--- title: AppSec Excellence Blog | True Positives | Application Security (2) description: Application Security | T+ blog focuses on what works in AppSec & DevSecOps—strategies to strengthen security, cut costs and complexity, and speed delivery of secure products. (2) image: https://true-positives.com/hubfs/T%2B%20blog%20page%20header-1.svg --- [Skip to content](https://true-positives.com/appsec-blog/tag/application-security/page/2#main-content) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Header%20Logo%20-%20500x125-1.png)](https://true-positives.com/?hsLang=en) - Resources - [Vulnerability Atlas](https://vulnerability-atlas.true-positives.com/index.html) # T+ Blog --- BLOG LISTING SIGNUP FORM ### Stay Ahead in AppSec Get practical insights to strengthen security, cut waste, and accelerate secure development. Whether refining your program or starting fresh, we focus on what works. **Explore our latest insights.** ## Latest Posts --- [![penetration testing vs vulnerability scanning blog header](https://true-positives.com/hubfs/penetration-testing-vs-vulnerability-scanning-a-deep-dive.webp)](https://true-positives.com/appsec-blog/penetration-testing-vs-vulnerability-scanning-a-deep-dive) #### [Penetration Testing vs. Vulnerability Scanning: A Deep Dive](https://true-positives.com/appsec-blog/penetration-testing-vs-vulnerability-scanning-a-deep-dive) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) Over the last few years, with the rise of applications, having a robust AppSec testing program has b... [Read more](https://true-positives.com/appsec-blog/penetration-testing-vs-vulnerability-scanning-a-deep-dive) [![application security is a business driver header image](https://true-positives.com/hubfs/application-security-isnt-a-coast-drain-its-a-business-driver.webp)](https://true-positives.com/appsec-blog/application-security-isnt-a-cost-drain-its-a-business-driver) #### [Application Security Isn’t a Cost Drain – It’s a Business Driver](https://true-positives.com/appsec-blog/application-security-isnt-a-cost-drain-its-a-business-driver) [Brian Pavicic](https://true-positives.com/appsec-blog/author/brian-pavicic) When most of us think about our application security we think about it just as an expense – somethin... [Read more](https://true-positives.com/appsec-blog/application-security-isnt-a-cost-drain-its-a-business-driver) [![Web App authentication and authorization blog header](https://true-positives.com/hubfs/secure-authentication-and-authorization-mechanisms-for-web-apps.webp)](https://true-positives.com/appsec-blog/secure-authentication-and-authorization-mechanisms-for-web-apps) #### [Secure Authentication and Authorization Mechanisms for Web Apps](https://true-positives.com/appsec-blog/secure-authentication-and-authorization-mechanisms-for-web-apps) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) With a continuously evolving threat landscape, the security of web applications needs to be a priori... [Read more](https://true-positives.com/appsec-blog/secure-authentication-and-authorization-mechanisms-for-web-apps) [![api security best practices and tools](https://true-positives.com/hubfs/api-security-best-practices-and-testing-tools.webp)](https://true-positives.com/appsec-blog/api-security-best-practices-and-testing-tools) #### [API Security Best Practices and Testing Tools](https://true-positives.com/appsec-blog/api-security-best-practices-and-testing-tools) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) In today's interconnected digital landscape, Application Programming Interfaces (APIs) play a crucia... [Read more](https://true-positives.com/appsec-blog/api-security-best-practices-and-testing-tools) [![crowdstrike outage information](https://true-positives.com/hubfs/crowdstrike-outage-thoughts-and-considerations.webp)](https://true-positives.com/appsec-blog/crowdstrike-outage-thoughts-and-considerations) #### [CrowdStrike Outage Thoughts and Considerations](https://true-positives.com/appsec-blog/crowdstrike-outage-thoughts-and-considerations) [Evan Oslick](https://true-positives.com/appsec-blog/author/evan-oslick) On July 19, 2024, CrowdStrike released a crucial update that unintentionally caused major disruption... [Read more](https://true-positives.com/appsec-blog/crowdstrike-outage-thoughts-and-considerations) [![threat modeling in cybersecurity](https://true-positives.com/hubfs/threat-modeling-in-cybersecurity-a-practical-guide-with-a-focus-on-appsec.webp)](https://true-positives.com/appsec-blog/threat-modeling-in-cybersecurity-appsec-true-positives) #### [Threat Modeling in Cybersecurity: A Practical Guide with a Focus on AppSec](https://true-positives.com/appsec-blog/threat-modeling-in-cybersecurity-appsec-true-positives) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) In the realm of cybersecurity, threat modeling is a vital practice, especially when it comes to appl... [Read more](https://true-positives.com/appsec-blog/threat-modeling-in-cybersecurity-appsec-true-positives) [![startup founder discussing appsec](https://true-positives.com/hubfs/startup-appsec-blog-header.webp)](https://true-positives.com/appsec-blog/why-startups-need-to-integrate-appsec-earlier-in-their-growth) #### [Why Startups Need to Integrate AppSec Earlier in Their Growth](https://true-positives.com/appsec-blog/why-startups-need-to-integrate-appsec-earlier-in-their-growth) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) In today’s digital age, cybersecurity is no longer a concern only for large enterprises. Small busin... [Read more](https://true-positives.com/appsec-blog/why-startups-need-to-integrate-appsec-earlier-in-their-growth) [![zero trust security model