<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://coppersun.dev/ai-blind-spots/</loc></url>
  <url><loc>https://coppersun.dev/ai-code-policy/</loc></url>
  <url><loc>https://coppersun.dev/ai-code-review-guide/</loc></url>
  <url><loc>https://coppersun.dev/benchmarks/</loc></url>
  <url><loc>https://coppersun.dev/blog/</loc></url>
  <url><loc>https://coppersun.dev/brass-setup-guide/</loc></url>
  <url><loc>https://coppersun.dev/ci-code-gates/</loc></url>
  <url><loc>https://coppersun.dev/context-engineering-ai-coding-assistants/</loc></url>
  <url><loc>https://coppersun.dev/guides/</loc></url>
  <url><loc>https://coppersun.dev/how-to-use/</loc></url>
  <url><loc>https://coppersun.dev/</loc></url>
  <url><loc>https://coppersun.dev/install/</loc></url>
  <url><loc>https://coppersun.dev/legal/acceptable-use/</loc></url>
  <url><loc>https://coppersun.dev/legal/</loc></url>
  <url><loc>https://coppersun.dev/legal/privacy/</loc></url>
  <url><loc>https://coppersun.dev/legal/terms/</loc></url>
  <url><loc>https://coppersun.dev/pricing/</loc></url>
  <url><loc>https://coppersun.dev/python-scanning-for-ai-code/</loc></url>
  <url><loc>https://coppersun.dev/research/</loc></url>
  <url><loc>https://coppersun.dev/secure-llm-applications/</loc></url>
  <url><loc>https://coppersun.dev/security-review-ai-generated-code/</loc></url>
  <url><loc>https://coppersun.dev/static-analysis-buyers-guide/</loc></url>
  <url><loc>https://coppersun.dev/topup/</loc></url>
  <url><loc>https://coppersun.dev/vibe-coding-safety/</loc></url>
  <url><loc>https://coppersun.dev/what-brasscoders-detects/</loc></url>
  <url><loc>https://coppersun.dev/why-brass/</loc></url>
  <url><loc>https://coppersun.dev/llms.txt</loc></url>
  <url><loc>https://coppersun.dev/research/cve-risk/</loc></url>
  <url><loc>https://coppersun.dev/research/slopsquatting/</loc></url>
  <url><loc>https://coppersun.dev/research/cross-file-bugs/</loc></url>
  <url><loc>https://coppersun.dev/research/llm-review-reliability/</loc></url>
  <url><loc>https://coppersun.dev/research/market-intelligence/</loc></url>
  <url><loc>https://coppersun.dev/research/performance-anti-patterns/</loc></url>
  <url><loc>https://coppersun.dev/research/secret-leakage/</loc></url>
  <url><loc>https://coppersun.dev/research/dependency-confusion/</loc></url>
  <url><loc>https://coppersun.dev/research/weak-crypto/</loc></url>
  <url><loc>https://coppersun.dev/research/prompt-injection/</loc></url>
  <url><loc>https://coppersun.dev/research/vibe-coding-velocity-risk/</loc></url>
  <url><loc>https://coppersun.dev/research/agentic-ai-code-security/</loc></url>
  <url><loc>https://coppersun.dev/research/ai-code-regulated-industries/</loc></url>
  <url><loc>https://coppersun.dev/benchmarks/bandit_examples/</loc></url>
  <url><loc>https://coppersun.dev/benchmarks/detect_secrets_fixtures/</loc></url>
  <url><loc>https://coppersun.dev/benchmarks/django/</loc></url>
  <url><loc>https://coppersun.dev/benchmarks/fastapi/</loc></url>
  <url><loc>https://coppersun.dev/benchmarks/flask/</loc></url>
  <url><loc>https://coppersun.dev/benchmarks/nextjs_commerce/</loc></url>
  <url><loc>https://coppersun.dev/benchmarks/nodegoat/</loc></url>
  <url><loc>https://coppersun.dev/benchmarks/pygoat/</loc></url>
  <url><loc>https://coppersun.dev/benchmarks/snyk_goof/</loc></url>
  <url><loc>https://coppersun.dev/benchmarks/turborepo/</loc></url>
  <url><loc>https://coppersun.dev/blog/what-brass-sends-to-its-servers/</loc><lastmod>2026-05-31</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-code-cve-reckoning-q1-2026/</loc><lastmod>2026-06-02</lastmod></url>
  <url><loc>https://coppersun.dev/blog/audit-ready-ai-code-scan/</loc><lastmod>2026-06-06</lastmod></url>
  <url><loc>https://coppersun.dev/blog/brasscoders-open-source-on-github/</loc><lastmod>2026-06-02</lastmod></url>
  <url><loc>https://coppersun.dev/blog/copilot-vs-brasscoders-division-of-labor/</loc><lastmod>2026-06-04</lastmod></url>
  <url><loc>https://coppersun.dev/blog/cross-file-bugs-ai-misses/</loc><lastmod>2026-06-03</lastmod></url>
  <url><loc>https://coppersun.dev/blog/sast-finding-overload/</loc><lastmod>2026-06-05</lastmod></url>
  <url><loc>https://coppersun.dev/blog/brass-paid-launched/</loc><lastmod>2026-05-31</lastmod></url>
  <url><loc>https://coppersun.dev/blog/secrets-your-ai-might-leak/</loc><lastmod>2026-05-31</lastmod></url>
  <url><loc>https://coppersun.dev/blog/triage-500-line-ai-pr/</loc><lastmod>2026-05-31</lastmod></url>
  <url><loc>https://coppersun.dev/blog/when-ai-invents-libraries/</loc><lastmod>2026-05-31</lastmod></url>
