<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://www.surfaceloop.com/</loc></url><url><loc>https://www.surfaceloop.com/about/</loc></url><url><loc>https://www.surfaceloop.com/authors/nathan-hill-haimes/</loc></url><url><loc>https://www.surfaceloop.com/blog/</loc></url><url><loc>https://www.surfaceloop.com/blog/2/</loc></url><url><loc>https://www.surfaceloop.com/blog/3/</loc></url><url><loc>https://www.surfaceloop.com/blog/best-easm-tools-small-business/</loc></url><url><loc>https://www.surfaceloop.com/blog/certificate-transparency-subdomain-discovery/</loc></url><url><loc>https://www.surfaceloop.com/blog/cheapest-easm-tools/</loc></url><url><loc>https://www.surfaceloop.com/blog/content-security-policy-guide/</loc></url><url><loc>https://www.surfaceloop.com/blog/critical-cves-internet-facing-services/</loc></url><url><loc>https://www.surfaceloop.com/blog/default-credentials-risk/</loc></url><url><loc>https://www.surfaceloop.com/blog/dmarc-enforcement-step-by-step/</loc></url><url><loc>https://www.surfaceloop.com/blog/do-i-need-easm/</loc></url><url><loc>https://www.surfaceloop.com/blog/easm-checklist-small-business/</loc></url><url><loc>https://www.surfaceloop.com/blog/easm-pricing-explained/</loc></url><url><loc>https://www.surfaceloop.com/blog/easm-vs-asm-vs-caasm/</loc></url><url><loc>https://www.surfaceloop.com/blog/easm-vs-vulnerability-scanning/</loc></url><url><loc>https://www.surfaceloop.com/blog/exposed-admin-panels-breaches/</loc></url><url><loc>https://www.surfaceloop.com/blog/find-exposed-admin-panels/</loc></url><url><loc>https://www.surfaceloop.com/blog/forgotten-subdomains-shadow-it/</loc></url><url><loc>https://www.surfaceloop.com/blog/how-attackers-spoof-your-domain/</loc></url><url><loc>https://www.surfaceloop.com/blog/how-to-audit-open-ports/</loc></url><url><loc>https://www.surfaceloop.com/blog/hsts-preloading-guide/</loc></url><url><loc>https://www.surfaceloop.com/blog/most-dangerous-open-ports/</loc></url><url><loc>https://www.surfaceloop.com/blog/preventing-tls-certificate-expiry/</loc></url><url><loc>https://www.surfaceloop.com/blog/securing-remote-access-ports/</loc></url><url><loc>https://www.surfaceloop.com/blog/security-headers-checklist/</loc></url><url><loc>https://www.surfaceloop.com/blog/spf-dkim-dmarc-complete-guide/</loc></url><url><loc>https://www.surfaceloop.com/blog/subdomain-takeover-explained/</loc></url><url><loc>https://www.surfaceloop.com/blog/vulnerability-scanning-external-assets/</loc></url><url><loc>https://www.surfaceloop.com/blog/weak-cipher-suites-explained/</loc></url><url><loc>https://www.surfaceloop.com/blog/what-is-a-cve/</loc></url><url><loc>https://www.surfaceloop.com/book-a-demo/</loc></url><url><loc>https://www.surfaceloop.com/changelog/</loc></url><url><loc>https://www.surfaceloop.com/comparisons/</loc></url><url><loc>https://www.surfaceloop.com/comparisons/attaxion-alternative/</loc></url><url><loc>https://www.surfaceloop.com/comparisons/detectify-alternative/</loc></url><url><loc>https://www.surfaceloop.com/comparisons/intruder-alternative/</loc></url><url><loc>https://www.surfaceloop.com/comparisons/surfaceloop-vs-attaxion/</loc></url><url><loc>https://www.surfaceloop.com/comparisons/surfaceloop-vs-detectify/</loc></url><url><loc>https://www.surfaceloop.com/comparisons/surfaceloop-vs-intruder/</loc></url><url><loc>https://www.surfaceloop.com/comparisons/surfaceloop-vs-microsoft-defender-easm/</loc></url><url><loc>https://www.surfaceloop.com/comparisons/surfaceloop-vs-upguard/</loc></url><url><loc>https://www.surfaceloop.com/comparisons/upguard-alternative/</loc></url><url><loc>https://www.surfaceloop.com/contact/</loc></url><url><loc>https://www.surfaceloop.com/cyber-essentials/</loc></url><url><loc>https://www.surfaceloop.com/features/</loc></url><url><loc>https://www.surfaceloop.com/glossary/</loc></url><url><loc>https://www.surfaceloop.com/glossary/admin-panel/</loc></url><url><loc>https://www.surfaceloop.com/glossary/cipher-suite/</loc></url><url><loc>https://www.surfaceloop.com/glossary/csp/</loc></url><url><loc>https://www.surfaceloop.com/glossary/ct-logs/</loc></url><url><loc>https://www.surfaceloop.com/glossary/cve/</loc></url><url><loc>https://www.surfaceloop.com/glossary/cvss/</loc></url><url><loc>https://www.surfaceloop.com/glossary/dkim/</loc></url><url><loc>https://www.surfaceloop.com/glossary/dmarc/</loc></url><url><loc>https://www.surfaceloop.com/glossary/hsts/</loc></url><url><loc>https://www.surfaceloop.com/glossary/login-fingerprinting/</loc></url><url><loc>https://www.surfaceloop.com/glossary/nuclei/</loc></url><url><loc>https://www.surfaceloop.com/glossary/service-fingerprinting/</loc></url><url><loc>https://www.surfaceloop.com/glossary/shadow-it/</loc></url><url><loc>https://www.surfaceloop.com/glossary/spf/</loc></url><url><loc>https://www.surfaceloop.com/glossary/subdomain-takeover/</loc></url><url><loc>https://www.surfaceloop.com/glossary/tcp-port/</loc></url><url><loc>https://www.surfaceloop.com/glossary/tls/</loc></url><url><loc>https://www.surfaceloop.com/glossary/x-frame-options/</loc></url><url><loc>https://www.surfaceloop.com/how-it-works/</loc></url><url><loc>https://www.surfaceloop.com/msp/</loc></url><url><loc>https://www.surfaceloop.com/pricing/</loc></url><url><loc>https://www.surfaceloop.com/privacy/</loc></url><url><loc>https://www.surfaceloop.com/research/</loc></url><url><loc>https://www.surfaceloop.com/research/methodology/</loc></url><url><loc>https://www.surfaceloop.com/research/uk-sme-exposure-snapshot-september-2026/</loc></url><url><loc>https://www.surfaceloop.com/security/</loc></url><url><loc>https://www.surfaceloop.com/start-trial/</loc></url><url><loc>https://www.surfaceloop.com/terms/</loc></url><url><loc>https://www.surfaceloop.com/topics/</loc></url><url><loc>https://www.surfaceloop.com/topics/cve-detection/</loc></url><url><loc>https://www.surfaceloop.com/topics/dns-email-security/</loc></url><url><loc>https://www.surfaceloop.com/topics/exposed-web-panels/</loc></url><url><loc>https://www.surfaceloop.com/topics/external-attack-surface-management/</loc></url><url><loc>https://www.surfaceloop.com/topics/open-ports/</loc></url><url><loc>https://www.surfaceloop.com/topics/security-headers/</loc></url><url><loc>https://www.surfaceloop.com/topics/subdomain-discovery/</loc></url><url><loc>https://www.surfaceloop.com/topics/tls-certificates/</loc></url><url><loc>https://www.surfaceloop.com/use-cases/easm-for-ecommerce/</loc></url><url><loc>https://www.surfaceloop.com/use-cases/easm-for-msps/</loc></url><url><loc>https://www.surfaceloop.com/use-cases/easm-for-professional-services/</loc></url><url><loc>https://www.surfaceloop.com/use-cases/easm-for-small-business/</loc></url><url><loc>https://www.surfaceloop.com/use-cases/easm-for-startups/</loc></url></urlset>