<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://iron.sh/</loc>
<lastmod>2026-05-07T00:01:41.650Z</lastmod>
</url>
<url>
<loc>https://iron.sh/blog</loc>
<lastmod>2026-05-07T00:01:41.650Z</lastmod>
</url>
<url>
<loc>https://iron.sh/changelog</loc>
<lastmod>2026-05-07T00:01:41.650Z</lastmod>
</url>
<url>
<loc>https://iron.sh/privacy</loc>
<lastmod>2026-05-07T00:01:41.650Z</lastmod>
</url>
<url>
<loc>https://iron.sh/security</loc>
<lastmod>2026-05-07T00:01:41.650Z</lastmod>
</url>
<url>
<loc>https://iron.sh/blog/minimum-viable-agent-security</loc>
<lastmod>2026-05-04T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://iron.sh/blog/we-ran-the-trivy-payload-the-attacker-got-nothing</loc>
<lastmod>2026-03-29T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://iron.sh/blog/your-ai-agent-is-indistinguishable-from-malware</loc>
<lastmod>2026-03-24T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://iron.sh/blog/how-to-dangerously-skip-permissions</loc>
<lastmod>2026-03-18T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://iron.sh/blog/ai-agents-are-insecure-by-design-were-fixing-that</loc>
<lastmod>2026-02-22T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://iron.sh/changelog/page/2</loc>
<lastmod>2026-05-07T00:01:41.650Z</lastmod>
</url>
<url>
<loc>https://iron.sh/changelog/page/3</loc>
<lastmod>2026-05-07T00:01:41.650Z</lastmod>
</url>
<url>
<loc>https://iron.sh/changelog/page/4</loc>
<lastmod>2026-05-07T00:01:41.650Z</lastmod>
</url>
<url>
<loc>https://iron.sh/changelog/page/5</loc>
<lastmod>2026-05-07T00:01:41.650Z</lastmod>
</url>
</urlset>