  <url><loc>https://coppersun.dev/blog/why-claude-code-emits-eight-findings/</loc><lastmod>2026-05-31</lastmod></url>
  <url><loc>https://coppersun.dev/blog/the-other-tools-copper-sun-builds/</loc><lastmod>2026-06-09</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-code-review-is-not-a-control/</loc><lastmod>2026-06-13</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-coder-bug-benchmark/</loc><lastmod>2026-06-25</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-coder-perf-bugs-in-the-wild/</loc><lastmod>2026-06-13</lastmod></url>
  <url><loc>https://coppersun.dev/blog/what-api-review-sends-off-your-machine/</loc><lastmod>2026-06-13</lastmod></url>
  <url><loc>https://coppersun.dev/blog/why-bandit-misses-ai-coder-bugs/</loc><lastmod>2026-06-13</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-coding-market-2026-five-numbers/</loc><lastmod>2026-06-15</lastmod></url>
  <url><loc>https://coppersun.dev/blog/add-brasscoders-to-github-actions/</loc><lastmod>2026-06-19</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-team-code-review-policy/</loc><lastmod>2026-06-19</lastmod></url>
  <url><loc>https://coppersun.dev/blog/brasscoders-vs-coderabbit/</loc><lastmod>2026-06-19</lastmod></url>
  <url><loc>https://coppersun.dev/blog/fastapi-security-ai-coders/</loc><lastmod>2026-06-19</lastmod></url>
  <url><loc>https://coppersun.dev/blog/hipaa-soc2-code-scanning/</loc><lastmod>2026-06-19</lastmod></url>
  <url><loc>https://coppersun.dev/blog/pre-commit-hook-ai-coder-bugs/</loc><lastmod>2026-06-19</lastmod></url>
  <url><loc>https://coppersun.dev/blog/semgrep-vs-brasscoders/</loc><lastmod>2026-06-19</lastmod></url>
  <url><loc>https://coppersun.dev/blog/vibe-coding-safety-net/</loc><lastmod>2026-06-19</lastmod></url>
  <url><loc>https://coppersun.dev/blog/add-brasscoders-to-gitlab-ci/</loc><lastmod>2026-06-20</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-generated-test-debt/</loc><lastmod>2026-06-20</lastmod></url>
  <url><loc>https://coppersun.dev/blog/brasscoders-cursor-workflow/</loc><lastmod>2026-06-20</lastmod></url>
  <url><loc>https://coppersun.dev/blog/django-security-ai-coders/</loc><lastmod>2026-06-20</lastmod></url>
  <url><loc>https://coppersun.dev/blog/python-dependency-hallucination/</loc><lastmod>2026-06-20</lastmod></url>
  <url><loc>https://coppersun.dev/blog/snyk-vs-brasscoders/</loc><lastmod>2026-06-20</lastmod></url>
  <url><loc>https://coppersun.dev/blog/sonarqube-vs-brasscoders/</loc><lastmod>2026-06-20</lastmod></url>
  <url><loc>https://coppersun.dev/blog/soc2-audit-trail-brasscoders/</loc><lastmod>2026-06-20</lastmod></url>
  <url><loc>https://coppersun.dev/blog/triage-static-analysis-findings/</loc><lastmod>2026-06-20</lastmod></url>
  <url><loc>https://coppersun.dev/blog/tuning-brasscoders-brassignore/</loc><lastmod>2026-06-20</lastmod></url>
  <url><loc>https://coppersun.dev/blog/brasscoders-research-now-public/</loc><lastmod>2026-06-20</lastmod></url>
  <url><loc>https://coppersun.dev/blog/why-better-ai-models-make-bugs-harder-to-catch/</loc><lastmod>2026-06-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/catching-hallucinated-imports/</loc><lastmod>2026-06-23</lastmod></url>
  <url><loc>https://coppersun.dev/blog/catching-slow-ai-generated-code/</loc><lastmod>2026-06-23</lastmod></url>
  <url><loc>https://coppersun.dev/blog/catching-hardcoded-secrets/</loc><lastmod>2026-06-23</lastmod></url>
  <url><loc>https://coppersun.dev/blog/oss-scanners-brasscoders-bundles/</loc><lastmod>2026-06-23</lastmod></url>
  <url><loc>https://coppersun.dev/blog/flagging-pii-in-ai-code/</loc><lastmod>2026-06-23</lastmod></url>
  <url><loc>https://coppersun.dev/blog/scanning-ai-javascript-typescript/</loc><lastmod>2026-06-23</lastmod></url>
  <url><loc>https://coppersun.dev/blog/oss-core-vs-paid/</loc><lastmod>2026-06-23</lastmod></url>
  <url><loc>https://coppersun.dev/blog/what-paid-enrichment-does/</loc><lastmod>2026-06-23</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-code-buggier-2026-data/</loc><lastmod>2026-06-29</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-coding-speed-perception-gap/</loc><lastmod>2026-06-29</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-python-static-analysis-benchmark/</loc><lastmod>2026-06-29</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-python-bug-taxonomy/</loc><lastmod>2026-06-29</lastmod></url>
  <url><loc>https://coppersun.dev/blog/deterministic-gate-vs-llm-reviewer/</loc><lastmod>2026-06-29</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-assistant-needs-deterministic-pre-pass/</loc><lastmod>2026-07-08</lastmod></url>
