Our Mission: Quality + Affordable AppSec

With over 30 years of experience in tech and application security, Brian created True Positives with a mission to provide expert and affordable AppSec solutions. He has a track record of success in the industry, having worked with renowned companies like Apple, Boeing, Intel, Microsoft, McKesson, Oracle, and Rapid7.

Evan brings 15+ years of experience building software assurance programs for SMBs. With expertise in tools like Checkmarx, Rapid7 Insight AppSec, WhiteHat, Fortify, and Contrast, he helps develop full-service AppSec platforms for customers. Evan focuses on providing True Positives as a solution for SMBs in the application security space, delivering cost-effective full-service application security platforms.

Matthew is the co-founder and managing director at True Positives. He brings over 20 years of leadership experience in the technology industry. Prior to founding True Positives, he held multiple positions at NT OBJECTives, a web application security company acquired by Rapid7. He was responsible for QA, Product Management, Business Development, and Sales, leading the company to become a technical leader in web scanning for major clients like Microsoft, SAP, and Intel.

Dondi Simon brings over 20 years of experience in application security product and service to the True Positives team. Over the last 10 years he has been at the helm of managed application security services at industry leader Rapid7.

Willa brings 19 years of professional, hands-on experience across the application development, information security, and communications domains. She is experienced with the entire software development lifecycle from several viewpoints due to prior work as systems engineer, software engineer, security engineer and customer for several software, technical documentation, and communications projects. She is also active speaker and organizer in cybersecurity.

Clayton is a seasoned IT expert specializing in security, with experience ranging from small businesses to Fortune 100 companies. He has 25 years of experience in cloud and application security testing, security consulting, compliance services, and more. Clayton helps T+ enterprise customers address critical application security issues efficiently and at scale, drawing on his extensive background including but not limited to @stake, Veracode, and the original MSSP - Pilot Network Services.