--- title: Platform Licensing | True Positives --- [Skip to content](https://true-positives.com/platform-licensing#main-content) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Header%20Logo%20-%20500x125-1.png)](https://true-positives.com/?hsLang=en) - Resources - [Vulnerability Atlas](https://vulnerability-atlas.true-positives.com/index.html) Direct Platform Licensing  ·  Powered by Invicti DAST # Industry-Leading DAST. Operated by Your Team. True Positives delivers direct licensing access to Invicti's proof-based DAST and API application security testing platform for in-house AppSec programs. Security teams gain autonomous control of the industry's most accurate vulnerability detection engine, supported by a partnership grounded in two decades of application security automation experience. ![AppSec Solutions Proudly Powered by Invicti](https://true-positives.com/hubfs/Copy%20of%20Powered%20Proudly%20by%20(10).svg) [Talk to an AppSec Expert](https://true-positives.com/contact-truepositives?hsLang=en) [Compare MSSP vs. In-House Options](https://true-positives.com/ast-solution-pathways?hsLang=en) [Start with a Free Scan](https://true-positives.com/evaluation-scan?hsLang=en) What Direct Licensing Provides ## Direct Control. Proven Technology. Expert Backing. Invicti's proof-based scanning engine confirms exploitable vulnerabilities with 99.98% accuracy, eliminating the false-positive noise that consumes security team capacity. Direct licensing places that technology under your team's operational control, with True Positives available as a licensing partner and optional expert resource. Direct Licensing & Control Your team operates the Invicti platform with full configuration authority over scan targets, schedules, and reporting outputs. True Positives handles licensing, procurement, and contract management, eliminating the overhead of a direct vendor relationship while preserving complete operational autonomy. Flexible Deployment & Expert Support Cloud-hosted deployment is standard. On-premises deployment is available as a Professional tier add-on for organizations with network segmentation or data-handling requirements that preclude third-party scan access. The optional Deployment Assurance service delivers sixty days of dedicated implementation support from experienced AppSec practitioners, beginning at the time of purchase, to accelerate platform adoption and establish a calibrated operational baseline. Platform Tiers ## Two Tiers Aligned to Program Maturity and Operational Requirements Both tiers deliver Invicti's proof-based scanning foundation. The selection between them is determined by integration requirements, workflow automation needs, and compliance obligations rather than scan accuracy, which is consistent across both. Entry Tier Essentials The foundation for a strong AppSec program. Core DAST, web application and API scanning, risk scoring, and runtime SCA in a deployment that delivers structured vulnerability detection from day one without requiring CI/CD integration. Annual licensing from $5,994 Advanced Tier Professional The appropriate tier for scaling programs that require DevSecOps pipeline integration, workflow automation, SSO, and compliance reporting. All Essentials capabilities are included alongside material additions for larger application portfolios and regulated environments. Contact True Positives for pricing Key Differentiators: Essentials → Professional Capabilities unlocked when upgrading to the Professional tier. AI-Powered DAST Advanced Automations CI/CD Integration Ticketing Integration Communications Integration \* AST Connectors Single Sign-On (SSO) Advanced Reports Dynamic URL Scanning PCI ASV \* \* Coming Soon per Invicti platform roadmap View Feature Comparison Detail Tier Comparison ### Essentials vs. Professional: Feature Breakdown Items marked \* are designated coming soon on the Invicti platform roadmap. × | Feature | Essentials | Professional | | --- | --- | --- | | Scanning Capabilities | | | | DAST | ✓ | ✓ | | AI-Powered DAST | — | ✓ | | Web Application Scanning | ✓ | ✓ | | Standard API Scanning | ✓ | ✓ | | LLM Scanning | ✓ | ✓ | | Predictive Risk Scoring | ✓ | ✓ | | Runtime SCA | ✓ | ✓ | | Dynamic URL Scanning | — | ✓ | | PCI ASV \* | — | ✓ | | Access & Administration | | | | Standard RBAC | ✓ | ✓ | | Single Sign-On (SSO) | — | ✓ | | Dashboards & Reporting | | | | Standard Dashboards | ✓ | ✓ | | Standard Reports | ✓ | — | | Advanced Reports | — | ✓ | | Personal Email Notifications | ✓ | — | | Automations & Workflows | | | | Advanced Automations | — | ✓ | | Integrations | | | | Ticketing | — | ✓ | | CI/CD | — | ✓ | | Communications \* | — | ✓ | | AST Connectors | — | ✓ | | Internal App Scanning (Agents) | ✓ | ✓ | | Support | | | | Standard Support | ✓ | ✓ | | Deployment | | | | Cloud Hosting | ✓ | ✓ | | On-Premises (Add-On) | — | ✓ | \* Coming Soon per Invicti platform roadmap  ·  Source: invicti.com/pricing, retrieved February 2026 T+ Service Add-Ons ## Extended Services Available to Licensed Platform Subscribers True Positives offers two practitioner-delivered service add-ons for organizations that require structured onboarding support or deeper manual validation beyond what automated scanning provides. 01 Implementation Service • Fee-Based Add-On Deployment Assurance **Included as standard with Managed AppSec.** Organizations enrolled in a True Positives Managed AppSec subscription receive this caliber of practitioner-led implementation support throughout the duration of their engagement, at no additional charge. Deployment Assurance is offered as a fee-based addition exclusively for platform licensing customers. For organizations that require structured platform onboarding with a defined engagement scope and accountable practitioner oversight, Deployment Assurance provides sixty days of dedicated implementation support beginning at the time of purchase. Each engagement is led by a seasoned application security practitioner and scoped to produce a fully operational, baseline-calibrated deployment. - Dedicated AppSec practitioner assigned for the full sixty-day onboarding period - Scan target configuration, scheduling, and scope validation across eligible FQDNs - Workflow and reporting structure established in alignment with your program requirements - Baseline vulnerability analysis and remediation prioritization guidance