<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://www.zafran.io</loc></url><url><loc>https://www.zafran.io/about</loc></url><url><loc>https://www.zafran.io/blog</loc></url><url><loc>https://www.zafran.io/careers</loc></url><url><loc>https://www.zafran.io/case-studies</loc></url><url><loc>https://www.zafran.io/case-studies/fortune-1000-manufacturing-company-uses-agentic-ai-to-cut-mttr</loc></url><url><loc>https://www.zafran.io/case-studies/how-a-fortune-500-insurer-automated-risk-tracing-into-a-board-ready-exposure-map</loc></url><url><loc>https://www.zafran.io/case-studies/how-a-major-healthcare-system-reduced-critical-vulnerabilities-by-99-with-compensating-controls</loc></url><url><loc>https://www.zafran.io/case-studies/how-sallie-mae-went-from-a-hell-week-of-spreadsheets-to-exposure-answers-in-minutes</loc></url><url><loc>https://www.zafran.io/case-studies/outgrowing-kenna-financial-services-company-replaces-kenna-with-zafran</loc></url><url><loc>https://www.zafran.io/case-studies/risk-based-vulnerability-prioritization-pharma-case-study</loc></url><url><loc>https://www.zafran.io/case-studies/summit-utilities-reduces-cvss-criticals-by-91</loc></url><url><loc>https://www.zafran.io/ctem</loc></url><url><loc>https://www.zafran.io/ctem-academy</loc></url><url><loc>https://www.zafran.io/ctem-academy/ai-vulnerability-management-risks-tools-best-practices</loc></url><url><loc>https://www.zafran.io/ctem-academy/aligning-zafran-gartner-ctem-framework</loc></url><url><loc>https://www.zafran.io/ctem-academy/bas-vs-easm-vs-ctem-key-differences-explained</loc></url><url><loc>https://www.zafran.io/ctem-academy/best-vulnerability-management-tools-of-2026</loc></url><url><loc>https://www.zafran.io/ctem-academy/business-case-continuous-threat-exposure-management-ctem</loc></url><url><loc>https://www.zafran.io/ctem-academy/crq-ctem-playbook-prioritize-cyber-threats</loc></url><url><loc>https://www.zafran.io/ctem-academy/implementing-risk-based-vulnerability-management</loc></url><url><loc>https://www.zafran.io/ctem-academy/internet-exposure-hidden-risk-management</loc></url><url><loc>https://www.zafran.io/ctem-academy/migrating-from-rbvm-to-ctem-guide</loc></url><url><loc>https://www.zafran.io/ctem-academy/mitigation-without-patching-risk-reduction</loc></url><url><loc>https://www.zafran.io/ctem-academy/mobilizing-response-in-ctem-decisive-action</loc></url><url><loc>https://www.zafran.io/ctem-academy/prioritizing-vulnerabilities-risk-based-patching</loc></url><url><loc>https://www.zafran.io/ctem-academy/reduce-time-to-patch-vulnerability-remediation</loc></url><url><loc>https://www.zafran.io/ctem-academy/remote-code-execution-rce-impact-mitigation</loc></url><url><loc>https://www.zafran.io/ctem-academy/the-best-ctem-platforms-in-2026-a-buyers-guide</loc></url><url><loc>https://www.zafran.io/ctem-academy/the-best-exposure-management-platforms-in-2026</loc></url><url><loc>https://www.zafran.io/ctem-academy/the-evolution-of-exposure-management-getting-ready-for-agentic-remediation</loc></url><url><loc>https://www.zafran.io/ctem-academy/threat-and-vulnerability-management-guide</loc></url><url><loc>https://www.zafran.io/ctem-academy/threat-intelligence-actionable-security-insight</loc></url><url><loc>https://www.zafran.io/ctem-academy/threat-vulnerability-management-soc-integration</loc></url><url><loc>https://www.zafran.io/ctem-academy/top-rbvm-tools</loc></url><url><loc>https://www.zafran.io/ctem-academy/top-vulnerability-types-mitigation-guide</loc></url><url><loc>https://www.zafran.io/ctem-academy/unified-vulnerability-management-best-practices