<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://www.headerpilot.com/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/404.html</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.1</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/csp-generator/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/security-headers-checker/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/csp-checker/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/security-headers-for-static-sites/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/csp-for-cloudflare-pages/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/csp-for-nextjs/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/csp-for-shopify/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/csp-for-static-ssg/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/guide/what-is-csp/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/guide/nonce-vs-hash/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/guide/unsafe-inline-explained/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/guide/security-headers-best-practices/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/faq/csp-not-working/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/faq/script-blocked-by-csp/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/faq/how-to-fix-missing-security-headers/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/faq/how-to-allow-third-party-scripts-safely/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/faq/debug-csp-with-devtools/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.headerpilot.com/faq/csp-local-vs-production/</loc>
    <lastmod>2026-06-13</lastmod>
    <priority>0.6</priority>
  </url>
</urlset>