at engagement close - Eligibility and tier confirmation conducted at the time of licensing consultation 02 Security Assessment Service Manual Penetration Testing Automated scanning addresses the majority of detectable vulnerabilities efficiently and continuously. Organizations managing business-critical applications or operating under regulatory obligations may require manual coverage that extends beyond automated detection boundaries. Expert penetration testers address business logic vulnerabilities, authentication bypass scenarios, and complex attack chains that automated tools cannot reliably identify. - Targeted manual testing for business logic and advanced attack vectors - Simulated attack scenarios modeled on documented threat actor techniques - Flexible engagement structure: one-time assessment or recurring validation - Exploitability confirmation with resolution guidance and remediation planning - Available on demand or on schedule for any active licensed scan target [Talk to an AppSec Expert](https://true-positives.com/contact-truepositives?hsLang=en) Why License Through True Positives ## An Exclusive Invicti Partnership Built on Practitioner Experience True Positives holds an exclusive Invicti MSSP and AppSec VAR partnership. Licensing through T+ provides access to platform expertise accumulated through direct deployment experience, not solely through vendor certification. Practitioner Heritage T+ founders helped establish application security automation at @stake, NTObjectives, and Veracode, then advanced the discipline at Cisco, Microsoft, Intel, and Rapid7. Platform recommendations reflect deployment experience, not vendor positioning. Exclusive Platform Partnership As Invicti's exclusive SMB MSSP and VAR partner, True Positives receives direct platform training, early feature access, and escalation paths that standard reseller relationships do not provide. Simplified Procurement True Positives manages the licensing relationship, renewal cycles, add-on procurement, and vendor coordination. Your team operates the platform while T+ manages the commercial overhead. Next Step ## The Right Tier for Your Program Is One Conversation Away Schedule a no-cost licensing consultation with True Positives. Our team will evaluate your application portfolio, integration requirements, and compliance obligations, then recommend the tier and configuration most appropriate for your program. If you prefer to see real Invicti findings in your environment before that conversation, the complimentary evaluation scan is where to begin. [Talk to an AppSec Expert](https://true-positives.com/contact-truepositives?hsLang=en) [Compare Managed vs. Direct](https://true-positives.com/ast-solution-pathways?hsLang=en) [Start with a Free Scan](https://true-positives.com/evaluation-scan?hsLang=en) [![True Positives](https://true-positives.com/hubfs/HubSpot%20Footer%20Logo%20-%20360x90.png)](https://true-positives.com/?hsLang=en) [Managed AppSec](https://true-positives.com/managed_appsec_mssp?hsLang=en) [In-House AppSec Support](https://true-positives.com/direct-platform-licensing?hsLang=en) [PRO Services](https://true-positives.com/appsec-pro-services?hsLang=en) [Why T+](https://true-positives.com/why-true-positives?hsLang=en) [Resources](https://vulnerability-atlas.true-positives.com/index.html) [Contact Us](https://true-positives.com/contact-truepositives?hsLang=en) © 2026 True Positives, LLC. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "US", "addressLocality" : "Chehalis", "addressRegion" : "Washington", "postalCode" : "98532", "streetAddress" : "110 Villageway Drive" }, "contactPoint" : [ { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-206-854-8999" }, { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "English", "contactType" : "Sales", "telephone" : "+1-404-314-3929" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "Customer Support", "email" : "tplus-support@true-positives.com" }, { "@type" : "ContactPoint", "availableLanguage" : "English", "contactType" : "General Inquiries", "email" : "contact@true-positives.com" } ], "description" : "True Positives is a trusted AppSec MSSP delivering expert-led DAST and automated vulnerability scanning—reducing risk, eliminating false positives, and cutting overhead without compromising security.", "email" : "info@true-positives.com", "logo" : { "@type" : "ImageObject", "url" : "https://true-positives.com/hs-fs/hubfs/managed-application-security-testing-true-positives-logo.jpg?width=640&height=160&name=managed-application-security-testing-true-positives-logo.jpg" }, "name" : "True Positives", "sameAs" : [ "https://www.linkedin.com/company/truepositives/", "https://www.facebook.com/truepositives/" ], "url" : "https://true-positives.com" } ``` ```json { "@context" : "https://schema.org", "@type" : "Product", "aggregateRating" : { "@type" : "AggregateRating", "ratingValue" : "5", "reviewCount" : "3" }, "name" : "True Positives Managed AppSec Services", "review" : [ { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Brook Schoenfield" }, "name" : "Valuable Insights for Strategic AppSec", "reviewBody" : "True Positives goes beyond simply identifying vulnerabilities in application security testing. Their managed service delivers actionable insights and prioritization, allowing businesses to mitigate risks effectively and allocate resources strategically, all while controlling costs.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Dan Kuykendall" }, "name" : "Reliable Scanning with Human Guidance", "reviewBody" : "True Positives offers a great option for managed scanning, offering a cost-effective solution for quality and reliable scans. They don’t just send reports—they verify vulnerabilities, guide developers, and help prioritize and fix issues.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } }, { "@type" : "Review", "author" : { "@type" : "Person", "name" : "Julie Richard" }, "name" : "Trusted DAST Partner for Enterprise Needs", "reviewBody" : "Partnering with True Positives for managed DAST services will save you countless hours and headaches. Their expertise and proactive approach streamline identification and prioritization of vulnerabilities while also ensuring development has the information it needs to secure valuable assets.", "reviewRating" : { "@type" : "Rating", "bestRating" : "5", "ratingValue" : "5" } } ] } ```