<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1"><url><loc>https://www.dryrun.security/</loc><image:image><image:loc>https://www.dryrun.security/assets/product/dryrun-security-reporting-dashboard.webp</image:loc></image:image><image:image><image:loc>https://www.dryrun.security/assets/product/dryrun-security-code-analysis-evidence.webp</image:loc></image:image><image:image><image:loc>https://www.dryrun.security/assets/product/dryrun-security-change-context.webp</image:loc></image:image><image:image><image:loc>https://www.dryrun.security/assets/product/dryrun-security-sca-advanced-verification.webp</image:loc></image:image><image:image><image:loc>https://www.dryrun.security/assets/product/dryrun-security-dependency-affected-repositories.webp</image:loc></image:image><image:image><image:loc>https://www.dryrun.security/assets/product/dryrun-security-code-policy-library.webp</image:loc></image:image><image:image><image:loc>https://www.dryrun.security/assets/product/dryrun-security-ai-coding-agent-integrations.webp</image:loc></image:image></url><url><loc>https://www.dryrun.security/brand-guidelines</loc></url><url><loc>https://www.dryrun.security/ai-code-security-build-vs-buy</loc></url><url><loc>https://www.dryrun.security/ai-office-hours-with-the-dryrun-founders</loc></url><url><loc>https://www.dryrun.security/ai-powered-appsec</loc></url><url><loc>https://www.dryrun.security/auth-flaws</loc></url><url><loc>https://www.dryrun.security/blog</loc></url><url><loc>https://www.dryrun.security/blog/7-mistakes-teams-make-when-building-ai-applications</loc></url><url><loc>https://www.dryrun.security/blog/a-developers-perspective-on-the-future-of-application-security</loc></url><url><loc>https://www.dryrun.security/blog/ai-wrote-the-bug-ai-missed-the-bug-dryrun-security-found-it</loc></url><url><loc>https://www.dryrun.security/blog/an-agnostic-approach-to-appsec-navigating-the-future-with-ai</loc></url><url><loc>https://www.dryrun.security/blog/announcing-deepscan-agent-fast-full-repository-code-security-intelligence</loc></url><url><loc>https://www.dryrun.security/blog/announcing-natural-language-code-policies</loc></url><url><loc>https://www.dryrun.security/blog/announcing-the-secrets-analyzer-for-dryrun-security</loc></url><url><loc>https://www.dryrun.security/blog/announcing-the-ssrf-and-idor-analyzers-at-dryrun-security</loc></url><url><loc>https://www.dryrun.security/blog/anthropic-reimagined-the-sdlc-appsec-got-markdown-files</loc></url><url><loc>https://www.dryrun.security/blog/beyond-pattern-matching-why-context-is-the-future-of-application-security</loc></url><url><loc>https://www.dryrun.security/blog/beyond-reachability-the-exploitability-advantage-in-appsec</loc></url><url><loc>https://www.dryrun.security/blog/bringing-next-generation-appsec-to-github-enterprise-server</loc></url><url><loc>https://www.dryrun.security/blog/build-vs-buy-for-ai-appsec-why-ai-security-requires-independent-verification</loc></url><url><loc>https://www.dryrun.security/blog/building-fast-learning-faster-why-dryrun-isnt-exposed-to-the-coderabbit-style-rce-and-what-weve-learned-about-our-own-gaps</loc></url><url><loc>https://www.dryrun.security/blog/constructing-a-trustworthy-evaluation-methodology-for-contextual-security-analysis</loc></url><url><loc>https://www.dryrun.security/blog/context-over-control-securitys-new-path-from-developerweek</loc></url><url><loc>https://www.dryrun.security/blog/determinism-vs-probabilism-rethinking-accuracy-in-static-application-security-testing</loc></url><url><loc>https://www.dryrun.security/blog/developers-and-security-are-friends-day</loc></url><url><loc>https://www.dryrun.security/blog/disruption-not-deletion-how-ai-is-rewiring-application-security</loc></url><url><loc>https://www.dryrun.security/blog/dryrun-security-announces-soc2-type-ii-certification</loc></url><url><loc>https://www.dryrun.security/blog/dryrun-security-builds-momentum-with-breakthroughs-in-ai-native-code-security-intelligence</loc></url><url><loc>https://www.dryrun.security/blog/dryrun-security-introduces-contextual-security-analysis-guide-for-appsec</loc></url><url><loc>https://www.dryrun.security/blog/dryrun-security-named-a-high-performer-in-sast-on-g2-spring-2026</loc></url><url><loc>https://www.dryrun.security/blog/dryrun-security-named-finalist-for-2024-blackhat-startup-spotlight-competition</loc></url><url><loc>https://www.dryrun.security/blog/dryrun-security-q1-2026-everything-we-shipped-and-why-it-matters</loc></url><url><loc>https://www.dryrun.security/blog/dryrun-security-vs-semgrep-sonarqube-codeql-and-snyk---c-security-analysis-showdown</loc></url><url><loc>https://www.dryrun.security/blog/dryrun-security-vs-snyk-codeql-sonarqube-and-semgrep---python-django-security-analysis-showdown</loc></url><url><loc>https://www.dryrun.security/blog/dryrun-security-vs-traditional-sast-vendors-in-ruby-on-rails</loc></url><url><loc>https://www.dryrun.security/blog/easing-the-friction-between-security-and-developers</loc></url><url><loc>https://www.dryrun.security/blog/false-positives-reduction-is-a-red-herring--accuracy-is-king-in-application-security</loc></url><url><loc>https://www.dryrun.security/blog/finding-risky-code-changes-inside-auth-functions</loc></url><url><loc>https://www.dryrun.security/blog/for-devsecops-sast-is-table-stakes</loc></url><url><loc>https://www.dryrun.security/blog/forget-mythos-ready-build-something-better</loc></url><url><loc>https://www.dryrun.security/blog/from-black-hat-2024-the-ai-transformation-in-appsec</loc></url><url><loc>https://www.dryrun.security/blog/how-ai-and-llms-will-shape-appsec-in-2025</loc></url><url><loc>https://www.dryrun.security/blog/how-we-harnessed-llms-for-security-and-why-testing-is-our-secret-weapon</loc></url><url><loc>https://www.dryrun.security/blog/how-we-keep-your-code-safe-at-dryrun-security</loc></url><url><loc>https://www.dryrun.security/blog/how-we-turned-natural-language-into-a-scalable-agentic-appsec-engine</loc></url><url><loc>https://www.dryrun.security/blog/if-your-code-changes-your-rules-should-too</loc></url><url><loc>https://www.dryrun.security/blog/introducing-risk-register</loc></url><url><loc>https://www.dryrun.security/blog/introducing-the-llm-app-risk-white-paper</loc></url><url><loc>https://www.dryrun.security/blog/java-spring-security-analysis-showdown</loc></url><url><loc>https://www.dryrun.security/blog/meet-code-insights-mcp-your-secure-code-concierge</loc></url><url><loc>https://www.dryrun.security/blog/more-findings-more-security</loc></url><url><loc>https://www.dryrun.security/blog/mttr-2-0-mean-time-to-regex-and-the-hidden-cost-of-rule-inflation</loc></url><url><loc>https://www.dryrun.security/blog/natural-language-code-policies-in-action-real-world-lessons</loc></url><url><loc>https://www.dryrun.security/blog/next-level-application-security-leveraging-llms-in-practice</loc></url><url><loc>https://www.dryrun.security/blog/nobody-makes-their-own-screws-anymore</loc></url><url><loc>https://www.dryrun.security/blog/notes-from-the-best-owasp-event-yet</loc></url><url><loc>https://www.dryrun.security/blog/one-year-of-using-llms-for-application-security-what-we-learned</loc></url><url><loc>https://www.dryrun.security/blog/sast-accuracy-the