<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
<url>
<loc>https://agentsecurityreview.com</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/sections/access-control-for-agents</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/sections/agentic-ai-architecture</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/sections/agent-security-risk</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/authors/camille-voss</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/authors/cora-sinclair</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/authors/estelle-reyes</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/authors/freya-lindqvist</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/authors/maya-nakamura</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/authors/omar-bauer</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/authors/sofia-devi</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/authors/talia-kowalski</loc>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/posts/prompt-injection-attacks-on-production-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/af3736be-2267-488a-b203-600001eab93a/canvas/d85e8ef3-a733-424d-8911-5721c1627945/generated/51be352e-57ea-474d-ba80-4ee01b854722.png</image:loc>
</image:image>
<lastmod>2026-07-20T22:06:01.143Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/posts/multi-agent-system-design-patterns</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/af3736be-2267-488a-b203-600001eab93a/canvas/d85e8ef3-a733-424d-8911-5721c1627945/generated/c958ac2c-4c54-4f57-8ae4-8bbcb45c1048.png</image:loc>
</image:image>
<lastmod>2026-07-20T05:01:17.071Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/posts/least-privilege-principles-applied-to-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/af3736be-2267-488a-b203-600001eab93a/canvas/d85e8ef3-a733-424d-8911-5721c1627945/generated/2496c523-189a-42e2-b7b5-fd12f274d71f.png</image:loc>
</image:image>
<lastmod>2026-07-20T04:50:30.549Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/posts/agent-identity-and-authentication-in-distributed-systems</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/af3736be-2267-488a-b203-600001eab93a/canvas/d85e8ef3-a733-424d-8911-5721c1627945/generated/0b37d77d-f51a-42a3-8957-9d5902d7a499.png</image:loc>
</image:image>
<lastmod>2026-07-20T04:50:30.346Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/posts/revoking-and-rotating-agent-access-credentials</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/af3736be-2267-488a-b203-600001eab93a/canvas/d85e8ef3-a733-424d-8911-5721c1627945/generated/aeb53cab-d619-4360-9124-f5025092fb82.png</image:loc>
</image:image>
<lastmod>2026-07-20T04:45:32.460Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/posts/why-human-access-models-fail-for-ai-agents</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/af3736be-2267-488a-b203-600001eab93a/canvas/d85e8ef3-a733-424d-8911-5721c1627945/generated/490dff46-4560-481a-b52c-a0cb5b9811fa.png</image:loc>
</image:image>
<lastmod>2026-07-20T04:45:32.220Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/posts/agentic-ai-vs-traditional-automation-architecture</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/af3736be-2267-488a-b203-600001eab93a/canvas/d85e8ef3-a733-424d-8911-5721c1627945/generated/9389a675-7eba-46d3-9315-21e15a2a0e85.png</image:loc>
</image:image>
<lastmod>2026-07-20T04:45:30.902Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agentsecurityreview.com/posts/access-control-policy-testing-for-agentic-systems</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/af3736be-2267-488a-b203-600001eab93a/canvas/d85e8ef3-a733-424d-8911-5721c1627945/generated/c1c24544-59d4-4070-9b9e-bdd02ccc667e.png</image:loc>
</image:image>
<lastmod>2026-07-20T04:40:27.654Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
