<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="https://derivee.io/wp-sitemap.xsl" ?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url><loc>https://derivee.io/case-studies/fintech-platform-closing-an-idor-chain-before-it-reached-production/</loc><lastmod>2026-08-09T00:38:49+00:00</lastmod></url><url><loc>https://derivee.io/case-studies/logistics-group-a-red-team-exercise-that-found-an-unknown-trust-relationship/</loc><lastmod>2026-08-09T00:38:49+00:00</lastmod></url><url><loc>https://derivee.io/case-studies/saas-company-from-academy-cohort-to-live-bug-bounty-findings/</loc><lastmod>2026-08-09T00:38:49+00:00</lastmod></url><url><loc>https://derivee.io/case-studies/regional-healthcare-provider-a-hipaa-risk-assessment-that-found-shadow-it/</loc><lastmod>2026-08-09T00:38:49+00:00</lastmod></url><url><loc>https://derivee.io/case-studies/e-commerce-retailer-segmentation-testing-ahead-of-a-pci-dss-audit/</loc><lastmod>2026-08-09T00:38:49+00:00</lastmod></url><url><loc>https://derivee.io/case-studies/mobile-banking-app-an-authentication-bypass-found-before-launch/</loc><lastmod>2026-08-09T00:38:49+00:00</lastmod></url></urlset>