-metric-that-matters</loc></url><url><loc>https://www.dryrun.security/blog/say-goodbye-to-sqli-in-go-and-python</loc></url><url><loc>https://www.dryrun.security/blog/securing-agent-skills-in-agentic-development-2</loc></url><url><loc>https://www.dryrun.security/blog/security-as-control-composition-or-context</loc></url><url><loc>https://www.dryrun.security/blog/security-that-listens-introducing-pr-feedback-in-dryrun-security</loc></url><url><loc>https://www.dryrun.security/blog/steering-agentic-security-scanners-with-git-behavioral-graphs</loc></url><url><loc>https://www.dryrun.security/blog/technology-veterans-james-wickett-and-ken-johnson-launch-dryrun-security-to-bring-security-to-developers</loc></url><url><loc>https://www.dryrun.security/blog/techstrong-tv-interview-on-dryrun-security-launch</loc></url><url><loc>https://www.dryrun.security/blog/the-ai-security-industry-has-a-measurement-problem</loc></url><url><loc>https://www.dryrun.security/blog/the-half-life-and-decay-of-static-rules-in-a-modern-codebase</loc></url><url><loc>https://www.dryrun.security/blog/the-next-generation-of-appsec-is-upon-us-part-ii</loc></url><url><loc>https://www.dryrun.security/blog/the-rise-of-ai-native-sast</loc></url><url><loc>https://www.dryrun.security/blog/top-ai-sast-tools-2026</loc></url><url><loc>https://www.dryrun.security/blog/velocity-without-vision-ai-code-development-security</loc></url><url><loc>https://www.dryrun.security/blog/vibe-coding-with-ai-speedy-dev-sneaky-vulnerabilities</loc></url><url><loc>https://www.dryrun.security/blog/welcome-to-dryrun-security-blog</loc></url><url><loc>https://www.dryrun.security/blog/welcoming-andrew-peterson-to-the-dryrun-security-board</loc></url><url><loc>https://www.dryrun.security/blog/what-202-700-security-findings-reveal-about-ai-risk-in-code</loc></url><url><loc>https://www.dryrun.security/blog/what-is-dryrun-security</loc></url><url><loc>https://www.dryrun.security/blog/what-your-git-history-knows-that-your-call-graph-doesnt</loc></url><url><loc>https://www.dryrun.security/blog/what-your-git-history-knows-that-your-threat-model-doesnt</loc></url><url><loc>https://www.dryrun.security/blog/what-your-git-history-knows-that-your-wiki-doesnt</loc></url><url><loc>https://www.dryrun.security/blog/why-i-joined-dryrun-security</loc></url><url><loc>https://www.dryrun.security/blog/why-llm-vendors-arent-the-same-as-code-security-intelligence</loc></url><url><loc>https://www.dryrun.security/blog/why-we-trained-our-own-security-finding-classifier</loc></url><url><loc>https://www.dryrun.security/blog/your-agent-harness-is-not-an-orchestration-layer</loc></url><url><loc>https://www.dryrun.security/blog/your-ai-scanner-is-still-thinking-like-a-scanner</loc></url><url><loc>https://www.dryrun.security/case-studies/cutting-sast-noise-and-giving-developers-pr-ready-security-context-at-commerce</loc></url><url><loc>https://www.dryrun.security/case-studies/turning-a-lean-appsec-team-into-a-force-multiplier-for-ai-generated-code</loc></url><url><loc>https://www.dryrun.security/code-safety</loc></url><url><loc>https://www.dryrun.security/custom-code-policy-agent</loc></url><url><loc>https://www.dryrun.security/customers</loc></url><url><loc>https://www.dryrun.security/dryrun-datasheet</loc></url><url><loc>https://www.dryrun.security/faqs</loc></url><url><loc>https://www.dryrun.security/gated/contextual-security-analysis</loc></url><url><loc>https://www.dryrun.security/gated/security-scanner-bakeoff</loc></url><url><loc>https://www.dryrun.security/get-a-demo</loc></url><url><loc>https://www.dryrun.security/get-started</loc></url><url><loc