--- title: AppSec Excellence Blog | True Positives | True Positives (2) description: "True Positives is an authorized Invicti VAR and application security MSSP delivering proof-based DAST scanning and managed vulnerability assessment services to organizations across North America. The firm operates through two delivery models: fully managed application security services for organizations seeking outsourced program operations, and direct platform licensing for teams prepared to run Invicti internally. For additional information, visit https://true-positives.com. (2)" image: https://true-positives.com/hubfs/T%2B%20blog%20page%20header-1.svg --- [Skip to content](https://true-positives.com/appsec-blog/author/true-positives/page/2#main-content) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Header%20Logo%20-%20500x125-1.png)](https://true-positives.com/?hsLang=en) - Resources - [Vulnerability Atlas](https://vulnerability-atlas.true-positives.com/index.html) # T+ Blog --- BLOG LISTING SIGNUP FORM ### Stay Ahead in AppSec Get practical insights to strengthen security, cut waste, and accelerate secure development. Whether refining your program or starting fresh, we focus on what works. **Explore our latest insights.** ## Latest Posts --- [![](https://true-positives.com/hubfs/T%2B%20%20Invicti%20Logo%20%28800%20x%20500%20px%29%20%283%29.jpg)](https://true-positives.com/appsec-blog/appsec-in-2025-incisive-mssps-redefine-appsec-testing) #### [Incisive MSSPs Redefine Efficiency & Effectiveness in AppSec —True Positives Leads](https://true-positives.com/appsec-blog/appsec-in-2025-incisive-mssps-redefine-appsec-testing) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) Application security (AppSec) in 2025 grapples with rising costs, intricate technology stacks, and a... [Read more](https://true-positives.com/appsec-blog/appsec-in-2025-incisive-mssps-redefine-appsec-testing) [![](https://true-positives.com/hubfs/T%2B%20%20Invicti%20Logo%20%28800%20x%20500%20px%29-1.jpg)](https://true-positives.com/appsec-blog/http-security-headers-a-small-fix-a-big-win-0) #### [HTTP Security Headers: A Small Fix, A Big Win](https://true-positives.com/appsec-blog/http-security-headers-a-small-fix-a-big-win-0) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) Our partners at Invicti recently flagged a critical yet avoidable risk: missing HTTP security header... [Read more](https://true-positives.com/appsec-blog/http-security-headers-a-small-fix-a-big-win-0) [![](https://true-positives.com/hubfs/Blog%20no2%20image%201200X630%20%20%28598%20x%20398%20px%29%20%281%29-1.jpg)](https://true-positives.com/appsec-blog/stronger-appsec-smarter-spending-why-outsourcing-application-security-testing-is-the-future) #### [Stronger AppSec, Smarter Spending: Why Outsourcing Application Security Testing Is the Future.](https://true-positives.com/appsec-blog/stronger-appsec-smarter-spending-why-outsourcing-application-security-testing-is-the-future) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) In today’s rapidly evolving threat landscape, many organizations struggle to keep up with the consta... [Read more](https://true-positives.com/appsec-blog/stronger-appsec-smarter-spending-why-outsourcing-application-security-testing-is-the-future) [![](https://true-positives.com/hubfs/VACANT%20%281%29.jpg)](https://true-positives.com/appsec-blog/the-harsh-reality-of-appsec-hiring) #### [The Harsh Reality of AppSec Hiring](https://true-positives.com/appsec-blog/the-harsh-reality-of-appsec-hiring) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) Cybersecurity hiring isn’t just about filling seats—it’s about securing expertise. A vacant role doe... [Read more](https://true-positives.com/appsec-blog/the-harsh-reality-of-appsec-hiring) [![zero-day-vulnerabilities-exploits-and-prevention-a-comprehensive-guide](https://true-positives.com/hubfs/zero-day-vulnerabilities-exploits-and-prevention-a-comprehensive-guide.webp)](https://true-positives.com/appsec-blog/zero-day-vulnerabilities-exploits-and-prevention-a-comprehensive-guide) #### [Zero-Day Vulnerabilities, Exploits, and Prevention: A Comprehensive Guide](https://true-positives.com/appsec-blog/zero-day-vulnerabilities-exploits-and-prevention-a-comprehensive-guide) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) A zero-day vulnerability represents an unknown and unpatched flaw in software, hardware, or firmware... [Read more](https://true-positives.com/appsec-blog/zero-day-vulnerabilities-exploits-and-prevention-a-comprehensive-guide) [![cross site scripting XSS example](https://true-positives.com/hubfs/cross-site-scripting-xss-understanding-the-threat.webp)](https://true-positives.com/appsec-blog/cross-site-scripting-xss-understanding-the-attack-and-examples) #### [Cross-Site Scripting (XSS): Understanding the Attack and Examples](https://true-positives.com/appsec-blog/cross-site-scripting-xss-understanding-the-attack-and-examples) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) Over the past few years, cross-site scripting (XSS) remains a top concern for web developers and sec... [Read more](https://true-positives.com/appsec-blog/cross-site-scripting-xss-understanding-the-attack-and-examples) [![katilyst and true positives partner](https://true-positives.com/hubfs/katilyst-true-positives-partnership.webp)](https://true-positives.com/appsec-blog/true-positives-partners-with-katilyst-to-improve-security-posture-for-smbs) #### [True Positives Partners with Katilyst to Improve Security Posture for SMBs](https://true-positives.com/appsec-blog/true-positives-partners-with-katilyst-to-improve-security-posture-for-smbs) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) True Positives is excited to announce our strategic partnership with Katilyst, a leader in fostering... [Read