</loc></url><url><loc>https://www.zafran.io/ctem-academy/unified-vulnerability-management-complete-guide</loc></url><url><loc>https://www.zafran.io/ctem-academy/vm-vs-rbvm-vs-ctem-differences</loc></url><url><loc>https://www.zafran.io/ctem-academy/vulnerability-prioritization-key-risk-factors-and-modern-solutions</loc></url><url><loc>https://www.zafran.io/ctem-academy/vulnerability-prioritization-risk-factors</loc></url><url><loc>https://www.zafran.io/ctem-academy/vulnerability-remediation-a-complete-guide-for-modern-security-teams</loc></url><url><loc>https://www.zafran.io/ctem-academy/what-is-vulnerability-management-a-definition-guide</loc></url><url><loc>https://www.zafran.io/customer-reviews</loc></url><url><loc>https://www.zafran.io/datasheets-whitepapers/a-practical-guide-evolving-from-vm-to-ctem</loc></url><url><loc>https://www.zafran.io/datasheets-whitepapers/get-the-threat-exposure-management-platform-datasheet</loc></url><url><loc>https://www.zafran.io/datasheets-whitepapers/zafran-state-of-threat-exposure-management</loc></url><url><loc>https://www.zafran.io/demo</loc></url><url><loc>https://www.zafran.io/events</loc></url><url><loc>https://www.zafran.io/exposure-assessment-remediation</loc></url><url><loc>https://www.zafran.io/files/candidate-privacy-notice</loc></url><url><loc>https://www.zafran.io/get-a-demo</loc></url><url><loc>https://www.zafran.io/get-ctem-guide</loc></url><url><loc>https://www.zafran.io/learn</loc></url><url><loc>https://www.zafran.io/legal/candidate-privacy</loc></url><url><loc>https://www.zafran.io/legal/dpa-platform</loc></url><url><loc>https://www.zafran.io/legal/eula-platform</loc></url><url><loc>https://www.zafran.io/legal/privacy-policy</loc></url><url><loc>https://www.zafran.io/legal/subprocessors</loc></url><url><loc>https://www.zafran.io/legal/terms-of-use</loc></url><url><loc>https://www.zafran.io/legal/vulnerability-disclosure-policy</loc></url><url><loc>https://www.zafran.io/news</loc></url><url><loc>https://www.zafran.io/partner</loc></url><url><loc>https://www.zafran.io/platform</loc></url><url><loc>https://www.zafran.io/podcast/nimrod-kozlovski-defense-in-depth-is-no-longer-enough</loc></url><url><loc>https://www.zafran.io/podcast/schellmans-avani-desai-compliance-is-a-byproduct-of-security</loc></url><url><loc>https://www.zafran.io/podcast/sequoias-doug-leone</loc></url><url><loc>https://www.zafran.io/podcast/trailer-responsible-disclosure-podcast</loc></url><url><loc>https://www.zafran.io/proactive-threat-hunting</loc></url><url><loc>https://www.zafran.io/replace-kenna-security-with-zafran</loc></url><url><loc>https://www.zafran.io/replace-your-scanner-in-30-days</loc></url><url><loc>https://www.zafran.io/resources/after-mythos-preparing-for-cybersecuritys-manhattan-project-moment</loc></url><url><loc>https://www.zafran.io/resources/after-php2shell-how-cisos-can-be-ready-for-the-next-zero-day</loc></url><url><loc>https://www.zafran.io/resources/agentic-asset-ownership-automating-for-faster-remediation</loc></url><url><loc>https://www.zafran.io/resources/agentic-remediation-unlocks-a-new-approach-to-solving-enterprise-vulnerabilities</loc></url><url><loc>https://www.zafran.io/resources/ai-agents-will-transform-security-operations-this-is-the-architecture-that-makes-it-possible</loc></url><url><loc>https://www.zafran.io/resources/assume-every-vulnerability-will-be-exploited-fs-isacs-post-mythos-mandate</loc></url><url><loc>https://www.zafran.io/resources/bank-of-america-put-1-000-contractors-on-mythos-patching-most-teams-cant-do-that</loc></url><url><loc>https://www.zafran.io/resources/