.com/</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://roastmyopsec.com/leaderboard</loc>
<changefreq>daily</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://roastmyopsec.com/privacy</loc>
<changefreq>yearly</changefreq>
<priority>0.2</priority>
</url>
<url>
<loc>https://roastmyopsec.com/terms</loc>
<changefreq>yearly</changefreq>
<priority>0.2</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=2</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=3</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=4</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=5</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=6</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=7</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=8</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=9</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=10</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=11</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=12</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=13</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=14</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=15</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=16</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=17</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=18</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=19</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog?page=20</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.55</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/news</loc>
<lastmod>2026-08-13T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/news?page=2</loc>
<lastmod>2026-08-13T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/news?page=3</loc>
<lastmod>2026-08-13T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/news?page=4</loc>
<lastmod>2026-08-13T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/news?page=5</loc>
<lastmod>2026-08-13T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/news?page=6</loc>
<lastmod>2026-08-13T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/news?page=7</loc>
<lastmod>2026-08-13T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/safety</loc>
<lastmod>2026-08-22T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/safety?page=2</loc>
<lastmod>2026-08-22T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/safety?page=3</loc>
<lastmod>2026-08-22T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/safety?page=4</loc>
<lastmod>2026-08-22T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/safety?page=5</loc>
<lastmod>2026-08-22T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/safety?page=6</loc>
<lastmod>2026-08-22T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/safety?page=7</loc>
<lastmod>2026-08-22T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/vulnerabilities</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/vulnerabilities?page=2</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/vulnerabilities?page=3</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/vulnerabilities?page=4</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/vulnerabilities?page=5</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/vulnerabilities?page=6</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/vulnerabilities?page=7</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.45</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/website-opsec-vs-app-opsec-scan</loc>
<lastmod>2026-06-06T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/security-headers-checklist-for-public-websites</loc>
<lastmod>2025-09-07T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/dangling-cname-vs-abandoned-saas-subdomain</loc>
<lastmod>2023-05-10T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/third-party-trackers-vs-first-party-analytics</loc>
<lastmod>2026-02-07T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/server-banners-vs-stack-fingerprinting</loc>
<lastmod>2025-10-03T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/cdn-waf-fingerprints-vs-origin-exposure</loc>
<lastmod>2022-06-12T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/url-scan-vs-github-deepen</loc>
<lastmod>2026-04-16T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/how-to-read-an-opsec-score</loc>
<lastmod>2024-02-23T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/defensive-url-audit-vs-penetration-test</loc>
<lastmod>2023-05-18T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/rate-limits-vs-captcha-on-public-login</loc>
<lastmod>2025-06-05T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/security-txt-vs-public-security-contact</loc>
<lastmod>2025-09-24T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/github-actions-write-all-vs-least-privilege</loc>
<lastmod>2023-12-26T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/osv-lockfile-advisories-vs-url-scan</loc>
<lastmod>2025-01-03T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/consent-based-url-scan-vs-unsolicited-probing</loc>
<lastmod>2022-08-02T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/nel-vs-csp-reports-for-site-telemetry</loc>
<lastmod>2024-10-01T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/well-known-change-password-vs-reset-url</loc>
<lastmod>2026-06-23T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/access-control-max-age-vs-cors-preflight</loc>
