<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://www.lockpick.app/blog</loc>
<lastmod>2026-10-17T10:08:31.635Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/guides</loc>
<lastmod>2026-10-08T02:36:01.548Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks</loc>
<lastmod>2026-10-08T02:36:01.204Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/blog/session-cookie-flags</loc>
<lastmod>2026-10-17T10:08:31.635Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/guides/lovable</loc>
<lastmod>2026-10-08T02:36:01.548Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/guides/fix-it-with-your-ai</loc>
<lastmod>2026-10-08T02:36:01.461Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/guides/cursor</loc>
<lastmod>2026-10-08T02:36:01.376Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/guides/bolt</loc>
<lastmod>2026-10-08T02:36:01.288Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/supabase-open-table</loc>
<lastmod>2026-10-08T02:36:01.204Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/spf-health</loc>
<lastmod>2026-10-08T02:36:01.100Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/source-map-advertised</loc>
<lastmod>2026-10-08T02:36:00.979Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/sitemap-robots-conflict</loc>
<lastmod>2026-10-08T02:36:00.888Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/sitemap-missing</loc>
<lastmod>2026-10-08T02:35:01.741Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/sitemap-lastmod</loc>
<lastmod>2026-10-08T02:35:01.661Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/sitemap-invalid</loc>
<lastmod>2026-10-08T02:35:01.583Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/sitemap-entries</loc>
<lastmod>2026-10-08T02:35:01.494Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/secrets</loc>
<lastmod>2026-10-08T02:35:01.411Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/password-hash</loc>
<lastmod>2026-10-08T02:35:01.308Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/mime</loc>
<lastmod>2026-10-08T02:35:01.229Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/isolation</loc>
<lastmod>2026-10-08T02:35:01.130Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/integrity</loc>
<lastmod>2026-10-08T02:35:01.042Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/https</loc>
<lastmod>2026-10-08T02:35:00.941Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/hsts</loc>
<lastmod>2026-10-08T02:35:00.824Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/hsts-scope</loc>
<lastmod>2026-10-08T02:35:00.723Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/frame</loc>
<lastmod>2026-10-08T02:35:00.611Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/forms</loc>
<lastmod>2026-10-08T02:35:00.489Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/firebase-public-db</loc>
<lastmod>2026-10-08T02:35:00.394Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/expiring-delegate</loc>
<lastmod>2026-10-08T02:34:02.238Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/email-spoofing</loc>
<lastmod>2026-10-08T02:34:02.139Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/email-no-reporting</loc>
<lastmod>2026-10-08T02:34:02.028Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/domain-registration</loc>
<lastmod>2026-10-08T02:34:01.927Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/dns-integrity</loc>
<lastmod>2026-10-08T02:34:01.833Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/dkim</loc>
<lastmod>2026-10-08T02:34:01.747Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/disclosure</loc>
<lastmod>2026-10-08T02:34:01.648Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/diagnostics</loc>
<lastmod>2026-10-08T02:34:01.546Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/development-build</loc>
<lastmod>2026-10-08T02:34:01.449Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/deployment</loc>
<lastmod>2026-10-08T02:34:01.335Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/csp</loc>
<lastmod>2026-10-08T02:34:01.220Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/csp-completeness</loc>
<lastmod>2026-10-08T02:34:01.125Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/cookies</loc>
<lastmod>2026-10-08T02:34:01.031Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/convex-public-function</loc>
<lastmod>2026-10-08T02:34:00.928Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/client-code</loc>
<lastmod>2026-10-08T02:34:00.823Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/claimable-subdomain</loc>
<lastmod>2026-10-08T02:33:01.664Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/certificate</loc>
<lastmod>2026-10-08T02:33:01.580Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/certificate-invalid</loc>
<lastmod>2026-10-08T02:33:01.490Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/certificate-coverage</loc>
<lastmod>2026-10-08T02:33:01.406Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/certificate-authority</loc>
<lastmod>2026-10-08T02:33:01.307Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/bot-protection</loc>
<lastmod>2026-10-08T02:33:01.009Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/auth-session</loc>
<lastmod>2026-10-08T02:33:00.929Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/auth-session-exposed</loc>
<lastmod>2026-10-08T02:33:00.838Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/api-open</loc>
<lastmod>2026-10-08T02:33:00.754Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/api-method-matrix</loc>
<lastmod>2026-10-08T02:33:00.669Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/api-headers</loc>
<lastmod>2026-10-08T02:33:00.583Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/api-docs-public</loc>
<lastmod>2026-10-08T02:33:00.490Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/api-auth-mismatch</loc>
<lastmod>2026-10-08T02:33:00.391Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/blog/supabase-anon-key-vs-service-role-key</loc>
<lastmod>2026-10-08T02:33:00.267Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/blog/security-checks-your-coding-agent-can-run</loc>
<lastmod>2026-10-08T02:33:00.175Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/blog/openai-or-anthropic-key-in-the-browser</loc>
<lastmod>2026-10-08T02:32:02.075Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/blog/how-lockpick-checks-a-site</loc>
<lastmod>2026-10-08T02:32:01.995Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/blog/env-file-publicly-accessible</loc>
<lastmod>2026-10-08T02:32:01.911Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/blog/api-route-answers-without-signing-in</loc>
<lastmod>2026-10-08T02:32:01.823Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/blog/api-keys-in-your-javascript-bundle</loc>
<lastmod>2026-10-08T02:32:01.734Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/guides/ai-app-builder-security-defaults</loc>
<lastmod>2026-10-08T02:32:01.452Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/guides/v0</loc>
<lastmod>2026-10-08T02:32:01.328Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/guides/supabase</loc>
<lastmod>2026-10-08T02:32:01.243Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/guides/run-lockpick-from-claude-code-or-cursor</loc>
<lastmod>2026-10-08T02:32:01.126Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/guides/replit</loc>
<lastmod>2026-10-08T02:32:01.040Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/tls-version</loc>
<lastmod>2026-10-08T02:31:01.328Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/third-party-subdomain</loc>
<lastmod>2026-10-08T02:31:01.250Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/spf</loc>
<lastmod>2026-10-08T02:31:01.077Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/source-map</loc>
<lastmod>2026-10-08T02:31:00.909Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/sitemap</loc>
<lastmod>2026-10-08T02:31:00.745Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/sitemap-unadvertised</loc>
<lastmod>2026-10-08T02:31:00.664Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/session-cookie</loc>
<lastmod>2026-10-08T02:30:02.116Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/security-policy</loc>
<lastmod>2026-10-08T02:30:02.036Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/script-host-incident</loc>
<lastmod>2026-10-08T02:30:01.873Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/referrer</loc>
<lastmod>2026-10-08T02:30:01.783Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/permissions-policy</loc>
<lastmod>2026-10-08T02:30:01.702Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/password-forms</loc>
<lastmod>2026-10-08T02:30:01.540Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/mixed</loc>
<lastmod>2026-10-08T02:30:01.445Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/lookalike</loc>
<lastmod>2026-10-08T02:30:01.242Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/graphql-introspection</loc>
<lastmod>2026-10-08T02:29:01.410Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/directory</loc>
<lastmod>2026-10-08T02:29:00.302Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/cors</loc>
<lastmod>2026-10-08T02:28:01.744Z</lastmod>
</url>
<url>
<loc>https://www.lockpick.app/checks/api-schema</loc>
<lastmod>2026-10-08T02:27:36.647Z</lastmod>
</url>
</urlset>