beyond-prompt-injection-over-connected-ai-apps-enable-enterprise-breaches</loc></url><url><loc>https://www.zafran.io/resources/beyond-the-hype-remediation-operations-that-delivers-results-yi2h5</loc></url><url><loc>https://www.zafran.io/resources/black-basta-exposed-how-a-ransomware-cartel-exploits-vulnerabilities</loc></url><url><loc>https://www.zafran.io/resources/bod-26-04-gets-prioritization-right-but-its-only-half-the-answer</loc></url><url><loc>https://www.zafran.io/resources/breaking-waf</loc></url><url><loc>https://www.zafran.io/resources/breaking-waf-technical-analysis</loc></url><url><loc>https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover</loc></url><url><loc>https://www.zafran.io/resources/cisas-bod-26-04-signals-the-end-of-patch-everything</loc></url><url><loc>https://www.zafran.io/resources/context-mismatch-eliminating-non-exploitable-cves-from-the-queue</loc></url><url><loc>https://www.zafran.io/resources/crowdstrike-issue-causes-global-scale-outages</loc></url><url><loc>https://www.zafran.io/resources/cyber-insurers-are-now-underwriting-your-vulnerability-response-speed</loc></url><url><loc>https://www.zafran.io/resources/defending-what-matters-a-practical-guide-to-modern-threat-hunting</loc></url><url><loc>https://www.zafran.io/resources/detect-mitigate-wsus-exploit-cve-2025-59287</loc></url><url><loc>https://www.zafran.io/resources/difytap-zafran-discovers-how-attackers-can-silently-wiretap-ai-data-across-tenants-on-a-platform-powering-1m-apps</loc></url><url><loc>https://www.zafran.io/resources/facehugger-vulnerabilities-in-hugging-face-diffusers-open-door-to-supply-chain-attacks-on-enterprise-ai</loc></url><url><loc>https://www.zafran.io/resources/feature-spotlight-exposure-tracker</loc></url><url><loc>https://www.zafran.io/resources/financial-services-threat-landscape-2026</loc></url><url><loc>https://www.zafran.io/resources/flax-typhoon</loc></url><url><loc>https://www.zafran.io/resources/from-exploit-mitigation-to-enterprise-mitigation</loc></url><url><loc>https://www.zafran.io/resources/from-playbook-to-protection-what-football-can-teach-us-about-ctem</loc></url><url><loc>https://www.zafran.io/resources/from-reactive-to-proactive-threat-hunting-in-the-cybersecurity-battlefield</loc></url><url><loc>https://www.zafran.io/resources/gartner-cvss-based-prioritization-leaves-organizations-overexposed-what-to-do-instead</loc></url><url><loc>https://www.zafran.io/resources/gartner-reviewed-150-startups-in-exposure-management-only-zafran-covers-the-full-lifecycle</loc></url><url><loc>https://www.zafran.io/resources/google-confirms-ai-built-a-zero-day-for-mass-exploitation</loc></url><url><loc>https://www.zafran.io/resources/inside-openais-black-hat-talk-what-the-hugging-face-incident-teaches-defenders-about-attack-chains</loc></url><url><loc>https://www.zafran.io/resources/introducing-agentic-exposure-management</loc></url><url><loc>https://www.zafran.io/resources/introducing-proactive-exposure-hunting-the-latest-enhancement-to-zafrans-threat-exposure-management-platform</loc></url><url><loc>https://www.zafran.io/resources/introducing-remediation-operations-remops</loc></url><url><loc>https://www.zafran.io/resources/introducing-the-zafran-detector</loc></url><url><loc>https://www.zafran.io/resources/introducing-the-zafran-zero-day-agent-an-autonomous-workflow-for-the-post-mythos-era</loc></url><url><loc>https://www.zafran.io/resources/introducing-zafran-the-risk-mitigation-platform</loc></url><url><loc>https://www.zafran.io/resources/iran-poised-for-a-digital-counterstrike-a-practical-guide-to-reduce-your-exposure