<lastmod>2022-01-18T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/http-103-early-hints-vs-csp</loc>
<lastmod>2024-04-14T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/assetlinks-vs-apple-app-site-association</loc>
<lastmod>2022-03-19T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/integrity-policy-vs-sri</loc>
<lastmod>2024-06-21T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/client-hints-vs-user-agent-fingerprinting</loc>
<lastmod>2022-07-16T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/etag-vs-cache-control-for-personalized-pages</loc>
<lastmod>2023-08-28T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/web-app-manifest-vs-public-metadata</loc>
<lastmod>2026-05-12T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/alt-svc-vs-origin-ip-exposure</loc>
<lastmod>2022-02-21T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/service-worker-vs-cache-control</loc>
<lastmod>2025-10-28T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/openid-configuration-vs-security-txt</loc>
<lastmod>2024-11-30T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/tls-12-vs-tls-13-for-public-sites</loc>
<lastmod>2026-03-05T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/ocsp-stapling-vs-must-staple</loc>
<lastmod>2024-11-05T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/http2-vs-http3-for-public-sites</loc>
<lastmod>2024-05-01T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/server-timing-vs-server-banners</loc>
<lastmod>2025-10-20T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/humans-txt-vs-security-txt</loc>
<lastmod>2024-05-18T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/ads-txt-vs-app-ads-txt</loc>
<lastmod>2022-02-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/llms-txt-vs-robots-txt</loc>
<lastmod>2024-08-20T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/bimi-vs-dmarc-for-brand-email</loc>
<lastmod>2022-04-22T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/cdn-cache-key-vs-cache-control</loc>
<lastmod>2022-06-03T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/ipv6-aaaa-vs-origin-ip-exposure</loc>
<lastmod>2024-06-30T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/webauthn-vs-password-for-public-login</loc>
<lastmod>2026-05-20T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/topics-api-vs-third-party-cookies</loc>
<lastmod>2026-03-22T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/related-website-sets-vs-partitioned-cookies</loc>
<lastmod>2025-07-18T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/fedcm-vs-third-party-cookies</loc>
<lastmod>2023-10-27T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/private-state-tokens-vs-captcha</loc>
<lastmod>2025-04-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/amp-vs-signed-http-exchanges</loc>
<lastmod>2022-03-02T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/attribution-reporting-vs-topics-api</loc>
<lastmod>2022-03-27T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/fenced-frames-vs-iframe-sandbox</loc>
<lastmod>2023-11-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/shared-storage-api-vs-topics-api</loc>
<lastmod>2025-11-14T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/indexnow-vs-google-sitemap-ping</loc>
<lastmod>2024-06-13T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/x-robots-tag-vs-meta-robots</loc>
<lastmod>2026-08-13T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/noindex-vs-robots-txt-disallow</loc>
<lastmod>2024-10-18T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/rel-canonical-vs-301-for-duplicates</loc>
<lastmod>2025-07-01T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/json-ld-vs-microdata-for-public-sites</loc>
<lastmod>2024-07-08T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/open-graph-vs-twitter-cards</loc>
<lastmod>2024-11-13T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/rss-vs-atom-for-security-blogs</loc>
<lastmod>2025-08-12T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/hreflang-vs-canonical-single-language</loc>
<lastmod>2024-03-03T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/webmention-vs-pingback-for-public-blogs</loc>
<lastmod>2026-05-29T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/preload-vs-modulepreload-for-public-pages</loc>
<lastmod>2025-03-29T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/fetchpriority-vs-loading-lazy</loc>
<lastmod>2023-11-22T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/content-language-vs-html-lang</loc>
<lastmod>2022-08-10T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/last-modified-vs-sitemap-lastmod</loc>
<lastmod>2024-08-03T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/pagination-rel-next-vs-view-all</loc>
<lastmod>2025-01-12T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/organization-jsonld-vs-website-jsonld</loc>
<lastmod>2024-12-09T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/breadcrumb-jsonld-vs-visible-nav</loc>
<lastmod>2022-04-30T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/gpc-vs-dnt-privacy-signals</loc>
<lastmod>2024-01-20T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/ai-crawlers-vs-search-crawlers-robots</loc>
<lastmod>2022-02-13T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/rel-me-vs-sameas-for-brand-identity</loc>
