<?xml version="1.0" encoding="UTF-8"?>
<!--
  One URL, and that is correct rather than lazy.

  The platform is a hash-routed SPA: every screen lives behind #/ , which a
  crawler never requests as a separate URL and a sitemap cannot address. The
  only thing here that is both server-addressable and meant to be indexed is
  the landing page. Listing #/login or #/findings would list URLs that return
  this same document and that nobody outside the platform can use.

  When the marketing site grows real server-addressable pages, they are added
  here — not before.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://exceptionsecurity.com/</loc>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
</urlset>