</loc></url><url><loc>https://www.zafran.io/resources/jpmorganchases-200-days-into-the-frontier-and-what-it-means-for-exposure-management</loc></url><url><loc>https://www.zafran.io/resources/jpmorgans-mythos-memo-is-the-one-you-should-actually-read</loc></url><url><loc>https://www.zafran.io/resources/mobilizing-rapid-response-to-the-sharepoint-crisis</loc></url><url><loc>https://www.zafran.io/resources/no-cve-no-problem-the-dangerous-blind-spot-in-ai-security</loc></url><url><loc>https://www.zafran.io/resources/nvd-pulls-back-on-enrichment-how-defenders-cope-with-less-vulnerability-context</loc></url><url><loc>https://www.zafran.io/resources/openai-selects-zafran-for-trusted-access-for-cyber</loc></url><url><loc>https://www.zafran.io/resources/patches-take-weeks-exploits-take-hours-the-2026-dbir-makes-the-math-brutal</loc></url><url><loc>https://www.zafran.io/resources/php2shell-everything-you-need-to-know-about-the-two-critical-php-vulnerabilities</loc></url><url><loc>https://www.zafran.io/resources/put-your-defense-on-offense</loc></url><url><loc>https://www.zafran.io/resources/regresshion-rce-vulnerability-in-openssh-cve-2024-6387</loc></url><url><loc>https://www.zafran.io/resources/standing-on-the-shoulders-of-failure-why-we-started-zafran</loc></url><url><loc>https://www.zafran.io/resources/state-actor-or-cybercrime</loc></url><url><loc>https://www.zafran.io/resources/storm-0501</loc></url><url><loc>https://www.zafran.io/resources/strategies-for-improving-assessment-prioritization</loc></url><url><loc>https://www.zafran.io/resources/strategies-for-improving-communication</loc></url><url><loc>https://www.zafran.io/resources/strategies-for-improving-detection</loc></url><url><loc>https://www.zafran.io/resources/strategies-for-improving-governance-compliance</loc></url><url><loc>https://www.zafran.io/resources/strategies-for-improving-mitigation-remediation</loc></url><url><loc>https://www.zafran.io/resources/supply-chain-shock-the-xz-utils-backdoor-and-the-operation-that-was-revealed-too-early-or-too-late</loc></url><url><loc>https://www.zafran.io/resources/the-2025-spike-in-vulnerabilities-isnt-the-full-story</loc></url><url><loc>https://www.zafran.io/resources/the-agentic-trojan-horse-debate-how-openclaws-convenience-model-opens-real-world-attack-paths</loc></url><url><loc>https://www.zafran.io/resources/the-attackers-escape-room-why-defenders-have-been-fighting-the-wrong-game</loc></url><url><loc>https://www.zafran.io/resources/the-tl-dr-of-the-latest-cybersecurity-executive-order</loc></url><url><loc>https://www.zafran.io/resources/understanding-ctem-vs-easm-vs-bas-a-practical-guide-for-your-vulnerability-program</loc></url><url><loc>https://www.zafran.io/resources/understanding-the-role-of-mitigation-in-cybersecurity</loc></url><url><loc>https://www.zafran.io/resources/vulnerability-exploitation-in-2024</loc></url><url><loc>https://www.zafran.io/resources/we-are-not-patching-our-way-out-of-this-mess</loc></url><url><loc>https://www.zafran.io/resources/why-cvss-scores-are-dead-to-me</loc></url><url><loc>https://www.zafran.io/resources/widening-the-attack-surface-irans-expanding-cyber-activities-in-retaliation-to-the-american-israeli-campaign</loc></url><url><loc>https://www.zafran.io/resources/will-ai-revolutionize-vulnerability-exploitation</loc></url><url><loc>https://www.zafran.io/resources/your-board-is-going-to-ask-about-mythos-heres-exactly-what-to-say</loc></url><url><loc>https://www.zafran.io/resources/zafran-accepted-into-anthropics-cyber-verification-program</loc></url><url><loc>https://www.zafran.io/resources/zafran-and