C2 Vendor Risk Management vs Hero Security (2026)