DefendLab Runtime Validation vs Strike Manual Pentesting Project (2026)