-athena-turning-the-first-wave-of-ai-discovered-vulnerabilities-into-protection</loc></url><url><loc>https://www.zafran.io/resources/zafran-and-recorded-future-mitigating-risk-exposure-with-actionable-threat-intelligence</loc></url><url><loc>https://www.zafran.io/resources/zafran-announces-strategic-investment-from-amex-ventures</loc></url><url><loc>https://www.zafran.io/resources/zafran-at-rsa-2024</loc></url><url><loc>https://www.zafran.io/resources/zafran-awarded-prestigious-honorable-mention-in-gartner-magic-quadrant-for-exposure-assessment-platforms</loc></url><url><loc>https://www.zafran.io/resources/zafran-emerges-from-stealth-with-over-30m-as-the-first-risk-and-mitigation-platform-to-fight-threat-exploitation</loc></url><url><loc>https://www.zafran.io/resources/zafran-joins-the-athena-coalition-to-defend-against-frontier-ai-attack-chains</loc></url><url><loc>https://www.zafran.io/resources/zafran-launches-attack-chain-killswitch-in-collaboration-with-google-threat-intelligence</loc></url><url><loc>https://www.zafran.io/resources/zafran-launches-zafran-air-a-rapid-response-offering-to-help-enterprises-build-ai-resilience-for-the-post-mythos-eras</loc></url><url><loc>https://www.zafran.io/resources/zafran-recognized-in-two-2026-gartner-r-emerging-tech-reports-for-unified-exposure-management-platforms-and-autonomous-exposure-remediation-categories</loc></url><url><loc>https://www.zafran.io/resources/zafran-triples-arr-in-60m-round-to-reinvent-exposure-management-with-agentic-ai</loc></url><url><loc>https://www.zafran.io/responsible-disclosure</loc></url><url><loc>https://www.zafran.io/solutions/industries/financial-services</loc></url><url><loc>https://www.zafran.io/solutions/industries/healthcare</loc></url><url><loc>https://www.zafran.io/solutions/use-cases/automate-reporting</loc></url><url><loc>https://www.zafran.io/solutions/use-cases/detect-assess-exposure</loc></url><url><loc>https://www.zafran.io/solutions/use-cases/mitigate-risk</loc></url><url><loc>https://www.zafran.io/solutions/use-cases/mobilize-remediation</loc></url><url><loc>https://www.zafran.io/solutions/use-cases/prioritize-whats-exploitable</loc></url><url><loc>https://www.zafran.io/solutions/use-cases/unified-vulnerability-findings</loc></url><url><loc>https://www.zafran.io/state-of-threat-exposure-management-2025</loc></url><url><loc>https://www.zafran.io/threat-research</loc></url><url><loc>https://www.zafran.io/use-cases/agentic-exposure-management</loc></url><url><loc>https://www.zafran.io/video</loc></url><url><loc>https://www.zafran.io/webinars</loc></url><url><loc>https://www.zafran.io/weekly-report/010225</loc></url><url><loc>https://www.zafran.io/weekly-report/010525</loc></url><url><loc>https://www.zafran.io/weekly-report/010925</loc></url><url><loc>https://www.zafran.io/weekly-report/011625</loc></url><url><loc>https://www.zafran.io/weekly-report/012325</loc></url><url><loc>https://www.zafran.io/weekly-report/013025</loc></url><url><loc>https://www.zafran.io/weekly-report/020625</loc></url><url><loc>https://www.zafran.io/weekly-report/021325</loc></url><url><loc>https://www.zafran.io/weekly-report/022025</loc></url><url><loc>https://www.zafran.io/weekly-report/022725</loc></url><url><loc>https://www.zafran.io/weekly-report/030625</loc></url><url><loc>https://www.zafran.io/weekly-report/031325</loc></url><url><loc>https://www.zafran.io/weekly-report/032025</loc></url><url><loc>https://www.zafran.io/weekly-report/032725</loc></url><url><loc>https://www.zafran.io/weekly-report/040325</loc></url><url><loc>https://www.zafran.io/weekly-report/041025</loc></