<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://isitshipshape.com/</loc></url>
  <url><loc>https://isitshipshape.com/learn</loc></url>
  <url><loc>https://isitshipshape.com/methodology</loc></url>
  <url><loc>https://isitshipshape.com/benchmark</loc></url>
  <url><loc>https://isitshipshape.com/privacy</loc></url>
  <url><loc>https://isitshipshape.com/terms</loc></url>
  <url><loc>https://isitshipshape.com/integrations</loc></url>
  <url><loc>https://isitshipshape.com/learn/is-shipshape-legit</loc></url>
  <url><loc>https://isitshipshape.com/learn/supabase-anon-vs-service-role-key</loc></url>
  <url><loc>https://isitshipshape.com/learn/firebase-apikey-is-public</loc></url>
  <url><loc>https://isitshipshape.com/learn/can-chatgpt-check-my-app-security</loc></url>
  <url><loc>https://isitshipshape.com/learn/vibe-coder-launch-checklist</loc></url>
  <url><loc>https://isitshipshape.com/learn/supabase-database-exposed-check</loc></url>
  <url><loc>https://isitshipshape.com/learn/leaked-service-role-key</loc></url>
  <url><loc>https://isitshipshape.com/learn/lovable-app-safe-to-launch</loc></url>
  <url><loc>https://isitshipshape.com/learn/check-bolt-replit-v0-cursor-before-launch</loc></url>
  <url><loc>https://isitshipshape.com/learn/firebase-security-rules-vibe-code</loc></url>
  <url><loc>https://isitshipshape.com/learn/stop-runaway-openai-api-bill</loc></url>
  <url><loc>https://isitshipshape.com/learn/exposed-env-file-app</loc></url>
  <url><loc>https://isitshipshape.com/learn/stripe-pk-test-in-production</loc></url>
  <url><loc>https://isitshipshape.com/learn/choosing-a-vibe-coding-security-scanner</loc></url>
  <url><loc>https://isitshipshape.com/learn/how-do-scanners-test-database-rules</loc></url>
  <url><loc>https://isitshipshape.com/learn/shipshape-vs-vibe-app-scanner</loc></url>
  <url><loc>https://isitshipshape.com/learn/stripe-webhook-200-paid-state-failed</loc></url>
  <url><loc>https://isitshipshape.com/learn/supabase-rls-launch-proof-checklist</loc></url>
  <url><loc>https://isitshipshape.com/learn/gemini-api-key-wallet-drain-checklist</loc></url>
  <url><loc>https://isitshipshape.com/learn/what-shipshape-proof-packs-prove</loc></url>
  <url><loc>https://isitshipshape.com/learn/leaked-api-key-in-frontend</loc></url>
  <url><loc>https://isitshipshape.com/learn/missing-or-weak-security-headers</loc></url>
  <url><loc>https://isitshipshape.com/learn/cors-misconfiguration</loc></url>
  <url><loc>https://isitshipshape.com/learn/exposed-source-maps-in-production</loc></url>
  <url><loc>https://isitshipshape.com/learn/unvalidated-postmessage-handler</loc></url>
  <url><loc>https://isitshipshape.com/learn/dangling-dns-subdomain-takeover</loc></url>
  <url><loc>https://isitshipshape.com/learn/debug-artifacts-and-leaked-notes</loc></url>
  <url><loc>https://isitshipshape.com/learn/tls-and-email-spoofing</loc></url>
  <url><loc>https://isitshipshape.com/learn/sensitive-data-in-your-frontend</loc></url>
  <url><loc>https://isitshipshape.com/learn/outdated-or-vulnerable-dependency</loc></url>
</urlset>
