<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://shah.sa/</loc></url><url><loc>https://shah.sa/ai-governance-saudi-arabia/</loc></url><url><loc>https://shah.sa/ai-security-lab/</loc></url><url><loc>https://shah.sa/ai-security-lab/frameworks/</loc></url><url><loc>https://shah.sa/ai-security-lab/labs/</loc></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-001-direct-prompt-injection/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-002-indirect-prompt-injection/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-003-system-prompt-context-leakage/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-004-sensitive-information-disclosure/</loc><lastmod>2026-09-21T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-004-sensitive-information-disclosure/source/</loc><lastmod>2026-09-21T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-005-rag-data-exfiltration/</loc><lastmod>2026-09-21T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-005-rag-data-exfiltration/source/</loc><lastmod>2026-09-21T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-006-rag-poisoning/</loc><lastmod>2026-09-23T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-006-rag-poisoning/source/</loc><lastmod>2026-09-23T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-007-malicious-document-injection/</loc><lastmod>2026-09-23T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-007-malicious-document-injection/source/</loc><lastmod>2026-09-23T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-008-vector-database-authorization-failure/</loc><lastmod>2026-09-23T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-008-vector-database-authorization-failure/source/</loc><lastmod>2026-09-23T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-009-cross-tenant-rag-leakage/</loc><lastmod>2026-09-23T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-009-cross-tenant-rag-leakage/source/</loc><lastmod>2026-09-23T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-010-unsafe-llm-output-handling/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-011-agent-tool-abuse/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-012-agent-privilege-escalation/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-013-excessive-agency/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-014-unsafe-delegation/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-015-mcp-server-trust-failure/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-016-malicious-mcp-tool/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-017-agent-memory-poisoning/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-018-ai-credential-secret-exposure/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-019-llm-gateway-policy-bypass/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-020-ai-supply-chain-model-provenance/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-021-malicious-model-unsafe-serialization/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-022-ai-logging-detection-failure/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-023-guardrail-bypass/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-024-multi-turn-manipulation/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/labs/asl-025-agent-human-approval-boundary-failure/</loc><lastmod>2026-09-20T00:00:00.000Z</lastmod></url><url><loc>https://shah.sa/ai-security-lab/methodology/</loc></url><url><loc>https://shah.sa/ai-security-lab/research/</loc></url><url><loc>https://shah.sa/ai-security/</loc></url><url><loc>https://shah.sa/ai-security/agentic-ai-security/</loc></url><url><loc>https://shah.sa/ai-security/ai-security-posture/</loc></url><url><loc>https://shah.sa/ai-security/architecture/</loc></url><url><loc>https://shah.sa/ai-security/governance/</loc></url><url><loc>https://shah.sa/ai-security/llm-gateway/</loc></url><url><loc>https://shah.sa/ai-security/llm-rag-security/</loc></url><url><loc>https://shah.sa/ai-security/monitoring-detection/</loc></url><url><loc>https://shah.sa/ai-security/red-teaming/</loc></url><url><loc>https://shah.sa/ai-security/secure-private-ai/</loc></url><url><loc>https://shah.sa/ai-security/supply-chain/</loc></url><url><loc>https://shah.sa/architecture-review/</loc></url><url><loc>https://shah.sa/contact/</loc></url><url><loc>https://shah.sa/experience/</loc></url><url><loc>https://shah.sa/free-architecture-review/</loc></url><url><loc>https://shah.sa/insights/</loc></url><url><loc>https://shah.sa/insights/architecture-review-before-you-commit/</loc></url><url><loc>https://shah.sa/insights/tags/architecture/</loc></url><url><loc>https://shah.sa/insights/tags/cloud/</loc></url><url><loc>https://shah.sa/insights/tags/governance/</loc></url><url><loc>https://shah.sa/nca-cybersecurity-readiness/</loc></url><url><loc>https://shah.sa/saudi-cloud-migration/</loc></url><url><loc>https://shah.sa/services/</loc></url><url><loc>https://shah.sa/solutions/</loc></url><url><loc>https://shah.sa/solutions/board-asks-about-ai-governance/</loc></url><url><loc>https://shah.sa/solutions/choosing-a-cloud-for-saudi-data/</loc></url><url><loc>https://shah.sa/solutions/cloud-bill-keeps-growing/</loc></url><url><loc>https://shah.sa/solutions/is-our-rag-chatbot-safe-to-launch/</loc></url><url><loc>https://shah.sa/solutions/iso-27001-without-paperwork/</loc></url><url><loc>https://shah.sa/solutions/judging-a-vendor-cloud-architecture/</loc></url><url><loc>https://shah.sa/solutions/leaving-a-local-hosting-provider/</loc></url><url><loc>https://shah.sa/solutions/nca-ecc-requirement-no-security-team/</loc></url><url><loc>https://shah.sa/solutions/passing-government-security-review/</loc></url><url><loc>https://shah.sa/solutions/sama-cybersecurity-evidence/</loc></url><url><loc>https://shah.sa/solutions/si-bidding-on-government-cloud-tenders/</loc></url><url><loc>https://shah.sa/solutions/staff-using-public-ai-tools/</loc></url><url><loc>https://shah.sa/solutions/untested-disaster-recovery-plan/</loc></url><url><loc>https://shah.sa/third-party-application-security/</loc></url></urlset>