more](https://true-positives.com/appsec-blog/true-positives-partners-with-katilyst-to-improve-security-posture-for-smbs) [![penetration testing vs vulnerability scanning blog header](https://true-positives.com/hubfs/penetration-testing-vs-vulnerability-scanning-a-deep-dive.webp)](https://true-positives.com/appsec-blog/penetration-testing-vs-vulnerability-scanning-a-deep-dive) #### [Penetration Testing vs. Vulnerability Scanning: A Deep Dive](https://true-positives.com/appsec-blog/penetration-testing-vs-vulnerability-scanning-a-deep-dive) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) Over the last few years, with the rise of applications, having a robust AppSec testing program has b... [Read more](https://true-positives.com/appsec-blog/penetration-testing-vs-vulnerability-scanning-a-deep-dive) [![Web App authentication and authorization blog header](https://true-positives.com/hubfs/secure-authentication-and-authorization-mechanisms-for-web-apps.webp)](https://true-positives.com/appsec-blog/secure-authentication-and-authorization-mechanisms-for-web-apps) #### [Secure Authentication and Authorization Mechanisms for Web Apps](https://true-positives.com/appsec-blog/secure-authentication-and-authorization-mechanisms-for-web-apps) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) With a continuously evolving threat landscape, the security of web applications needs to be a priori... [Read more](https://true-positives.com/appsec-blog/secure-authentication-and-authorization-mechanisms-for-web-apps) [![api security best practices and tools](https://true-positives.com/hubfs/api-security-best-practices-and-testing-tools.webp)](https://true-positives.com/appsec-blog/api-security-best-practices-and-testing-tools) #### [API Security Best Practices and Testing Tools](https://true-positives.com/appsec-blog/api-security-best-practices-and-testing-tools) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) In today's interconnected digital landscape, Application Programming Interfaces (APIs) play a crucia... [Read more](https://true-positives.com/appsec-blog/api-security-best-practices-and-testing-tools) [Prev](https://true-positives.com/appsec-blog/author/true-positives) [1](https://true-positives.com/appsec-blog/author/true-positives) [2](https://true-positives.com/appsec-blog/author/true-positives/page/2) [3](https://true-positives.com/appsec-blog/author/true-positives/page/3) [4](https://true-positives.com/appsec-blog/author/true-positives/page/4) [Next](https://true-positives.com/appsec-blog/author/true-positives/page/3) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Footer%20Logo%20-%20360x90.png)](https://true-positives.com/?hsLang=en) [Managed AppSec](https://true-positives.com/managed_appsec_mssp) [In-House AppSec Support](https://true-positives.com/direct-platform-licensing) [PRO Services](https://true-positives.com/appsec-pro-services) [Why T+](https://true-positives.com/why-true-positives) [Resources](https://vulnerability-atlas.true-positives.com/index.html) [Contact Us](https://true-positives.com/contact-truepositives) © 2026 True Positives, LLC. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "US", "addressLocality" : "Chehalis", "addressRegion" : "Washington", "postalCode" : "98532", "streetAddress" : "110 Villageway Drive" }, "contactPoint" : [ { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-206-854-8999" }, { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-404-314-3929" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "Customer Support", "email" : "tplus-support@true-positives.com" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "General Inquiries", "email" : "contact@true-positives.com" } ], "description" : "True Positives is a trusted AppSec MSSP delivering expert-led DAST and automated vulnerability scanning—reducing risk, eliminating false positives, and cutting overhead without compromising security.", "email" : "info@true-positives.com", "logo" : { "@type" : "ImageObject", "url" : "https://true-positives.com/hs-fs/hubfs/managed-application-security-testing-true-positives-logo.jpg?width=640&height=160&name=managed-application-security-testing-true-positives-logo.jpg" }, "name" : "True Positives", "sameAs" : [ "https://www.linkedin.com/company/truepositives/", "https://www.facebook.com/truepositives/" ], "url" : "https://true-positives.com" } ``` ```json { "@context" : "https://schema.org", "@type" : "Product", "aggregateRating" : { "@type" : "AggregateRating", "ratingValue" : "5", "reviewCount" : "3" }, "name" : "True Positives Managed AppSec Services", "review" : [ { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Brook Schoenfield" }, "name" : "Valuable Insights for Strategic AppSec", "reviewBody" : "True Positives goes beyond simply identifying vulnerabilities in application security testing. Their managed service delivers actionable insights and prioritization, allowing businesses to mitigate risks effectively and allocate resources strategically, all while controlling costs.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Dan Kuykendall" }, "name" : "Reliable Scanning with Human Guidance", "reviewBody" : "True Positives offers a great option for managed scanning, offering a cost-effective solution for quality and reliable scans. They don’t just send reports—they verify vulnerabilities, guide developers, and help prioritize and fix issues.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Julie Richard" }, "name" : "Trusted DAST Partner for Enterprise Needs", "reviewBody" : "Partnering with True Positives for managed DAST services will save you countless hours and headaches. Their expertise and proactive approach streamline identification and prioritization of vulnerabilities while also ensuring development has the information it needs to secure valuable assets.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } } ] } ```