--- title: AppSec Excellence Blog | True Positives (6) description: T+ blog focuses on what works in AppSec & DevSecOps—strategies to strengthen security, cut costs and complexity, and speed delivery of secure products. (6) image: https://true-positives.com/hubfs/T%2B%20blog%20page%20header-1.svg --- [Skip to content](https://true-positives.com/appsec-blog/page/6#main-content) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Header%20Logo%20-%20500x125-1.png)](https://true-positives.com/?hsLang=en) - Resources - [Vulnerability Atlas](https://vulnerability-atlas.true-positives.com/index.html) # T+ Blog --- BLOG LISTING SIGNUP FORM ### Stay Ahead in AppSec Get practical insights to strengthen security, cut waste, and accelerate secure development. Whether refining your program or starting fresh, we focus on what works. **Explore our latest insights.** ## Latest Posts --- [![appsec staffing crisis being looked at by man through binoculars](https://true-positives.com/hubfs/appsec-staffing-crisis-header.webp)](https://true-positives.com/appsec-blog/how-to-avoid-the-appsec-staffing-crisis) #### [How to Avoid the AppSec Staffing Crisis](https://true-positives.com/appsec-blog/how-to-avoid-the-appsec-staffing-crisis) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) Routes to real progress and success exist beyond outdated and painful hiring practices. Evidence of ... [Read more](https://true-positives.com/appsec-blog/how-to-avoid-the-appsec-staffing-crisis) [![appsec professionals using modern best practices to do more with less](https://true-positives.com/hubfs/modern-appsec-means-doing-more-with-less.webp)](https://true-positives.com/appsec-blog/modern-appsec-means-doing-more-with-less) #### [Modern AppSec Means Doing More with Less](https://true-positives.com/appsec-blog/modern-appsec-means-doing-more-with-less) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) Building software and constantly keeping it secure is a weighty task. The Wall Street Journal report... [Read more](https://true-positives.com/appsec-blog/modern-appsec-means-doing-more-with-less) [![example of appsec tools being used this year](https://true-positives.com/hubfs/AppSec-Tools-in-2023-header.webp)](https://true-positives.com/appsec-blog/how-to-navigate-the-maze-of-appsec-tools-available) #### [How to Navigate the Maze of AppSec Tools Available](https://true-positives.com/appsec-blog/how-to-navigate-the-maze-of-appsec-tools-available) [Evan Oslick](https://true-positives.com/appsec-blog/author/evan-oslick) The number of tools for performing various application security tests is increasing at a very rapid ... [Read more](https://true-positives.com/appsec-blog/how-to-navigate-the-maze-of-appsec-tools-available) [![man in appsec using a guide also know as VAR](https://true-positives.com/hubfs/dont-wade-into-appsec-waters-alone-header.webp)](https://true-positives.com/appsec-blog/dont-wade-into-appsec-waters-alone) #### [Don't Wade Into AppSec Waters Alone](https://true-positives.com/appsec-blog/dont-wade-into-appsec-waters-alone) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) I enjoy fly fishing, but I’m not that good at it. It’s not my full-time sport, nor my day job, so wh... [Read more](https://true-positives.com/appsec-blog/dont-wade-into-appsec-waters-alone) [![shortcuts for appsec being made in a safe way by cybersec professional](https://true-positives.com/hubfs/safe-shortcuts-in-application-security-header.webp)](https://true-positives.com/appsec-blog/the-secret-to-safe-shortcuts-in-application-security) #### [The Secret to Safe Shortcuts in Application Security](https://true-positives.com/appsec-blog/the-secret-to-safe-shortcuts-in-application-security) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) Many of us in the development world rely on our code to be secure to ensure that our customers are s... [Read more](https://true-positives.com/appsec-blog/the-secret-to-safe-shortcuts-in-application-security) [![better mousetrap of Exploit Prediction Scoring System from automation API by first.org](https://true-positives.com/hubfs/Exploit-Prediction-Scoring-System-FIRST.org-better-mousetrap-header.webp)](https://true-positives.com/appsec-blog/epss-automation-api-a-better-vulnerability-mousetrap) #### [EPSS Automation API - A Better Vulnerability Mousetrap](https://true-positives.com/appsec-blog/epss-automation-api-a-better-vulnerability-mousetrap) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) As I noted in April, 2020: [Read more](https://true-positives.com/appsec-blog/epss-automation-api-a-better-vulnerability-mousetrap) [![cybersecurity professional surviving in modern appsec out in the woods](https://true-positives.com/hubfs/Modern-AppSec-Survival-Guide-5-Tips-for-Program-Success.webp)](https://true-positives.com/appsec-blog/modern-appsec-survival-guide-5-tips-for-program-success) #### [Modern AppSec Survival Guide: 5 Tips for Program Success](https://true-positives.com/appsec-blog/modern-appsec-survival-guide-5-tips-for-program-success) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) There’s no easy path to success for a modern AppSec program. You’ll absolutely fail if you don’t com... [Read more](https://true-positives.com/appsec-blog/modern-appsec-survival-guide-5-tips-for-program-success) [![a false positive standing out amongst false negatives in application security](https://true-positives.com/hubfs/fales-positives-vs-false-negatives-in-application-security-header.webp)](https://true-positives.com/appsec-blog/false-positives-vs-false-negatives-in-application-security) #### [False