<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://kodydoherty.com/</loc></url><url><loc>https://kodydoherty.com/blog/</loc></url><url><loc>https://kodydoherty.com/blog/ai-security-for-startups-practical-threat-model/</loc></url><url><loc>https://kodydoherty.com/blog/hipaa-compliance-for-health-tech-startups/</loc></url><url><loc>https://kodydoherty.com/blog/hipaa-on-aws-baas-encryption-audit-config/</loc></url><url><loc>https://kodydoherty.com/blog/how-i-cut-aws-costs-70-percent-dod-contractor/</loc></url><url><loc>https://kodydoherty.com/blog/launching-practicerank-aeo-seo-for-practices/</loc></url><url><loc>https://kodydoherty.com/blog/pastel-protein-launch-two-years-rd/</loc></url><url><loc>https://kodydoherty.com/blog/scaling-from-zero-to-50m-infrastructure-decisions/</loc></url><url><loc>https://kodydoherty.com/blog/securing-llm-apps-prompt-injection-data-leakage-guardrails/</loc></url><url><loc>https://kodydoherty.com/blog/should-you-let-ai-agents-touch-production/</loc></url><url><loc>https://kodydoherty.com/blog/smileshape-soc2-hipaa-eight-figure-valuation/</loc></url><url><loc>https://kodydoherty.com/blog/soc2-for-seed-stage-startups-what-it-takes/</loc></url><url><loc>https://kodydoherty.com/blog/soc2-on-aws-controls-that-matter/</loc></url><url><loc>https://kodydoherty.com/blog/soc2-type-i-vs-type-ii-which-do-you-need/</loc></url></urlset>