<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
<url>
<loc>https://whataboutapis.com</loc>
<lastmod>2026-08-05T13:33:29.620Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://whataboutapis.com/sections/auth-security</loc>
<lastmod>2026-08-05T13:33:29.620Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://whataboutapis.com/authors/cora-contreras</loc>
<lastmod>2026-08-05T13:33:29.620Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://whataboutapis.com/authors/felix-ford</loc>
<lastmod>2026-08-05T13:33:29.620Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://whataboutapis.com/authors/kwame-rossi</loc>
<lastmod>2026-08-05T13:33:29.620Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://whataboutapis.com/authors/lucia-park</loc>
<lastmod>2026-08-05T13:33:29.620Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://whataboutapis.com/authors/nadia-mbeki</loc>
<lastmod>2026-08-05T13:33:29.620Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://whataboutapis.com/authors/sofia-vance</loc>
<lastmod>2026-08-05T13:33:29.620Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://whataboutapis.com/authors/vera-yamada</loc>
<lastmod>2026-08-05T13:33:29.620Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://whataboutapis.com/posts/api-security-risks-in-multi-tenant-saas-products</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/6d483e42-b3f9-470b-ae45-640308c6db05/canvas/02eda707-0ac4-4778-9074-05bd07ef9f89/generated/3c08b571-0726-4466-85ef-b56c7fc8f62a.png</image:loc>
</image:image>
<lastmod>2026-08-05T13:33:29.620Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://whataboutapis.com/posts/token-refresh-handling-in-long-running-integrations</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/6d483e42-b3f9-470b-ae45-640308c6db05/canvas/02eda707-0ac4-4778-9074-05bd07ef9f89/generated/68032fb9-4484-4fbb-a1b2-d711d8010105.jpeg</image:loc>
</image:image>
<lastmod>2026-08-04T13:23:10.663Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://whataboutapis.com/posts/api-credential-storage-and-rotation-strategies</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/6d483e42-b3f9-470b-ae45-640308c6db05/canvas/02eda707-0ac4-4778-9074-05bd07ef9f89/generated/4d7f416c-5c8f-4d48-8886-b19c2dc4640d.jpeg</image:loc>
</image:image>
<lastmod>2026-08-03T13:23:43.676Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://whataboutapis.com/posts/oauth-2-0-scopes-and-least-privilege-api-access</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/6d483e42-b3f9-470b-ae45-640308c6db05/canvas/02eda707-0ac4-4778-9074-05bd07ef9f89/generated/dcaa4fe9-efd9-426c-b3fa-435368796895.jpeg</image:loc>
</image:image>
<lastmod>2026-08-02T13:32:56.790Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://whataboutapis.com/posts/api-gateway-security-configuration-best-practices</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/6d483e42-b3f9-470b-ae45-640308c6db05/canvas/02eda707-0ac4-4778-9074-05bd07ef9f89/generated/dbccfa55-4fbf-4f31-9015-92daa9196e57.jpeg</image:loc>
</image:image>
<lastmod>2026-08-01T13:18:42.743Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://whataboutapis.com/posts/rest-api-security-best-practices-in-production</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/6d483e42-b3f9-470b-ae45-640308c6db05/canvas/02eda707-0ac4-4778-9074-05bd07ef9f89/generated/017f484f-3c67-471b-9e89-678ab2845154.jpeg</image:loc>
</image:image>
<lastmod>2026-07-31T13:18:19.113Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://whataboutapis.com/posts/rest-api-authentication-methods-compared</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/6d483e42-b3f9-470b-ae45-640308c6db05/canvas/02eda707-0ac4-4778-9074-05bd07ef9f89/generated/1f1b9f13-d16f-4191-a677-9268c2b2d5fa.jpeg</image:loc>
</image:image>
<lastmod>2026-07-30T13:17:52.731Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
