--- title: AppSec Excellence Blog | True Positives | Brian Pavicic description: Brian Pavicic founded True Positives to deliver comprehensive application security testing through cost-effective AppSecVar and managed service solutions. As an early member of @stake, he contributed to the development of modern application security practices. Over the past decade, Brian has focused on integrating automated tools with expert manual inspection to help organizations build digital trust efficiently and effectively. image: https://true-positives.com/hubfs/T%2B%20blog%20page%20header-1.svg --- [Skip to content](https://true-positives.com/appsec-blog/author/brian-pavicic#main-content) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Header%20Logo%20-%20500x125-1.png)](https://true-positives.com/?hsLang=en) - Resources - [Vulnerability Atlas](https://vulnerability-atlas.true-positives.com/index.html) # T+ Blog --- BLOG LISTING SIGNUP FORM ### Stay Ahead in AppSec Get practical insights to strengthen security, cut waste, and accelerate secure development. Whether refining your program or starting fresh, we focus on what works. **Explore our latest insights.** ## Latest Posts --- [![](https://true-positives.com/hubfs/Untitled%20%281200%20x%20630%20px%29%20%281%29-2.jpg)](https://true-positives.com/appsec-blog/beyond-the-pen-test-boom-true-positives) #### [Beyond the Pen Test Boom: How AppSec Firms Maintain Market Position](https://true-positives.com/appsec-blog/beyond-the-pen-test-boom-true-positives) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) [Read more](https://true-positives.com/appsec-blog/beyond-the-pen-test-boom-true-positives) [![True Positives and Invicti AppSec Partnership](https://true-positives.com/hubfs/T%2B%20%20Invicti%20Logo%20%281200%20x%20628%20px%29.jpg)](https://true-positives.com/appsec-blog/stronger-appsec-smarter-spending-t-and-invicti-one-year-in) #### [Stronger AppSec, Smarter Spending: T+ and Invicti—One Year In](https://true-positives.com/appsec-blog/stronger-appsec-smarter-spending-t-and-invicti-one-year-in) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) A year ago, True Positives made the strategic decision to upgrade the DAST technology powering our A... [Read more](https://true-positives.com/appsec-blog/stronger-appsec-smarter-spending-t-and-invicti-one-year-in) [![application vulnerability scanning outsourced](https://true-positives.com/hubfs/application-vulnerability-scanning.webp)](https://true-positives.com/appsec-blog/application-vulnerability-scanning-why-you-should-probably-be-outsourcing) #### [Application Vulnerability Scanning: Why You Should Probably Be Outsourcing](https://true-positives.com/appsec-blog/application-vulnerability-scanning-why-you-should-probably-be-outsourcing) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) Vulnerability scanning plays a crucial role in protecting your applications against potential threat... [Read more](https://true-positives.com/appsec-blog/application-vulnerability-scanning-why-you-should-probably-be-outsourcing) [![application security is a business driver header image](https://true-positives.com/hubfs/application-security-isnt-a-coast-drain-its-a-business-driver.webp)](https://true-positives.com/appsec-blog/application-security-isnt-a-cost-drain-its-a-business-driver) #### [Application Security Isn’t a Cost Drain – It’s a Business Driver](https://true-positives.com/appsec-blog/application-security-isnt-a-cost-drain-its-a-business-driver) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) When most of us think about our application security we think about it just as an expense – somethin... [Read more](https://true-positives.com/appsec-blog/application-security-isnt-a-cost-drain-its-a-business-driver) [![appsec automation vs manual header](https://true-positives.com/hubfs/application-security-automation-vs.-manual-testing.webp)](https://true-positives.com/appsec-blog/application-security-automation-vs.-manual-testing-pros-and-cons) #### [Application Security Automation vs. Manual Testing: Pros and Cons](https://true-positives.com/appsec-blog/application-security-automation-vs.-manual-testing-pros-and-cons) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) In the modern digital landscape, ensuring the security of applications is paramount. With the rise o... [Read more](https://true-positives.com/appsec-blog/application-security-automation-vs.-manual-testing-pros-and-cons) [![owasp top 10 blog header](https://true-positives.com/hubfs/understanding-owasp-a-guide-for-developers-and-security-professionals.webp)](https://true-positives.com/appsec-blog/understanding-owasp-a-guide-for-developers-and-security-professionals) #### [Understanding OWASP: A Guide for Developers and Security Professionals](https://true-positives.com/appsec-blog/understanding-owasp-a-guide-for-developers-and-security-professionals) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) In the realm of cybersecurity threats, the Open Web Application Security Project (OWASP) serves as a... [Read more](https://true-positives.com/appsec-blog/understanding-owasp-a-guide-for-developers-and-security-professionals) [![Cybersecurity Breach examples header](https://true-positives.com/hubfs/cybersecurity-breaches-real-world-examples-lessons-learned.webp)](https://true-positives.com/appsec-blog/cybersecurity-breaches-real-world-examples-lessons-learned) #### [Real World Examples of Security Breaches + Lessons Learned](https://true-positives.com/appsec-blog/cybersecurity-breaches-real-world-examples-lessons-learned) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) In today's landscape, application security should be a major focus for your business. A single