header](https://true-positives.com/hubfs/zero-trust-security-models.jpg)](https://true-positives.com/appsec-blog/a-deep-dive-into-zero-trust-security-models) #### [A Deep Dive into Zero Trust Security Models](https://true-positives.com/appsec-blog/a-deep-dive-into-zero-trust-security-models) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) In today's interconnected world, traditional security paradigms are becoming increasingly inadequate... [Read more](https://true-positives.com/appsec-blog/a-deep-dive-into-zero-trust-security-models) [![web application vulnerability scanning header](https://true-positives.com/hubfs/web-application-vulnerability-scanning-comparing-options-for-in-house-vs-outsourcing.webp)](https://true-positives.com/appsec-blog/web-application-vulnerability-scanning-comparing-options-for-in-house-vs-outsourcing) #### [Web Application Vulnerability Scanning: Comparing Options for In-house vs Outsourcing](https://true-positives.com/appsec-blog/web-application-vulnerability-scanning-comparing-options-for-in-house-vs-outsourcing) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) The phrase “You can’t do it all” is more relevant than ever, especially for businesses. In today’s c... [Read more](https://true-positives.com/appsec-blog/web-application-vulnerability-scanning-comparing-options-for-in-house-vs-outsourcing) [![vulnerability management best practices](https://true-positives.com/hubfs/vulnerability-management-best-practices.webp)](https://true-positives.com/appsec-blog/vulnerability-management-best-practices) #### [Vulnerability Management Best Practices - A Comprehensive Guide](https://true-positives.com/appsec-blog/vulnerability-management-best-practices) [True Positives](https://true-positives.com/appsec-blog/author/true-positives) In today's rapidly evolving digital landscape, vulnerability management has become a critical compon... [Read more](https://true-positives.com/appsec-blog/vulnerability-management-best-practices) [Prev](https://true-positives.com/appsec-blog/tag/application-security) [1](https://true-positives.com/appsec-blog/tag/application-security) [2](https://true-positives.com/appsec-blog/tag/application-security/page/2) [3](https://true-positives.com/appsec-blog/tag/application-security/page/3) [Next](https://true-positives.com/appsec-blog/tag/application-security/page/3) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Footer%20Logo%20-%20360x90.png)](https://true-positives.com/?hsLang=en) [Managed AppSec](https://true-positives.com/managed_appsec_mssp) [In-House AppSec Support](https://true-positives.com/direct-platform-licensing) [PRO Services](https://true-positives.com/appsec-pro-services) [Why T+](https://true-positives.com/why-true-positives) [Resources](https://vulnerability-atlas.true-positives.com/index.html) [Contact Us](https://true-positives.com/contact-truepositives) © 2026 True Positives, LLC. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "US", "addressLocality" : "Chehalis", "addressRegion" : "Washington", "postalCode" : "98532", "streetAddress" : "110 Villageway Drive" }, "contactPoint" : [ { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-206-854-8999" }, { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-404-314-3929" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "Customer Support", "email" : "tplus-support@true-positives.com" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "General Inquiries", "email" : "contact@true-positives.com" } ], "description" : "True Positives is a trusted AppSec MSSP delivering expert-led DAST and automated vulnerability scanning—reducing risk, eliminating false positives, and cutting overhead without compromising security.", "email" : "info@true-positives.com", "logo" : { "@type" : "ImageObject", "url" : "https://true-positives.com/hs-fs/hubfs/managed-application-security-testing-true-positives-logo.jpg?width=640&height=160&name=managed-application-security-testing-true-positives-logo.jpg" }, "name" : "True Positives", "sameAs" : [ "https://www.linkedin.com/company/truepositives/", "https://www.facebook.com/truepositives/" ], "url" : "https://true-positives.com" } ``` ```json { "@context" : "https://schema.org", "@type" : "Product", "aggregateRating" : { "@type" : "AggregateRating", "ratingValue" : "5", "reviewCount" : "3" }, "name" : "True Positives Managed AppSec Services", "review" : [ { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Brook Schoenfield" }, "name" : "Valuable Insights for Strategic AppSec", "reviewBody" : "True Positives goes beyond simply identifying vulnerabilities in application security testing. Their managed service delivers actionable insights and prioritization, allowing businesses to mitigate risks effectively and allocate resources strategically, all while controlling costs.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Dan Kuykendall" }, "name" : "Reliable Scanning with Human Guidance", "reviewBody" : "True Positives offers a great option for managed scanning, offering a cost-effective solution for quality and reliable scans. They don’t just send reports—they verify vulnerabilities, guide developers, and help prioritize and fix issues.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Julie Richard" }, "name" : "Trusted DAST Partner for Enterprise Needs", "reviewBody" : "Partnering with True Positives for managed DAST services will save you countless hours and headaches. Their expertise and proactive approach streamline identification and prioritization of vulnerabilities while also ensuring development has the information it needs to secure valuable assets.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } } ] } ```