check-my-headers vs Myra Application Security (2026)