CyCognito Active Security Testing vs http-sniffer (2026)