<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url><loc>https://softwaresafety.org/blog/</loc><lastmod>2026-11-09T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/blog/launching-the-software-safety-institute/</loc><lastmod>2026-11-09T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/</loc><lastmod>2026-11-09T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/type/commentary/</loc><lastmod>2026-10-16T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/cybersecurity-awareness-month-roundup/</loc><lastmod>2026-10-16T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/type/</loc><lastmod>2026-10-16T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/</loc><lastmod>2026-10-16T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/rsac-2026-edtech-panel/</loc><lastmod>2026-10-16T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/type/talk/</loc><lastmod>2026-10-16T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/type/consultation-response/</loc><lastmod>2026-10-13T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/nist-nvd-rfi-response/</loc><lastmod>2026-10-13T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/ai-safety-public-institutions/</loc><lastmod>2026-09-22T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/type/policy-memo/</loc><lastmod>2026-06-09T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/massachusetts-critical-services-cyber-preparedness/</loc><lastmod>2026-06-09T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/massachusetts-systemic-cyber-risk-strategy/</loc><lastmod>2026-06-08T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/massachusetts-breach-data-software-safety/</loc><lastmod>2026-05-14T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/enisa-secure-by-design-response/</loc><lastmod>2026-05-01T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/colorado-right-to-repair-software-safety/</loc><lastmod>2026-04-24T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/cyberattacks-essential-services-women/</loc><lastmod>2026-04-07T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/cyber-resilience-act-guidance-response/</loc><lastmod>2026-03-31T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/cyber-strategy-safer-software/</loc><lastmod>2026-03-12T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/small-business-software-safety-testimony/</loc><lastmod>2025-12-02T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/research/type/testimony/</loc><lastmod>2025-12-02T00:00:00+00:00</lastmod></url><url><loc>https://softwaresafety.org/about/</loc></url><url><loc>https://softwaresafety.org/drawings/</loc></url><url><loc>https://softwaresafety.org/contact/</loc></url><url><loc>https://softwaresafety.org/our-work/</loc></url><url><loc>https://softwaresafety.org/people/</loc></url><url><loc>https://softwaresafety.org/press/</loc></url><url><loc>https://softwaresafety.org/licensing/</loc></url><url><loc>https://softwaresafety.org/software-safety/</loc></url><url><loc>https://softwaresafety.org/support/</loc></url></urlset>