<lastmod>2025-07-09T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/link-rel-describedby-vs-llms-txt</loc>
<lastmod>2024-08-11T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/security-txt-expires-vs-stale-contact</loc>
<lastmod>2025-09-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/host-header-vs-sni-on-shared-tls</loc>
<lastmod>2024-02-06T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-vs-x-frame-options-for-clickjacking</loc>
<lastmod>2023-04-06T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/httponly-vs-secure-vs-samesite-cookies</loc>
<lastmod>2024-05-10T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/hsts-vs-https-redirect-for-marketing-sites</loc>
<lastmod>2024-03-28T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/spf-vs-dkim-vs-dmarc-email-opsec</loc>
<lastmod>2025-12-18T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/mixed-content-vs-https-for-marketing-sites</loc>
<lastmod>2024-09-14T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/cache-control-public-vs-private-for-personalized-pages</loc>
<lastmod>2022-05-17T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csrf-tokens-vs-samesite-for-state-changing-forms</loc>
<lastmod>2023-04-23T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/referrer-policy-vs-url-leaks</loc>
<lastmod>2025-06-22T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/dns-hygiene-vs-dnssec-and-registrar-lock</loc>
<lastmod>2023-06-13T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/permissions-policy-vs-device-apis</loc>
<lastmod>2025-02-06T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/x-content-type-options-nosniff-vs-mime-sniffing</loc>
<lastmod>2026-08-05T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/localstorage-vs-httponly-cookies-for-sessions</loc>
<lastmod>2024-08-28T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/certificate-expiry-vs-hsts-for-public-sites</loc>
<lastmod>2022-06-20T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/host-prefix-vs-secure-prefix-cookies</loc>
<lastmod>2024-02-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/caa-records-vs-registrar-lock</loc>
<lastmod>2022-05-09T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/coop-vs-coep-for-cross-origin-isolation</loc>
<lastmod>2022-09-05T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/www-vs-apex-canonical-host-https</loc>
<lastmod>2026-07-27T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/dns-prefetch-vs-referrer-policy</loc>
<lastmod>2023-06-21T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-report-only-vs-enforcing-csp</loc>
<lastmod>2023-02-05T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-nonces-vs-hashes-for-scripts</loc>
<lastmod>2023-01-19T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/clear-site-data-vs-cookie-expiry-on-logout</loc>
<lastmod>2022-07-07T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/feature-policy-vs-permissions-policy</loc>
<lastmod>2023-10-18T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/samesite-none-vs-lax-for-embeds</loc>
<lastmod>2025-08-21T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/partitioned-cookies-vs-samesite-none</loc>
<lastmod>2025-01-20T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-report-uri-vs-report-to</loc>
<lastmod>2023-02-14T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/trusted-types-vs-csp-for-dom-xss</loc>
<lastmod>2026-03-30T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/x-xss-protection-vs-csp</loc>
<lastmod>2026-08-22T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/expect-ct-vs-certificate-transparency</loc>
<lastmod>2023-09-06T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/origin-vs-referer-for-csrf-defense</loc>
<lastmod>2024-12-26T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/fetch-metadata-vs-origin-for-csrf</loc>
<lastmod>2023-11-13T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/upgrade-insecure-requests-vs-hsts</loc>
<lastmod>2026-04-08T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-form-action-vs-open-redirects</loc>
<lastmod>2022-11-29T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/speculation-rules-vs-dns-prefetch</loc>
<lastmod>2025-12-10T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/origin-agent-cluster-vs-coop</loc>
<lastmod>2024-12-17T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/iframe-sandbox-vs-csp-frame-ancestors</loc>
<lastmod>2024-06-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/document-policy-vs-permissions-policy</loc>
<lastmod>2023-07-17T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/hsts-preload-vs-includesubdomains</loc>
<lastmod>2024-03-20T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-base-uri-vs-open-redirects</loc>
<lastmod>2022-10-17T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-connect-src-vs-javascript-api-keys</loc>
<lastmod>2022-11-03T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-object-src-vs-plugins</loc>
<lastmod>2023-01-28T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-worker-src-vs-script-src</loc>
<lastmod>2023-04-14T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/storage-access-api-vs-partitioned-cookies</loc>
<lastmod>2026-01-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-style-src-vs-unsafe-inline</loc>
<lastmod>2023-03-28T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-frame-src-vs-object-src</loc>
