<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://vulkro.com/about/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/ai-agents/</loc><lastmod>2026-10-16</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/best-offline-sast/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url><url><loc>https://vulkro.com/blog/</loc><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/a-clean-scan-that-did-not-read-your-code/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/agent-tools-are-entry-points/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/agentexchange-security-review-false-positive-document/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/air-gapped-static-analysis/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/an-ai-bill-of-materials/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/anatomy-of-a-guest-user-data-leak/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/apex-details-scanners-get-wrong/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/apex-soql-injection/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/apex-with-sharing-without-sharing-inherited-sharing/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/appexchange-security-review-what-fails/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/archive/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/attack-paths-not-findings-lists/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/authors/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/broken-access-control-is-still-the-top-breach/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/cert-in-sbom-guidelines/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/checking-another-scanners-findings-against-a-proof/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/connected-apps-and-oauth-tokens/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/deterministic-analysis-vs-asking-a-model/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/diff-scoped-security-gates/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/eu-cyber-resilience-act-what-software-teams-must-do/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/experience-cloud-guest-user-security-checklist/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/fixes-you-can-trust/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/give-coding-agents-the-code-not-the-whole-file/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/how-salesforce-orgs-get-breached/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/how-to-evaluate-a-sast-tool/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/idor-prevention-express-nestjs/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/imported-is-not-reachable/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/introducing-vulkro-cloud-for-salesforce/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/lightning-web-components-security/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/mcp-servers-are-the-new-attack-surface/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/nextjs-server-actions-are-public-endpoints/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/nis2-dora-and-your-salesforce-org/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/one-engine-for-salesforce-and-the-rest-of-your-stack/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/owasp-api-security-top-10-from-source-code/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/page/2/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/page/3/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/page/4/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/page/5/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/pci-dss-4-requirement-6-code-review/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/proven-unproven-not-checked/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/ranking-dependency-alerts-by-real-risk/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/salesforce-devsecops-pipeline/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/salesforce-flow-security/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/salesforce-security-audit-for-consultancies/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/salesforce-security-in-2026-so-far/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/sbom-and-vex-explained/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/secrets-in-git-history/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/securing-ai-coding-agents/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/security-analysis-without-wasting-tokens/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/security-where-salesforce-developers-write-code/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/severity-should-depend-on-who-can-reach-the-code/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/sign-in-that-never-checks-the-signature/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/soc-2-and-iso-27001-evidence-from-code-scanning/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/ssrf-in-nodejs/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/supply-chain-attacks-are-a-code-problem/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/tags/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/ai-agents/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/appexchange/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/application-security/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/application-security/page/2/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/application-security/page/3/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/attack-paths/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/compliance/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/developer-workflow/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/developer-workflow/page/2/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/research/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/research/page/2/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/salesforce/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/salesforce/page/2/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/supply-chain/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/tags/tokens/</loc><changefreq>weekly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/blog/the-attacks-of-2025-and-the-checks-that-flag-them/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/the-missing-tenant-column/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/the-npm-worms-of-2026/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/unsigned-webhooks-and-request-bodies-written-to-the-database/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/vibe-coding-security/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/what-did-the-agents-edit-break/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/why-did-the-scanner-not-flag-this/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/why-security-tooling-is-no-longer-optional/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/your-database-schema-is-a-security-document/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/blog/your-org-changed-did-its-security/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/changelog/</loc><lastmod>2026-10-13</lastmod><changefreq>weekly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/cloud/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url><url><loc>https://vulkro.com/cloud/code/</loc><lastmod>2026-10-16</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/cloud/start/</loc><lastmod>2026-10-16</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/features/</loc><lastmod>2026-10-15</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/how-it-works/</loc><lastmod>2026-10-16</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/labs/</loc><lastmod>2026-10-16</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/legal/</loc><lastmod>2026-10-12</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/legal/vulkro-cloud/</loc><lastmod>2026-10-15</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/partners/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/pricing/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url><url><loc>https://vulkro.com/privacy/</loc><lastmod>2026-10-16</lastmod><changefreq>yearly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/proof/</loc><lastmod>2026-10-16</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/red/</loc><lastmod>2026-10-16</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/research/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/reveriext/</loc><lastmod>2026-10-16</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/salesforce/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url><url><loc>https://vulkro.com/salesforce/crud-fls/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/salesforce/unreleased-package-scanning/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/sbom-and-vex/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url><url><loc>https://vulkro.com/security/</loc><lastmod>2026-10-12</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/sf/appexchange-readiness-checklist/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/start/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url><url><loc>https://vulkro.com/support/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/terms/</loc><lastmod>2026-10-16</lastmod><changefreq>yearly</changefreq><priority>0.3</priority></url><url><loc>https://vulkro.com/token-efficiency/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url><url><loc>https://vulkro.com/use-cases/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/use-cases/ai-coding-agents/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/use-cases/air-gapped/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/use-cases/api-security/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/use-cases/appexchange-security-review/</loc><lastmod>2026-10-15</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/use-cases/compliance-evidence/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/use-cases/consultancies/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/use-cases/developers-in-vs-code/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/use-cases/guest-user-exposure/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/use-cases/release-gating/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/use-cases/salesforce-platform-teams/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/use-cases/supply-chain/</loc><lastmod>2026-10-15</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url><url><loc>https://vulkro.com/vscode/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url><url><loc>https://vulkro.com/vulkro/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url><url><loc>https://vulkro.com/why-now/</loc><lastmod>2026-10-15</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://vulkro.com/why-vulkro/</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url><url><loc>https://vulkro.com/</loc><lastmod>2026-10-16</lastmod><changefreq>weekly</changefreq><priority>1.0</priority></url></urlset>