url><url><loc>https://www.zafran.io/weekly-report/041725</loc></url><url><loc>https://www.zafran.io/weekly-report/042425</loc></url><url><loc>https://www.zafran.io/weekly-report/050925</loc></url><url><loc>https://www.zafran.io/weekly-report/051525</loc></url><url><loc>https://www.zafran.io/weekly-report/052225</loc></url><url><loc>https://www.zafran.io/weekly-report/052324</loc></url><url><loc>https://www.zafran.io/weekly-report/052925</loc></url><url><loc>https://www.zafran.io/weekly-report/060624</loc></url><url><loc>https://www.zafran.io/weekly-report/061225</loc></url><url><loc>https://www.zafran.io/weekly-report/061324</loc></url><url><loc>https://www.zafran.io/weekly-report/061925</loc></url><url><loc>https://www.zafran.io/weekly-report/062024</loc></url><url><loc>https://www.zafran.io/weekly-report/062625</loc></url><url><loc>https://www.zafran.io/weekly-report/062724</loc></url><url><loc>https://www.zafran.io/weekly-report/070325</loc></url><url><loc>https://www.zafran.io/weekly-report/070424</loc></url><url><loc>https://www.zafran.io/weekly-report/071124</loc></url><url><loc>https://www.zafran.io/weekly-report/071824</loc></url><url><loc>https://www.zafran.io/weekly-report/072524</loc></url><url><loc>https://www.zafran.io/weekly-report/080824</loc></url><url><loc>https://www.zafran.io/weekly-report/081524</loc></url><url><loc>https://www.zafran.io/weekly-report/082924</loc></url><url><loc>https://www.zafran.io/weekly-report/090524</loc></url><url><loc>https://www.zafran.io/weekly-report/091924</loc></url><url><loc>https://www.zafran.io/weekly-report/100324</loc></url><url><loc>https://www.zafran.io/weekly-report/101024</loc></url><url><loc>https://www.zafran.io/weekly-report/101724</loc></url><url><loc>https://www.zafran.io/weekly-report/102424</loc></url><url><loc>https://www.zafran.io/weekly-report/103124</loc></url><url><loc>https://www.zafran.io/weekly-report/110724</loc></url><url><loc>https://www.zafran.io/weekly-report/111424</loc></url><url><loc>https://www.zafran.io/weekly-report/112124</loc></url><url><loc>https://www.zafran.io/weekly-report/112824</loc></url><url><loc>https://www.zafran.io/weekly-report/120524</loc></url><url><loc>https://www.zafran.io/weekly-report/121224</loc></url><url><loc>https://www.zafran.io/weekly-report/121924</loc></url><url><loc>https://www.zafran.io/weekly-report/122624</loc></url><url><loc>https://www.zafran.io/weekly-report/210824</loc></url><url><loc>https://www.zafran.io/weekly-report/07312024</loc></url><url><loc>https://www.zafran.io/weekly-report/09122024</loc></url><url><loc>https://www.zafran.io/weekly-report/09262024</loc></url><url><loc>https://www.zafran.io/weekly-report/ciscos-firewall-under-attack</loc></url><url><loc>https://www.zafran.io/weekly-report/connectwise-again---cisco-flaw-raises-concerns---gpt-o3-found-a-0-day</loc></url><url><loc>https://www.zafran.io/weekly-report/lockbits-identity-revealed---did-intelbroker-breached-zscaler---the-remediation-of-kev-vulnerabilities-remain-slow</loc></url><url><loc>https://www.zafran.io/weekly-report/palo-alto-struggles-with-remediation-effort-exploitation-window-is-widening</loc></url><url><loc>https://www.zafran.io/weekly-report/palo-altos-zero-day-escalates</loc></url><url><loc>https://www.zafran.io/weekly-report/ticketmaster-hacked---checkpoint-vpns-exploited-against-corporates---backdoors-in-courtrooms-audio-recorder</loc></url><url><loc>https://www.zafran.io/weekly-report/weekly-report-05-16-24</loc></url><url><loc>https://www.zafran.io/whitepaper</loc></url><url><loc>https://www.zafran.io/zafcon-2026</loc></url></urlset>