<lastmod>2022-12-16T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-img-src-vs-mixed-content</loc>
<lastmod>2022-12-25T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/mta-sts-vs-dmarc-for-email-opsec</loc>
<lastmod>2024-09-23T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/tls-rpt-vs-mta-sts-for-email</loc>
<lastmod>2026-03-13T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/private-network-access-vs-cors</loc>
<lastmod>2025-04-07T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/dane-tlsa-vs-caa-for-public-sites</loc>
<lastmod>2023-05-01T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-font-src-vs-hosted-web-fonts</loc>
<lastmod>2022-11-20T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-media-src-vs-mixed-content</loc>
<lastmod>2023-01-11T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-require-sri-for-vs-integrity-policy</loc>
<lastmod>2023-02-22T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-sandbox-vs-iframe-sandbox</loc>
<lastmod>2023-03-03T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-manifest-src-vs-web-app-manifest</loc>
<lastmod>2023-01-02T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-default-src-vs-named-directives</loc>
<lastmod>2022-11-12T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-script-src-elem-vs-script-src</loc>
<lastmod>2023-03-11T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-child-src-vs-worker-src</loc>
<lastmod>2022-10-26T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/cookie-max-age-vs-session-cookies</loc>
<lastmod>2022-08-19T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/samesite-strict-vs-lax-for-login</loc>
<lastmod>2025-08-29T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-strict-dynamic-vs-nonce-allowlists</loc>
<lastmod>2023-03-20T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/referrer-policy-no-referrer-vs-strict-origin</loc>
<lastmod>2025-06-14T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/csp-frame-ancestors-none-vs-self</loc>
<lastmod>2022-12-07T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/hsts-max-age-six-months-vs-two-years</loc>
<lastmod>2024-03-11T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/permissions-policy-unload-vs-beforeunload</loc>
<lastmod>2025-01-29T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/coop-allow-popups-vs-same-origin</loc>
<lastmod>2022-08-27T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/min-tls-version-cdn-vs-origin</loc>
<lastmod>2024-09-06T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/set-cookie-priority-vs-max-age</loc>
<lastmod>2025-11-06T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/exposed-git-vs-env-on-production</loc>
<lastmod>2023-09-14T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/public-javascript-api-keys-vs-server-secrets</loc>
<lastmod>2025-05-02T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/robots-txt-disallow-vs-access-control</loc>
<lastmod>2025-08-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/production-source-maps-when-they-leak</loc>
<lastmod>2025-04-24T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/cors-wildcard-vs-allowlist-for-public-apis</loc>
<lastmod>2022-09-30T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/subresource-integrity-vs-unpinned-cdn-scripts</loc>
<lastmod>2026-01-13T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/graphql-introspection-vs-production-apis</loc>
<lastmod>2024-01-29T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/http-trace-vs-least-privilege-methods</loc>
<lastmod>2024-04-23T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/verbose-api-errors-vs-generic-client-messages</loc>
<lastmod>2026-04-25T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/admin-login-discoverability-vs-access-control</loc>
<lastmod>2022-01-27T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/open-redirects-vs-tokens-in-urls</loc>
<lastmod>2024-11-22T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/soft-404-vs-hard-404-for-sensitive-paths</loc>
<lastmod>2025-12-01T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/app-auth-paths-vs-website-login</loc>
<lastmod>2022-03-10T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/directory-listing-vs-403-for-backup-folders</loc>
<lastmod>2023-06-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/public-package-json-vs-lockfile-advisories</loc>
<lastmod>2025-05-11T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/ds-store-vs-directory-listing-on-production</loc>
<lastmod>2023-07-25T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/dump-sql-vs-backup-zip-on-production</loc>
<lastmod>2023-08-03T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/wordpress-xmlrpc-vs-wp-login</loc>
<lastmod>2026-07-10T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/phpmyadmin-vs-wp-admin-public-origin</loc>
<lastmod>2025-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/timing-allow-origin-vs-cors</loc>
<lastmod>2026-02-24T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/corp-vs-cors-for-embedding-isolation</loc>
<lastmod>2022-09-13T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/cors-credentials-vs-wildcard-origins</loc>
<lastmod>2022-09-22T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/thumbs-db-vs-ds-store-on-production</loc>