>https://www.dryrun.security/lp/ai-security-assessment</loc></url><url><loc>https://www.dryrun.security/newsroom-copy</loc></url><url><loc>https://www.dryrun.security/newsroom</loc></url><url><loc>https://www.dryrun.security/privacy-policy</loc></url><url><loc>https://www.dryrun.security/product/application-security-secrets</loc></url><url><loc>https://www.dryrun.security/product/codebase-intelligence</loc></url><url><loc>https://www.dryrun.security/product/custom-code-policies</loc></url><url><loc>https://www.dryrun.security/product/infrastructure-as-code-iac-security</loc></url><url><loc>https://www.dryrun.security/product/pr-code-reviews</loc></url><url><loc>https://www.dryrun.security/product/sast-deepscan-full-repository-security-scan</loc></url><url><loc>https://www.dryrun.security/product/sast</loc></url><url><loc>https://www.dryrun.security/resources</loc></url><url><loc>https://www.dryrun.security/resources/csa-guide</loc></url><url><loc>https://www.dryrun.security/resources/owasp-top-10-llm-building-secure-applications</loc></url><url><loc>https://www.dryrun.security/sast-accuracy-report</loc></url><url><loc>https://www.dryrun.security/terms-of-service</loc></url><url><loc>https://www.dryrun.security/the-agentic-coding-security-report</loc></url><url><loc>https://www.dryrun.security/webinar/ai-office-hours-with-the-dryrun-founders---surviving-appsec-in-the-ai-trenches</loc></url><url><loc>https://www.dryrun.security/webinar/ai-office-hours-with-the-dryrun-founders---under-the-hood-of-the-new-dryrun-ui</loc></url><url><loc>https://www.dryrun.security/webinar/ai-office-hours-with-the-dryrun-founders-coffee-with-the-founders-live-q-a</loc></url><url><loc>https://www.dryrun.security/webinar/ask-the-experts-mythos-agentic-code-risk-and-whats-next-for-appsec</loc></url><url><loc>https://www.dryrun.security/webinar/from-code-to-cloud-closing-the-gap-between-appsec-and-secops</loc></url><url><loc>https://www.dryrun.security/webinar/from-findings-to-fixes-how-simplerose-builds-developer-trusted-appsec</loc></url><url><loc>https://www.dryrun.security/webinar/lets-talk-about-appsec-and-ai</loc></url><url><loc>https://www.dryrun.security/webinar/security-reviews-irl</loc></url><url><loc>https://www.dryrun.security/webinar/the-future-of-appsec-open-source-and-your-role-in-the-age-of-ai</loc></url><url><loc>https://www.dryrun.security/webinar/what-secure-code-reviews-should-look-like-in-the-age-of-ai</loc></url><url><loc>https://www.dryrun.security/webinar/when-to-use-agents-vs-static-controls-in-appsec</loc></url><url><loc>https://www.dryrun.security/webinars/from-lessons-learned-to-successes-leveraging-llms-in-appsec</loc></url><url><loc>https://www.dryrun.security/webinars/hands-on-with-ai-using-llms-to-detect-idor-and-auth-flaws</loc></url><url><loc>https://www.dryrun.security/product/advanced-verification</loc></url><url><loc>https://www.dryrun.security/about</loc></url><url><loc>https://www.dryrun.security/webinar/ai-office-hours-with-the-dryrun-founders---dryrun-wrapped-q3-product-announcements</loc></url><url><loc>https://www.dryrun.security/AISSMM</loc></url><url><loc>https://www.dryrun.security/resources/nlcp-starter-pack</loc></url><url><loc>https://www.dryrun.security/blog/appsec-the-next-generation</loc></url><url><loc>https://www.dryrun.security/blog/what-is-agentic-appsec</loc></url><url><loc>https://www.dryrun.security/webinar/ai-office-hours-with-the-dryrun-founders---fix-it-before-it-merges</loc></url><url><loc>https://www.dryrun.security/webinar/ai-office-hours-with-the-dryrun-founders---full-repo-scanning-with-deepscan</loc></url></urlset>