Positives vs. False Negatives in Application Security](https://true-positives.com/appsec-blog/false-positives-vs-false-negatives-in-application-security) [Evan Oslick](https://true-positives.com/appsec-blog/author/evan-oslick) DAST vs. SAST: Is It Better to Know Too Much or Too Little? “In our new application security program... [Read more](https://true-positives.com/appsec-blog/false-positives-vs-false-negatives-in-application-security) [![risk based appsec being assessed and modeled by business man](https://true-positives.com/hubfs/risk-based-appsec-header.webp)](https://true-positives.com/appsec-blog/risk-based-appsec-but-how) #### [Risk-based AppSec, But How?](https://true-positives.com/appsec-blog/risk-based-appsec-but-how) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) Risk - everyone in AppSec or software security talks about it. Pundits advise that we base our decis... [Read more](https://true-positives.com/appsec-blog/risk-based-appsec-but-how) [![AppSec Shared Security Model](https://true-positives.com/hubfs/AppSec-Shared-Security-Model-It-Really-Is-everyone%E2%80%99s-Responsibility-header.webp)](https://true-positives.com/appsec-blog/appsec-shared-security-model-it-really-is-everyones-responsibility) #### [AppSec Shared Security Model: It Really Is Everyone’s Responsibility](https://true-positives.com/appsec-blog/appsec-shared-security-model-it-really-is-everyones-responsibility) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) What AppSec Can Learn from Cloud Security In cloud computing, some of the responsibility for securit... [Read more](https://true-positives.com/appsec-blog/appsec-shared-security-model-it-really-is-everyones-responsibility) [Prev](https://true-positives.com/appsec-blog/page/5) [3](https://true-positives.com/appsec-blog/page/3) [4](https://true-positives.com/appsec-blog/page/4) [5](https://true-positives.com/appsec-blog/page/5) [6](https://true-positives.com/appsec-blog/page/6) [7](https://true-positives.com/appsec-blog/page/7) [Next](https://true-positives.com/appsec-blog/page/7) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Footer%20Logo%20-%20360x90.png)](https://true-positives.com/?hsLang=en) [Managed AppSec](https://true-positives.com/managed_appsec_mssp) [In-House AppSec Support](https://true-positives.com/direct-platform-licensing) [PRO Services](https://true-positives.com/appsec-pro-services) [Why T+](https://true-positives.com/why-true-positives) [Resources](https://vulnerability-atlas.true-positives.com/index.html) [Contact Us](https://true-positives.com/contact-truepositives) © 2026 True Positives, LLC. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "US", "addressLocality" : "Chehalis", "addressRegion" : "Washington", "postalCode" : "98532", "streetAddress" : "110 Villageway Drive" }, "contactPoint" : [ { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-206-854-8999" }, { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-404-314-3929" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "Customer Support", "email" : "tplus-support@true-positives.com" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "General Inquiries", "email" : "contact@true-positives.com" } ], "description" : "True Positives is a trusted AppSec MSSP delivering expert-led DAST and automated vulnerability scanning—reducing risk, eliminating false positives, and cutting overhead without compromising security.", "email" : "info@true-positives.com", "logo" : { "@type" : "ImageObject", "url" : "https://true-positives.com/hs-fs/hubfs/managed-application-security-testing-true-positives-logo.jpg?width=640&height=160&name=managed-application-security-testing-true-positives-logo.jpg" }, "name" : "True Positives", "sameAs" : [ "https://www.linkedin.com/company/truepositives/", "https://www.facebook.com/truepositives/" ], "url" : "https://true-positives.com" } ``` ```json { "@context" : "https://schema.org", "@type" : "Product", "aggregateRating" : { "@type" : "AggregateRating", "ratingValue" : "5", "reviewCount" : "3" }, "name" : "True Positives Managed AppSec Services", "review" : [ { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Brook Schoenfield" }, "name" : "Valuable Insights for Strategic AppSec", "reviewBody" : "True Positives goes beyond simply identifying vulnerabilities in application security testing. Their managed service delivers actionable insights and prioritization, allowing businesses to mitigate risks effectively and allocate resources strategically, all while controlling costs.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Dan Kuykendall" }, "name" : "Reliable Scanning with Human Guidance", "reviewBody" : "True Positives offers a great option for managed scanning, offering a cost-effective solution for quality and reliable scans. They don’t just send reports—they verify vulnerabilities, guide developers, and help prioritize and fix issues.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Julie Richard" }, "name" : "Trusted DAST Partner for Enterprise Needs", "reviewBody" : "Partnering with True Positives for managed DAST services will save you countless hours and headaches. Their expertise and proactive approach streamline identification and prioritization of vulnerabilities while also ensuring development has the information it needs to secure valuable assets.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } } ] } ```