<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
<url>
<loc>https://agenticdefensereview.com</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/sections/ai-agent-attacks</loc>
<lastmod>2026-09-24T23:55:26.363Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/sections/agent-identity</loc>
<lastmod>2026-09-30T17:55:29.837Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/sections/agentic-incident-response</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/sections/features</loc>
<lastmod>2026-09-16T21:11:30.091Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/andre-reyes</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/beatrice-reyes</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/camille-larsen</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/cora-rossi</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/diego-lindqvist</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/idris-marchetti</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/ingrid-contreras</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/ingrid-whitfield</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/lena-devi</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/lena-sabatini</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/marcus-lindqvist</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/omar-reyes</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/priya-bennett</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/authors/rosa-sinclair</loc>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/tamper-proof-audit-logging-architecture-for-ai-agent-actions</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/873fe119-829d-4805-9783-8e99b5147949.jpeg</image:loc>
</image:image>
<lastmod>2026-10-02T16:25:30.628Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/policy-based-access-control-at-tool-call-depth</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/1b648506-bfc5-4f12-9313-9bf20a1beae8.jpeg</image:loc>
</image:image>
<lastmod>2026-09-30T17:55:29.837Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/sso-and-scim-provisioning-for-ai-agent-principals</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/3d5dc435-9456-4c1b-b38e-441e19a7be91.jpeg</image:loc>
</image:image>
<lastmod>2026-09-30T16:16:45.706Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/jit-credential-issuance-for-ephemeral-agent-sessions</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/4d42208b-c640-4a7b-89e5-7fbdaf821939.jpeg</image:loc>
</image:image>
<lastmod>2026-09-29T04:08:51.085Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/oauth-2-0-limitations-for-non-human-agent-identities</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/5fd38881-a9f9-47ac-8694-c0ca09aee2d6.jpeg</image:loc>
</image:image>
<lastmod>2026-09-26T05:15:34.276Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/agent-sandbox-escape-techniques-and-mitigations</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/b85865d8-121a-4afd-b9be-7efb10b3b084.jpeg</image:loc>
</image:image>
<lastmod>2026-09-24T23:55:26.363Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/mcp-supply-chain-campaign-anatomy</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/0ffb7fef-cd0b-4775-848d-d8436e23195b.jpeg</image:loc>
</image:image>
<lastmod>2026-09-23T22:09:13.160Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/stdio-remote-code-execution-in-local-mcp-servers</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/0f7d13a1-bff1-4969-829f-b011e7cb35c7.jpeg</image:loc>
</image:image>
<lastmod>2026-09-22T17:51:00.618Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/ai-asset-sprawl-as-an-attack-surface-expansion-vector</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/a86a766f-13f9-4d7e-afbd-643f305f80fa.jpeg</image:loc>
</image:image>
<lastmod>2026-09-21T15:24:27.851Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/intent-drift-detection-in-autonomous-agent-sessions</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/470e5db9-84e2-4701-b371-a16dcf43086b.jpeg</image:loc>
</image:image>
<lastmod>2026-09-20T15:59:04.468Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/mcp-server-impersonation-and-rug-pull-attacks</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/4e0ea587-0862-4423-b645-fbc3f4458983.jpeg</image:loc>
</image:image>
<lastmod>2026-09-19T15:58:32.255Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/prompt-injection-in-agentic-pipelines</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/6cd6014e-d8f2-4b6c-9b01-e0455382a169.jpeg</image:loc>
</image:image>
<lastmod>2026-09-18T15:10:32.172Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/tool-poisoning-in-mcp-server-registries</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/1cc05519-9270-4292-8528-5d099ac7316f.jpeg</image:loc>
</image:image>
<lastmod>2026-09-17T16:35:23.395Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://agenticdefensereview.com/posts/containing-a-compromised-ai-agent-without-killing-the-workflow</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/3a1b2891-365b-46c2-b64f-28a9815aceb2/canvas/f0d728dc-ae40-4866-8afc-e6c401cd5e8a/generated/dc8a6de5-12c1-40cd-ac82-d22ed8befdd5.jpeg</image:loc>
</image:image>
<lastmod>2026-09-16T21:11:30.091Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
