check-my-headers vs Polaris Infosec WAAP (2026)