  <url><loc>https://coppersun.dev/blog/command-injection-ai-python-shell-true/</loc><lastmod>2026-07-08</lastmod></url>
  <url><loc>https://coppersun.dev/blog/false-positive-feature-not-bug-static-analysis/</loc><lastmod>2026-07-08</lastmod></url>
  <url><loc>https://coppersun.dev/blog/findings-file-vs-chat-prompt-ai-code-review/</loc><lastmod>2026-07-08</lastmod></url>
  <url><loc>https://coppersun.dev/blog/hardcoded-credentials-ai-generated-python/</loc><lastmod>2026-07-08</lastmod></url>
  <url><loc>https://coppersun.dev/blog/how-claude-code-reads-brasscoders-findings/</loc><lastmod>2026-07-08</lastmod></url>
  <url><loc>https://coppersun.dev/blog/llm-reviewer-not-a-security-gate/</loc><lastmod>2026-07-08</lastmod></url>
  <url><loc>https://coppersun.dev/blog/sql-injection-ai-generated-python/</loc><lastmod>2026-07-08</lastmod></url>
  <url><loc>https://coppersun.dev/blog/unsafe-deserialization-ai-python-yaml-pickle-eval/</loc><lastmod>2026-07-08</lastmod></url>
  <url><loc>https://coppersun.dev/blog/yaml-first-context-pattern-ai-coding-assistants/</loc><lastmod>2026-07-08</lastmod></url>
  <url><loc>https://coppersun.dev/blog/brass-seo-boundary-content-case-study/</loc><lastmod>2026-07-14</lastmod></url>
  <url><loc>https://coppersun.dev/blog/every-ai-code-review-blind-spot-is-the-same/</loc><lastmod>2026-07-14</lastmod></url>
  <url><loc>https://coppersun.dev/blog/logic-bug-no-scanner-can-see/</loc><lastmod>2026-07-14</lastmod></url>
  <url><loc>https://coppersun.dev/blog/prompt-injection-ai-coding-agents/</loc><lastmod>2026-07-14</lastmod></url>
  <url><loc>https://coppersun.dev/blog/security-misconfiguration-is-a-runtime-fact/</loc><lastmod>2026-07-14</lastmod></url>
  <url><loc>https://coppersun.dev/blog/the-authorization-bug-no-scanner-understands/</loc><lastmod>2026-07-14</lastmod></url>
  <url><loc>https://coppersun.dev/blog/the-backdoor-built-to-pass-review/</loc><lastmod>2026-07-14</lastmod></url>
  <url><loc>https://coppersun.dev/blog/the-slow-code-no-scanner-can-flag/</loc><lastmod>2026-07-14</lastmod></url>
  <url><loc>https://coppersun.dev/blog/weak-crypto-ai-generated-python/</loc><lastmod>2026-07-14</lastmod></url>
  <url><loc>https://coppersun.dev/blog/what-ai-recommends-to-catch-ai-bugs/</loc><lastmod>2026-07-14</lastmod></url>
  <url><loc>https://coppersun.dev/blog/where-llm-apps-leak-data/</loc><lastmod>2026-07-14</lastmod></url>
  <url><loc>https://coppersun.dev/blog/package-hallucination-the-import-your-ai-invented/</loc><lastmod>2026-07-17</lastmod></url>
  <url><loc>https://coppersun.dev/blog/agentic-code-security-autonomous-ai/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-code-policy-regulated-industries/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-code-review-policy-template/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/async-race-conditions-ai-generated-python/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/brasscoders-scans-llm-application-code/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/flask-security-ai-coders/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/gdpr-ai-code-data-handling/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/mass-assignment-ai-generated-api/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/onboarding-ai-assisted-developers/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/owasp-llm-top-10-for-builders/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/path-traversal-ai-generated-python/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/scanning-ai-typescript-security/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/soc2-audit-trail-ai-development/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/sqlalchemy-raw-query-ai-generated/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ssrf-ai-tool-calls/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/vibe-coding-secrets-policy/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/vibe-coding-team-consistency/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/vibe-coding-velocity-risk/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/weak-random-ai-generated-python/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/xss-llm-output-ai-applications/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ssl-verify-false-ai-generated-python/</loc><lastmod>2026-07-22</lastmod></url>
  <url><loc>https://coppersun.dev/blog/ai-code-security-scanners-compared/</loc><lastmod>2026-07-31</lastmod></url>
</urlset>