<lastmod>2026-02-16T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/jsonp-vs-cors-for-public-apis</loc>
<lastmod>2024-07-17T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/sitemap-xml-vs-robots-txt-for-hidden-paths</loc>
<lastmod>2025-11-23T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/phpinfo-vs-verbose-api-errors</loc>
<lastmod>2025-02-23T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/htaccess-vs-web-config-on-production</loc>
<lastmod>2024-04-06T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/websocket-vs-cors-for-browser-apis</loc>
<lastmod>2026-06-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/postmessage-vs-cors-for-embeds</loc>
<lastmod>2025-03-21T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/access-control-expose-headers-vs-cors</loc>
<lastmod>2022-01-10T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/framework-debug-vs-verbose-api-errors</loc>
<lastmod>2023-12-09T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/server-status-vs-phpinfo-on-production</loc>
<lastmod>2025-10-11T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/swagger-ui-vs-graphql-introspection</loc>
<lastmod>2026-01-21T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/spring-actuator-vs-server-status</loc>
<lastmod>2025-12-27T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/elmah-vs-trace-axd-on-production</loc>
<lastmod>2023-08-11T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/crossdomain-xml-vs-cors-for-public-apis</loc>
<lastmod>2022-10-09T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/desktop-ini-vs-thumbs-db-on-production</loc>
<lastmod>2023-05-27T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/env-example-vs-env-on-production</loc>
<lastmod>2023-08-20T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/vscode-folder-vs-ds-store-on-production</loc>
<lastmod>2026-05-03T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/exposed-svn-vs-git-on-production</loc>
<lastmod>2023-10-10T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/dockerfile-vs-package-json-on-production</loc>
<lastmod>2023-06-30T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/composer-json-vs-package-json-on-production</loc>
<lastmod>2022-07-24T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/wordpress-debug-log-vs-framework-debug</loc>
<lastmod>2026-07-02T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/wp-config-bak-vs-env-on-production</loc>
<lastmod>2026-07-19T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/exposed-hg-vs-git-on-production</loc>
<lastmod>2023-09-23T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/requirements-txt-vs-package-json-on-production</loc>
<lastmod>2025-07-26T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/gemfile-vs-package-json-on-production</loc>
<lastmod>2023-12-17T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/firebase-json-vs-package-json-on-production</loc>
<lastmod>2023-11-30T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/go-mod-vs-package-json-on-production</loc>
<lastmod>2024-01-12T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/cargo-toml-vs-package-json-on-production</loc>
<lastmod>2022-05-26T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/pubspec-yaml-vs-package-json-on-production</loc>
<lastmod>2025-05-19T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/npmrc-vs-npm-token-on-production</loc>
<lastmod>2024-10-27T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/dockerignore-vs-dockerfile-on-production</loc>
<lastmod>2023-07-08T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/kubeconfig-vs-env-on-production</loc>
<lastmod>2024-07-25T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/aws-credentials-file-vs-env-on-production</loc>
<lastmod>2022-04-05T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/id-rsa-vs-env-on-production</loc>
<lastmod>2024-05-27T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/backup-sql-gz-vs-dump-sql</loc>
<lastmod>2022-04-13T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/rails-master-key-vs-env-on-production</loc>
<lastmod>2025-05-28T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/next-env-local-vs-env-on-production</loc>
<lastmod>2024-10-10T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/terraform-tfstate-vs-env-on-production</loc>
<lastmod>2026-01-30T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/yarn-lock-vs-package-json-on-production</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/pnpm-lock-vs-package-json-on-production</loc>
<lastmod>2025-03-12T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/exposed-procfile-vs-package-json</loc>
<lastmod>2023-10-01T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/circleci-config-vs-github-workflows-on-production</loc>
<lastmod>2022-06-29T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/gitmodules-vs-git-head-on-production</loc>
<lastmod>2024-01-03T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/php-user-ini-vs-htaccess-on-production</loc>
<lastmod>2025-02-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://roastmyopsec.com/llms.txt</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://roastmyopsec.com/llms-full.txt</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://roastmyopsec.com/blog/rss.xml</loc>
<lastmod>2026-08-31T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.3</priority>
</url>
</urlset>