breac... [Read more](https://true-positives.com/appsec-blog/cybersecurity-breaches-real-world-examples-lessons-learned) [![developer building out an application security testing program](https://true-positives.com/hubfs/application-security-testing-your-guide-to-building-an-ast-program.webp)](https://true-positives.com/appsec-blog/application-security-testing-your-guide-to-building-an-ast-program) #### [Application Security Testing: Your Guide to Building an AST Program](https://true-positives.com/appsec-blog/application-security-testing-your-guide-to-building-an-ast-program) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) In today's digital landscape, applications are the lifeblood of businesses, but they also represent ... [Read more](https://true-positives.com/appsec-blog/application-security-testing-your-guide-to-building-an-ast-program) [![ai generated code being used and presenting a security risk](https://true-positives.com/hubfs/ai-generated-code-security-risk-header.webp)](https://true-positives.com/appsec-blog/ai-generated-code-a-pandoras-box-of-security-risks) #### [AI-Generated Code: A Pandora's Box of Security Risks?](https://true-positives.com/appsec-blog/ai-generated-code-a-pandoras-box-of-security-risks) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) AI Software Engineering is here. This isn’t code completion. This isn’t a code generation framework.... [Read more](https://true-positives.com/appsec-blog/ai-generated-code-a-pandoras-box-of-security-risks) [![business executive saving money on application security](https://true-positives.com/hubfs/conquering-application-security-with-a-money-saving-sidekick-header.webp)](https://true-positives.com/appsec-blog/conquering-application-security-with-a-money-saving-sidekick) #### [Conquering Application Security with a Money-Saving Sidekick](https://true-positives.com/appsec-blog/conquering-application-security-with-a-money-saving-sidekick) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) Rising application security costs are effecting the global market. [Read more](https://true-positives.com/appsec-blog/conquering-application-security-with-a-money-saving-sidekick) [1](https://true-positives.com/appsec-blog/author/brian-pavicic) [2](https://true-positives.com/appsec-blog/author/brian-pavicic/page/2) [Next](https://true-positives.com/appsec-blog/author/brian-pavicic/page/2) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Footer%20Logo%20-%20360x90.png)](https://true-positives.com/?hsLang=en) [Managed AppSec](https://true-positives.com/managed_appsec_mssp) [In-House AppSec Support](https://true-positives.com/direct-platform-licensing) [PRO Services](https://true-positives.com/appsec-pro-services) [Why T+](https://true-positives.com/why-true-positives) [Resources](https://vulnerability-atlas.true-positives.com/index.html) [Contact Us](https://true-positives.com/contact-truepositives) © 2026 True Positives, LLC. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "US", "addressLocality" : "Chehalis", "addressRegion" : "Washington", "postalCode" : "98532", "streetAddress" : "110 Villageway Drive" }, "contactPoint" : [ { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-206-854-8999" }, { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-404-314-3929" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "Customer Support", "email" : "tplus-support@true-positives.com" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "General Inquiries", "email" : "contact@true-positives.com" } ], "description" : "True Positives is a trusted AppSec MSSP delivering expert-led DAST and automated vulnerability scanning—reducing risk, eliminating false positives, and cutting overhead without compromising security.", "email" : "info@true-positives.com", "logo" : { "@type" : "ImageObject", "url" : "https://true-positives.com/hs-fs/hubfs/managed-application-security-testing-true-positives-logo.jpg?width=640&height=160&name=managed-application-security-testing-true-positives-logo.jpg" }, "name" : "True Positives", "sameAs" : [ "https://www.linkedin.com/company/truepositives/", "https://www.facebook.com/truepositives/" ], "url" : "https://true-positives.com" } ``` ```json { "@context" : "https://schema.org", "@type" : "Product", "aggregateRating" : { "@type" : "AggregateRating", "ratingValue" : "5", "reviewCount" : "3" }, "name" : "True Positives Managed AppSec Services", "review" : [ { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Brook Schoenfield" }, "name" : "Valuable Insights for Strategic AppSec", "reviewBody" : "True Positives goes beyond simply identifying vulnerabilities in application security testing. Their managed service delivers actionable insights and prioritization, allowing businesses to mitigate risks effectively and allocate resources strategically, all while controlling costs.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Dan Kuykendall" }, "name" : "Reliable Scanning with Human Guidance", "reviewBody" : "True Positives offers a great option for managed scanning, offering a cost-effective solution for quality and reliable scans. They don’t just send reports—they verify vulnerabilities, guide developers, and help prioritize and fix issues.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Julie Richard" }, "name" : "Trusted DAST Partner for Enterprise Needs", "reviewBody" : "Partnering with True Positives for managed DAST services will save you countless hours and headaches. Their expertise and proactive approach streamline identification and prioritization of vulnerabilities while also ensuring development has the information it needs to secure valuable assets.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } } ] } ```