--- title: AppSec Excellence Blog | True Positives | Evan Oslick description: T+ blog focuses on what works in AppSec & DevSecOps—strategies to strengthen security, cut costs and complexity, and speed delivery of secure products. image: https://true-positives.com/hubfs/T%2B%20blog%20page%20header-1.svg --- [Skip to content](https://true-positives.com/appsec-blog/author/evan-oslick#main-content) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Header%20Logo%20-%20500x125-1.png)](https://true-positives.com/?hsLang=en) - Resources - [Vulnerability Atlas](https://vulnerability-atlas.true-positives.com/index.html) # T+ Blog --- BLOG LISTING SIGNUP FORM ### Stay Ahead in AppSec Get practical insights to strengthen security, cut waste, and accelerate secure development. Whether refining your program or starting fresh, we focus on what works. **Explore our latest insights.** ## Latest Posts --- [![threat modeling for the modern age](https://true-positives.com/hubfs/rethinking-threat-models-for-the-modern-age.webp)](https://true-positives.com/appsec-blog/rethinking-threat-models-for-the-modern-age) #### [Rethinking Threat Models for the Modern Age](https://true-positives.com/appsec-blog/rethinking-threat-models-for-the-modern-age) [Evan Oslick](https://true-positives.com/appsec-blog/author/evan-oslick) Have you ever wondered if the person you put as an emergency contact will answer the call or respond... [Read more](https://true-positives.com/appsec-blog/rethinking-threat-models-for-the-modern-age) [![crowdstrike outage information](https://true-positives.com/hubfs/crowdstrike-outage-thoughts-and-considerations.webp)](https://true-positives.com/appsec-blog/crowdstrike-outage-thoughts-and-considerations) #### [CrowdStrike Outage Thoughts and Considerations](https://true-positives.com/appsec-blog/crowdstrike-outage-thoughts-and-considerations) [Evan Oslick](https://true-positives.com/appsec-blog/author/evan-oslick) On July 19, 2024, CrowdStrike released a crucial update that unintentionally caused major disruption... [Read more](https://true-positives.com/appsec-blog/crowdstrike-outage-thoughts-and-considerations) [![cdk global data breach header](https://true-positives.com/hubfs/cdk-global-breach-lessons-in-application-security-and-incident-response.webp)](https://true-positives.com/appsec-blog/cdk-global-breach-appsec-lessons-incident-response-true-positives) #### [CDK Global Breach: AppSec Lessons & Incident Response](https://true-positives.com/appsec-blog/cdk-global-breach-appsec-lessons-incident-response-true-positives) [Evan Oslick](https://true-positives.com/appsec-blog/author/evan-oslick) CDK Global appears to have experienced multiple breaches over the past week, leading to significant ... [Read more](https://true-positives.com/appsec-blog/cdk-global-breach-appsec-lessons-incident-response-true-positives) [![ai software blog header](https://true-positives.com/hubfs/ai-revolutionizing-software-engineering-and-security.webp)](https://true-positives.com/appsec-blog/ai-revolutionizing-software-engineering-and-security) #### [Will AI Revolutionizing Software Engineering and Security?](https://true-positives.com/appsec-blog/ai-revolutionizing-software-engineering-and-security) [Evan Oslick](https://true-positives.com/appsec-blog/author/evan-oslick) The software industry is on the brink of a revolution and Artificial intelligence (AI) is the drivin... [Read more](https://true-positives.com/appsec-blog/ai-revolutionizing-software-engineering-and-security) [![datadog state of devesecops report opinion header](https://true-positives.com/hubfs/the-state-of-devsecops-the-dog-that-isnt-barking.webp)](https://true-positives.com/appsec-blog/the-state-of-devsecops-the-dog-that-isnt-barking) #### [DataDog State Of DevSecOps Report: The Dog That Isn’t Barking](https://true-positives.com/appsec-blog/the-state-of-devsecops-the-dog-that-isnt-barking) [Evan Oslick](https://true-positives.com/appsec-blog/author/evan-oslick) DataDog recently released its State of DevSecOps research findings which you can find here. In it, t... [Read more](https://true-positives.com/appsec-blog/the-state-of-devsecops-the-dog-that-isnt-barking) [![](https://true-positives.com/hubfs/appsec-easy-wins-hard-wins-header.webp)](https://true-positives.com/appsec-blog/get-the-easy-wins-stop-hiding-from-the-hard-ones) #### [Get the Easy Wins. Stop Hiding from the Hard Ones.](https://true-positives.com/appsec-blog/get-the-easy-wins-stop-hiding-from-the-hard-ones) [Evan Oslick](https://true-positives.com/appsec-blog/author/evan-oslick) The price of remediating security findings can range from free to decimating the capabilities of a p... [Read more](https://true-positives.com/appsec-blog/get-the-easy-wins-stop-hiding-from-the-hard-ones) [![example