<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://surfacewatch.org/</loc><priority>1.0</priority></url>
  <url><loc>https://surfacewatch.org/blog</loc><priority>0.8</priority></url>
  <url><loc>https://surfacewatch.org/blog-surfacewatch-vs-security-headers</loc><priority>0.8</priority></url>
  <url><loc>https://surfacewatch.org/blog-surfacewatch-vs-mozilla-observatory</loc><priority>0.8</priority></url>
  <url><loc>https://surfacewatch.org/blog-how-to-check-if-your-website-is-secure</loc><priority>0.8</priority></url>
  <url><loc>https://surfacewatch.org/blog-how-to-find-exposed-subdomains</loc><priority>0.8</priority></url>
  <url><loc>https://surfacewatch.org/blog-spf-dkim-dmarc-explained</loc><priority>0.8</priority></url>
  <url><loc>https://surfacewatch.org/blog-security-headers-extension-alternative</loc><priority>0.8</priority></url>
  <url><loc>https://surfacewatch.org/blog-5-security-headers-missing</loc><priority>0.8</priority></url>
  <url><loc>https://surfacewatch.org/docs</loc><priority>0.7</priority></url>
  <url><loc>https://surfacewatch.org/privacy</loc><priority>0.3</priority></url>
  <url><loc>https://surfacewatch.org/blog-content-security-policy-explained</loc><priority>0.8</priority></url>
  <url><loc>https://surfacewatch.org/blog-hsts-explained</loc><priority>0.8</priority></url>
  <url><loc>https://surfacewatch.org/blog-x-frame-options-clickjacking</loc><priority>0.8</priority></url>
  <url><loc>https://surfacewatch.org/blog-cookie-flags-secure-httponly-samesite</loc><priority>0.8</priority></url>
</urlset>
