<?xml version="1.0" encoding="UTF-8"?>
<!--
  Every <loc> here MUST return HTTP 200 in production and MUST be listed in
  scripts/deploy.sh DEFAULT_FILES / DEFAULT_DIRS. A URL listed here but not
  deployed is reported by Google as "Not found (404)" (incident 2026-07-27:
  security-policy.html was in the sitemap and in every language footer, but
  missing from the deploy list). scripts/verify-live.sh now checks this.

  INDEX SCOPE (decision 2026-07-27): only Slovak and Hungarian belong in the
  index. The en/de/es/it mutations stay online and reachable through the footer
  switcher, but ship "noindex, follow" and are therefore deliberately ABSENT
  here - a noindex URL advertised in a sitemap is a contradiction that costs
  the whole file credibility. The same scope is enforced by INDEXED_LANGS in
  scripts/generate-i18n-pages.py; change it there, not only here.

  Every language group carries the FULL set of rel="alternate" hreflang links
  (bidirectional, self-referencing, plus x-default) - a one-sided alternate is
  ignored by Google, and so is a cluster that references noindex pages.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:xhtml="http://www.w3.org/1999/xhtml">

    <!-- Landing pages (indexed languages: sk, hu) -->
    <url>
        <loc>https://www.infosec.sk/</loc>
        <lastmod>2026-07-27</lastmod>
        <changefreq>monthly</changefreq>
        <priority>1.0</priority>
        <xhtml:link rel="alternate" hreflang="sk" href="https://www.infosec.sk/"/>
        <xhtml:link rel="alternate" hreflang="hu" href="https://www.infosec.sk/hu/"/>
        <xhtml:link rel="alternate" hreflang="x-default" href="https://www.infosec.sk/"/>
    </url>
    <url>
        <loc>https://www.infosec.sk/hu/</loc>
        <lastmod>2026-07-27</lastmod>
        <changefreq>monthly</changefreq>
        <priority>0.9</priority>
        <xhtml:link rel="alternate" hreflang="sk" href="https://www.infosec.sk/"/>
        <xhtml:link rel="alternate" hreflang="hu" href="https://www.infosec.sk/hu/"/>
        <xhtml:link rel="alternate" hreflang="x-default" href="https://www.infosec.sk/"/>
    </url>

    <!-- Privacy documents (indexed languages: sk, hu) -->
    <url>
        <loc>https://www.infosec.sk/privacy.html</loc>
        <lastmod>2026-07-27</lastmod>
        <changefreq>yearly</changefreq>
        <priority>0.3</priority>
        <xhtml:link rel="alternate" hreflang="sk" href="https://www.infosec.sk/privacy.html"/>
        <xhtml:link rel="alternate" hreflang="hu" href="https://www.infosec.sk/hu/adatkezeles.html"/>
        <xhtml:link rel="alternate" hreflang="x-default" href="https://www.infosec.sk/privacy.html"/>
    </url>
    <url>
        <loc>https://www.infosec.sk/hu/adatkezeles.html</loc>
        <lastmod>2026-07-27</lastmod>
        <changefreq>yearly</changefreq>
        <priority>0.3</priority>
        <xhtml:link rel="alternate" hreflang="sk" href="https://www.infosec.sk/privacy.html"/>
        <xhtml:link rel="alternate" hreflang="hu" href="https://www.infosec.sk/hu/adatkezeles.html"/>
        <xhtml:link rel="alternate" hreflang="x-default" href="https://www.infosec.sk/privacy.html"/>
    </url>

    <!-- Vulnerability disclosure policy (Slovak only - RFC 9116 "Policy:" target) -->
    <url>
        <loc>https://www.infosec.sk/security-policy.html</loc>
        <lastmod>2026-07-27</lastmod>
        <changefreq>yearly</changefreq>
        <priority>0.2</priority>
    </url>

</urlset>
