<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
  xmlns:xhtml="http://www.w3.org/1999/xhtml">
  <url>
    <loc>https://blog.milgram.dev/tags/agentic-ai/</loc>
    <lastmod>2026-07-29T09:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/ai-security/</loc>
    <lastmod>2026-07-29T09:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/llm-firewall/</loc>
    <lastmod>2026-07-29T09:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/</loc>
    <lastmod>2026-07-29T09:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/posts/</loc>
    <lastmod>2026-07-29T09:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/</loc>
    <lastmod>2026-07-29T09:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/first-ai-run-intrusion-visibility-failure/</loc>
    <lastmod>2026-07-29T09:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/finops/</loc>
    <lastmod>2026-07-23T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/llm-cost/</loc>
    <lastmod>2026-07-23T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/prompt-compression-vs-inference-costs/</loc>
    <lastmod>2026-07-23T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/prompt-compression/</loc>
    <lastmod>2026-07-23T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/prompt-injection-sql-injection-ai-era/</loc>
    <lastmod>2026-07-22T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/prompt-injection/</loc>
    <lastmod>2026-07-22T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/data-leak/</loc>
    <lastmod>2026-07-15T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/governance/</loc>
    <lastmod>2026-07-15T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/provider-safety-filters-not-enough/</loc>
    <lastmod>2026-07-15T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/agentic-ai-attack-surface/</loc>
    <lastmod>2026-07-08T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/security/</loc>
    <lastmod>2026-07-08T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/owasp/</loc>
    <lastmod>2026-07-01T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/owasp-llm-top-10-enterprise/</loc>
    <lastmod>2026-07-01T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/shadow-ai-what-prompts-send-out/</loc>
    <lastmod>2026-06-24T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/shadow-ai/</loc>
    <lastmod>2026-06-24T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/compliance/</loc>
    <lastmod>2026-06-17T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/data-security/</loc>
    <lastmod>2026-06-17T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/llm/</loc>
    <lastmod>2026-06-17T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/pii-in-prompts-compliance-gap/</loc>
    <lastmod>2026-06-17T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/data-governance/</loc>
    <lastmod>2026-06-10T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/data-leak-risk-as-a-metric/</loc>
    <lastmod>2026-06-10T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/data-exfiltration/</loc>
    <lastmod>2026-06-03T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/secrets-dont-belong-in-prompts/</loc>
    <lastmod>2026-06-03T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/ai-governance/</loc>
    <lastmod>2026-05-27T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/what-are-you-really-paying-per-token/</loc>
    <lastmod>2026-05-27T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/tags/cost/</loc>
    <lastmod>2026-05-20T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/the-cost-of-context/</loc>
    <lastmod>2026-05-20T10:00:00+02:00</lastmod>
  </url><url>
    <loc>https://blog.milgram.dev/categories/</loc>
  </url>
</urlset>
