<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://tut1.io/</loc><lastmod>2026-09-07</lastmod><changefreq>weekly</changefreq><priority>1.0</priority></url>
  <url><loc>https://tut1.io/resources</loc><lastmod>2026-09-07</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog</loc><lastmod>2026-09-07</lastmod><changefreq>weekly</changefreq><priority>0.9</priority></url>
  <url><loc>https://tut1.io/blog/the-credential-you-forgot-is-still-on-the-internet</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/one-valid-account-one-external-door</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/your-attack-surface-is-larger-than-your-cmdb</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/shadow-it-does-not-announce-itself-it-resolves</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/why-subdomain-enumeration-is-a-board-level-control</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/an-open-port-is-not-a-finding-it-is-a-question</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/the-forgotten-vpn-the-legacy-host-and-the-unowned-service</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/leaked-credentials-are-an-exposure-signal-not-a-login-opportunity</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/certificate-expiry-is-not-a-calendar-problem</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/lookalike-domains-the-brand-risk-signal-before-the-phish</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/third-party-exposure-is-still-your-exposure</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/the-external-attack-surface-of-mergers-and-acquisitions</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/from-cve-signal-to-confirmed-risk</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/asset-discovery-and-vulnerability-management-are-not-the-same</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/why-every-security-team-needs-an-outside-in-view</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/dark-web-intelligence-without-context-is-just-noise</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/how-to-prioritize-1000-internet-facing-assets</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/geography-is-a-security-control</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/employees-customers-and-suppliers-need-different-workflows</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/a-lookalike-domain-deserves-a-clock</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/the-business-case-for-continuous-easm</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/annual-pentesting-and-continuous-exposure-mapping</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/the-one-page-exposure-report-your-ciso-needs</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/the-30-minute-external-exposure-review</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/we-do-not-own-that-host</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/dns-ownership-verification</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/from-exposure-discovery-to-remediation-accountability</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/before-attackers-map-you-map-yourself</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/the-certificate-tells-a-story</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/exposure-is-a-graph-not-a-spreadsheet</loc><lastmod>2026-09-08</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/attack-surface-monitoring</loc><lastmod>2026-09-07</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url>
  <url><loc>https://tut1.io/dark-web-monitoring</loc><lastmod>2026-09-07</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url>
  <url><loc>https://tut1.io/credential-exposure-monitoring</loc><lastmod>2026-09-07</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url>
  <url><loc>https://tut1.io/phishing-domain-monitoring</loc><lastmod>2026-09-07</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url>
  <url><loc>https://tut1.io/certificate-tls-monitoring</loc><lastmod>2026-09-07</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/external-vulnerability-scanning</loc><lastmod>2026-09-07</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url>
  <url><loc>https://tut1.io/domain-takedown-service</loc><lastmod>2026-09-07</lastmod><changefreq>monthly</changefreq><priority>0.8</priority></url>
  <url><loc>https://tut1.io/blog/easm-vs-vulnerability-scanning</loc><lastmod>2026-09-07</lastmod><changefreq>yearly</changefreq><priority>0.7</priority></url>
  <url><loc>https://tut1.io/blog/easm-vs-ctem</loc><lastmod>2026-09-07</lastmod><changefreq>yearly</changefreq><priority>0.7</priority></url>
  <url><loc>https://tut1.io/blog/credential-exposure-response</loc><lastmod>2026-09-07</lastmod><changefreq>yearly</changefreq><priority>0.7</priority></url>
  <url><loc>https://tut1.io/blog/subdomain-takeover-checklist</loc><lastmod>2026-09-07</lastmod><changefreq>yearly</changefreq><priority>0.7</priority></url>
  <url><loc>https://tut1.io/blog/how-to-choose-an-easm-tool</loc><lastmod>2026-09-07</lastmod><changefreq>yearly</changefreq><priority>0.7</priority></url>
  <url><loc>https://tut1.io/blog/tut1-vs-attack-surface-scan</loc><lastmod>2026-09-07</lastmod><changefreq>yearly</changefreq><priority>0.7</priority></url>
</urlset>