of appsec tools being used this year](https://true-positives.com/hubfs/AppSec-Tools-in-2023-header.webp)](https://true-positives.com/appsec-blog/how-to-navigate-the-maze-of-appsec-tools-available) #### [How to Navigate the Maze of AppSec Tools Available](https://true-positives.com/appsec-blog/how-to-navigate-the-maze-of-appsec-tools-available) [Evan Oslick](https://true-positives.com/appsec-blog/author/evan-oslick) The number of tools for performing various application security tests is increasing at a very rapid ... [Read more](https://true-positives.com/appsec-blog/how-to-navigate-the-maze-of-appsec-tools-available) [![a false positive standing out amongst false negatives in application security](https://true-positives.com/hubfs/fales-positives-vs-false-negatives-in-application-security-header.webp)](https://true-positives.com/appsec-blog/false-positives-vs-false-negatives-in-application-security) #### [False Positives vs. False Negatives in Application Security](https://true-positives.com/appsec-blog/false-positives-vs-false-negatives-in-application-security) [Evan Oslick](https://true-positives.com/appsec-blog/author/evan-oslick) DAST vs. SAST: Is It Better to Know Too Much or Too Little? “In our new application security program... [Read more](https://true-positives.com/appsec-blog/false-positives-vs-false-negatives-in-application-security) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Footer%20Logo%20-%20360x90.png)](https://true-positives.com/?hsLang=en) [Managed AppSec](https://true-positives.com/managed_appsec_mssp) [In-House AppSec Support](https://true-positives.com/direct-platform-licensing) [PRO Services](https://true-positives.com/appsec-pro-services) [Why T+](https://true-positives.com/why-true-positives) [Resources](https://vulnerability-atlas.true-positives.com/index.html) [Contact Us](https://true-positives.com/contact-truepositives) © 2026 True Positives, LLC. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "US", "addressLocality" : "Chehalis", "addressRegion" : "Washington", "postalCode" : "98532", "streetAddress" : "110 Villageway Drive" }, "contactPoint" : [ { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-206-854-8999" }, { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-404-314-3929" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "Customer Support", "email" : "tplus-support@true-positives.com" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "General Inquiries", "email" : "contact@true-positives.com" } ], "description" : "True Positives is a trusted AppSec MSSP delivering expert-led DAST and automated vulnerability scanning—reducing risk, eliminating false positives, and cutting overhead without compromising security.", "email" : "info@true-positives.com", "logo" : { "@type" : "ImageObject", "url" : "https://true-positives.com/hs-fs/hubfs/managed-application-security-testing-true-positives-logo.jpg?width=640&height=160&name=managed-application-security-testing-true-positives-logo.jpg" }, "name" : "True Positives", "sameAs" : [ "https://www.linkedin.com/company/truepositives/", "https://www.facebook.com/truepositives/" ], "url" : "https://true-positives.com" } ``` ```json { "@context" : "https://schema.org", "@type" : "Product", "aggregateRating" : { "@type" : "AggregateRating", "ratingValue" : "5", "reviewCount" : "3" }, "name" : "True Positives Managed AppSec Services", "review" : [ { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Brook Schoenfield" }, "name" : "Valuable Insights for Strategic AppSec", "reviewBody" : "True Positives goes beyond simply identifying vulnerabilities in application security testing. Their managed service delivers actionable insights and prioritization, allowing businesses to mitigate risks effectively and allocate resources strategically, all while controlling costs.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Dan Kuykendall" }, "name" : "Reliable Scanning with Human Guidance", "reviewBody" : "True Positives offers a great option for managed scanning, offering a cost-effective solution for quality and reliable scans. They don’t just send reports—they verify vulnerabilities, guide developers, and help prioritize and fix issues.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Julie Richard" }, "name" : "Trusted DAST Partner for Enterprise Needs", "reviewBody" : "Partnering with True Positives for managed DAST services will save you countless hours and headaches. Their expertise and proactive approach streamline identification and prioritization of vulnerabilities while also ensuring development has the information it needs to secure valuable assets.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } } ] } ```