C2SEC Extended Security Posture Management (XSPM) vs Zafran Proactive Exposure Hunting (2026)